Hi, I am in dire need of some help. I have no problems connecting to shares with my W95/98 clients, but big problems with W2K. The same username / password is used on both the PC and SAMBA (and NIS - I am using Soalris 2.7 for my SAMBA server). When I try to connect to a share from the W2K client, I get the message "Access Denied". I have looked set nmbd / smbd to run at debug level 9 and it looks as though it is doing something sensible, but failing! I have added soem of this to the end of the mail. The thing that is really confusing me is that when I install Reflections NFS software (which I don't want to use), and enable NIS authentication, then everything works OK! Finally, I can connect to the "netlogon" service, but that is all. The options for this service are no different to any other shares. My smb.conf is attached. I hope that someone can point me in the right direction as I am beating my head against the wall here. Andrew. The client log is here (trimmed) ========================= [2002/02/14 11:19:34, 3] smbd/sec_ctx.c:set_sec_ctx(319) 12 user groups: 21001 23004 23001 23003 3001 13401 12001 9001 16001 16004 22001 16005 [2002/02/14 11:19:34, 5] smbd/uid.c:change_to_user(201) change_to_user uid=(0,1005) gid=(0,21001) [2002/02/14 11:19:34, 3] smbd/vfs.c:vfs_ChDir(669) vfs_ChDir to /export/t12s0 [2002/02/14 11:19:34, 1] smbd/service.c:make_connection(615) sitala (141.187.60.20) connect to service t12s0 as user akkemp (uid=1005, gid=21001) (pid 14584) [2002/02/14 11:19:34, 3] smbd/sec_ctx.c:set_sec_ctx(314) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2002/02/14 11:19:34, 5] smbd/uid.c:change_to_root_user(216) change_to_root_user: now uid=(0,0) gid=(0,0) [2002/02/14 11:19:34, 3] smbd/reply.c:reply_tcon_and_X(395) tconX service=t12s0 user=akkemp [2002/02/14 11:19:34, 5] lib/util.c:show_msg(275) size=49 smb_com=0x75 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=1 [2002/02/14 11:19:34, 5] lib/util.c:show_msg(281) smb_tid=5 smb_pid=65279 smb_uid=101 smb_mid=5313 smt_wct=3 [2002/02/14 11:19:34, 5] lib/util.c:show_msg(286) smb_vwv[0]=255 (0xFF) [2002/02/14 11:19:34, 5] lib/util.c:show_msg(286) smb_vwv[1]=0 (0x0) [2002/02/14 11:19:34, 5] lib/util.c:show_msg(286) smb_vwv[2]=1 (0x1) [2002/02/14 11:19:34, 5] lib/util.c:show_msg(291) smb_bcc=8 [2002/02/14 11:19:34, 6] lib/util_sock.c:write_socket(518) write_socket(12,53) [2002/02/14 11:19:34, 6] lib/util_sock.c:write_socket(521) -- ************************************************************************ * Andrew Kemp * * * Methodology Group Leader * phone : (01628) 504781 (direct) * * Fujitsu Microelectronics Europe * : (01628) 504700 (recep) * * Network House * fax : (01628) 504777 * * Norreys Drive * CVNS : (79540) 4781 * * Maidenhead Berks. SL6 4FJ. U.K. * * * email : mailto:andrew.kemp@acg.fujitsu-fme.com * ************************************************************************ -------------- next part -------------- # Samba config file created using SWAT # from buffy (141.187.60.43) # Date: 2002/01/25 09:49:01 # Global parameters [global] workgroup = MIXED server string = Samba Server - %v encrypt passwords = Yes log file = /usr/local/samba/var/log.%m domain logons = yes smb passwd file = /usr/local/samba/private/smbpasswd nt smb support = Yes max log size = 50 time server = Yes domain logons = Yes os level = 33 dns proxy = No invalid users = root bin daemon adm sync shutdown halt mail news uucp operator gopher hosts allow = 141.187.60. 127. domain master = yes local master = yes os level = 50 preferred master = yes logon script = %U.bat [homes] comment = %u home directory read only = No browseable = No [tmp] comment = Temporary file space path = /tmp read only = No guest ok = Yes browseable = Yes [UNIX project] comment = UNIX project areas path = /project read only = No browseable = Yes [UNIX test] comment = UNIX test areas path = /test browseable = Yes [UNIX library] comment = UNIX library areas path = /library browseable = Yes [UNIX software] comment = UNIX software areas path = /software browseable = Yes [UNIX archive] comment = UNIX archive area - read only path = /export/t13s0 browseable = Yes [UNIX users] comment = UNIX user