Bug 438817

Ok so I checked again and it seems that as of today I have no access to any
share or printer.  This was recently updated with yum.  My samba users and
shares are all the same as they have always been, everything has just quit
working.  All I get from anywhere now is "access denied"

My messages file is filled up with this:

Mar 25 21:53:51 arturo winbindd[1928]: [2008/03/25 21:53:51, 0]
nsswitch/winbindd_passdb.c:sid_to_name(130)
Mar 25 21:53:51 arturo winbindd[1928]:   Possible deadlock: Trying to lookup SID
S-1-5-2 with passdb backend
Mar 25 21:53:51 arturo winbindd[1928]: [2008/03/25 21:53:51, 0]
nsswitch/winbindd_passdb.c:sid_to_name(130)
Mar 25 21:53:51 arturo winbindd[1928]:   Possible deadlock: Trying to lookup SID
S-1-5-11 with passdb backend
Mar 25 21:54:01 arturo winbindd[1928]: [2008/03/25 21:54:01, 0]
nsswitch/winbindd_passdb.c:sid_to_name(130)
Mar 25 21:54:01 arturo winbindd[1928]:   Possible deadlock: Trying to lookup SID
S-1-1-0 with passdb backend
Mar 25 21:54:01 arturo winbindd[1928]: [2008/03/25 21:54:01, 0]
nsswitch/winbindd_passdb.c:sid_to_name(130)
Mar 25 21:54:01 arturo winbindd[1928]:   Possible deadlock: Trying to lookup SID
S-1-5-2 with passdb backend
Mar 25 21:54:01 arturo winbindd[1928]: [2008/03/25 21:54:01, 0]
nsswitch/winbindd_passdb.c:sid_to_name(130)
Mar 25 21:54:01 arturo winbindd[1928]:   Possible deadlock: Trying to lookup SID
S-1-5-11 with passdb backend

I'll be out of town until Monday but after that happy to provide any useful data.

Please attach smb.conf configuration file and log files for winbindd and one of
the machine showing this problem

Created attachment 299151 [details]
samba configuration file

Created attachment 299152 [details]
winbindd.log

Created attachment 299153 [details]
This machine seems to be able to access the shares

Created attachment 299154 [details]
This machine was not able to access any shares or printers

The smb.conf looks strange,
for example you have domain master = yes but domain logons is not.

Also please I need log a level 10, so please raise the log level to 10 (log
level = 10 in smb.conf and then try again to connect with a machine. Report log
files.

Also make sure to set back log level to 0 or 1 when you are finished as it may
fill up logs very fast (and slow down you machine considerably).

Created attachment 299235 [details]
Log file - changed logging level

Created attachment 299236 [details]
Log file - changed logging level

Created attachment 299237 [details]
Log file - changed logging level

Created attachment 299238 [details]
Log file - changed logging level

Created attachment 299239 [details]
Log file - changed logging level

I have attached all the log files that changed with the new logging level, and
attempted access.

Samba is still not functioning, is there any progress here?  Is there any
additional information I can provide to help?

I have re-done my smb.conf yet still getting the same issues.  Attaching the new
file.

Created attachment 301451 [details]
smb.conf

[root@arturo test]# smbclient //arturo/print\$ -U'uuuu%pppp'
timeout connecting to 192.168.1.4:445
timeout connecting to 192.168.1.4:139
Error connecting to 192.168.1.4 (Operation already in progress)
Connection to arturo failed (Error NT_STATUS_ACCESS_DENIED)

Yeah, this still isn't working.  Any news?

rpcclient -Uuuuu%pppp -c 'adddriver "Windows NT x86" \
"HP DeskJet 1200C/PS:PSCRIPT5.DLL: \
HP1200C1.PPD:PS5UI.DLL:PSCRIPT.HLP: \
NULL:RAW:PSCRIPT.NTF' arturo
timeout connecting to 192.168.1.4:445
timeout connecting to 192.168.1.4:139
Error connecting to 192.168.1.4 (Operation already in progress)
cli_start_connection: failed to connect to ARTURO<20> (192.168.1.4). Error
NT_STATUS_ACCESS_DENIED
Cannot connect to server.  Error was NT_STATUS_ACCESS_DENIED

I would love so much if this worked the way it should.

Can you provide me the output of the following commands?
/sbin/ifconfig
/sbin/iptables -L -v --line-numbers
testparm -v

Created attachment 302330 [details]
Requested test output

Minor edits made to this file for security - If there is a problem, let me
know.

I can't be sure because your iptables actually resolved names or something, but
can you remove your iptables configuration and see if the problem keeps happening ?
It seem to me you are missing to accept any packaet coming in from the lo
interface, and that would explain the timeouts you see as in the Block table,
unfortunately you have a DROP rule and not a more correct REJECT rule.

I'll be damned, changing the first rule from accepting from 127.0.0.1 to accept
from interface lo brings back my smbtree.  Did something change in the way samba
handles this network access?  I'm still getting a log full of:
Apr 14 09:32:35 arturo winbindd[18645]: [2008/04/14 09:32:35, 0]
nsswitch/winbindd_passdb.c:sid_to_name(130)
Apr 14 09:32:35 arturo winbindd[18645]:   Possible deadlock: Trying to lookup
SID S-1-5-2 with passdb backend
Apr 14 09:32:35 arturo winbindd[18645]: [2008/04/14 09:32:35, 0]
nsswitch/winbindd_passdb.c:sid_to_name(130)
Apr 14 09:32:35 arturo winbindd[18645]:   Possible deadlock: Trying to lookup
SID S-1-5-11 with passdb backend
Apr 14 09:32:45 arturo winbindd[18645]: [2008/04/14 09:32:45, 0]
nsswitch/winbindd_passdb.c:sid_to_name(130)
Apr 14 09:32:45 arturo winbindd[18645]:   Possible deadlock: Trying to lookup
SID S-1-1-0 with passdb backend
Apr 14 09:32:45 arturo winbindd[18645]: [2008/04/14 09:32:45, 0]
nsswitch/winbindd_passdb.c:sid_to_name(130)
Apr 14 09:32:45 arturo winbindd[18645]:   Possible deadlock: Trying to lookup
SID S-1-5-2 with passdb backend
Apr 14 09:32:45 arturo winbindd[18645]: [2008/04/14 09:32:45, 0]
nsswitch/winbindd_passdb.c:sid_to_name(130)
Apr 14 09:32:45 arturo winbindd[18645]:   Possible deadlock: Trying to lookup
SID S-1-5-11 with passdb backend

I guess that must be a separate issue?

Different problem, see #441499.
Closing this one as it is not a bug.