areas path = /user browseable = Yes [USR local] comment = /usr/local path = /export/t8s0/local browseable = Yes [t12s0] comment = Non NFS network disk path = /export/t12s0 browseable = Yes [PCShare] comment = Shared PC area on UNIX system path = /library/pcshare browseable = Yes [PCBackup] comment = Backup area for PCs on UNIX system path = /library/pcback browseable = Yes [Datasheets] comment = Datasheet area on UNIX system path = /library/internet/DataSheets browseable = Yes [Print_pontus] comment = Sparc Printer E path = /tmp read only = No guest ok = Yes printable = Yes printer name = pontus [Print_hades] comment = HP 5000GN PCL6 / PS2 path = /tmp read only = No guest ok = Yes printable = Yes printer name = hades [netlogon] comment = User login scripts path = /usr/local/samba/netlogin browsable = yes
What version of Samba?> -----Original Message----- > From: samba-admin@lists.samba.org > [mailto:samba-admin@lists.samba.org]On > Behalf Of Andrew Kemp > Sent: Thursday, February 14, 2002 6:30 AM > To: Samba List > Subject: [Samba] W2K problems > > > Hi, > > I am in dire need of some help. I have no problems connecting > to shares > with my W95/98 clients, but big problems with W2K. > > The same username / password is used on both the PC and SAMBA > (and NIS - > I am using Soalris 2.7 for my SAMBA server). When I try to > connect to a share > from the W2K client, I get the message "Access Denied". > > I have looked set nmbd / smbd to run at debug level 9 and it looks as > though it is doing something sensible, but failing! I have > added soem of this > to the end of the mail. > > > The thing that is really confusing me is that when I install > Reflections > NFS software (which I don't want to use), and enable NIS > authentication, > then everything works OK! > > Finally, I can connect to the "netlogon" service, but that is all. The > options for this service are no different to any other > shares. My smb.conf > is attached. > > > I hope that someone can point me in the right direction as I > am beating > my head against the wall here. > > Andrew. > > > > > The client log is here (trimmed) > > =========================> > [2002/02/14 11:19:34, 3] smbd/sec_ctx.c:set_sec_ctx(319) > 12 user groups: > 21001 23004 23001 23003 3001 13401 12001 9001 16001 16004 > 22001 16005 > [2002/02/14 11:19:34, 5] smbd/uid.c:change_to_user(201) > change_to_user uid=(0,1005) gid=(0,21001) > [2002/02/14 11:19:34, 3] smbd/vfs.c:vfs_ChDir(669) > vfs_ChDir to /export/t12s0 > [2002/02/14 11:19:34, 1] smbd/service.c:make_connection(615) > sitala (141.187.60.20) connect to service t12s0 as user > akkemp (uid=1005, > gid=21001) (pid 14584) > [2002/02/14 11:19:34, 3] smbd/sec_ctx.c:set_sec_ctx(314) > setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 > [2002/02/14 11:19:34, 5] smbd/uid.c:change_to_root_user(216) > change_to_root_user: now uid=(0,0) gid=(0,0) > [2002/02/14 11:19:34, 3] smbd/reply.c:reply_tcon_and_X(395) > tconX service=t12s0 user=akkemp > [2002/02/14 11:19:34, 5] lib/util.c:show_msg(275) > size=49 > smb_com=0x75 > smb_rcls=0 > smb_reh=0 > smb_err=0 > smb_flg=136 > smb_flg2=1 > [2002/02/14 11:19:34, 5] lib/util.c:show_msg(281) > smb_tid=5 > smb_pid=65279 > smb_uid=101 > smb_mid=5313 > smt_wct=3 > [2002/02/14 11:19:34, 5] lib/util.c:show_msg(286) > smb_vwv[0]=255 (0xFF) > [2002/02/14 11:19:34, 5] lib/util.c:show_msg(286) > smb_vwv[1]=0 (0x0) > [2002/02/14 11:19:34, 5] lib/util.c:show_msg(286) > smb_vwv[2]=1 (0x1) > [2002/02/14 11:19:34, 5] lib/util.c:show_msg(291) > smb_bcc=8 > [2002/02/14 11:19:34, 6] lib/util_sock.c:write_socket(518) > write_socket(12,53) > [2002/02/14 11:19:34, 6] lib/util_sock.c:write_socket(521) > -- > > ************************************************************** > ********** > * Andrew Kemp * > * > * Methodology Group Leader * phone : (01628) 504781 > (direct) * > * Fujitsu Microelectronics Europe * : (01628) 504700 > (recep) * > * Network House * fax : (01628) 504777 > * > * Norreys Drive * CVNS : (79540) 4781 > * > * Maidenhead Berks. SL6 4FJ. U.K. * > * > * email : mailto:andrew.kemp@acg.fujitsu-fme.com > * > ************************************************************** > **********