samba - Mar 2002 - NT_STATUS_ACCESS_DENIED after successfully joining domain

I've successfully added my Solaris 2.8 samba (2.2.2) host to a 
2K domain.

The domain is MY_DOM, the PDC is MY_PDC (well they're not, but
I've just done a global sub in this message :-)

However, I get the following error in the log when a user tries 
to use a share (or browse the available shares).

rpc_client/cli_netlogon.c:cli_net_auth2(160)
  cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
rpc_client/cli_login.c:cli_nt_setup_creds(72)
  cli_nt_setup_creds: auth2 challenge failed
smbd/password.c:connect_to_domain_password_server(1372)
  connect_to_domain_password_server: unable to setup the PDC
  credentials to machine MY_PDC.  Error was :
  NT_STATUS_ACCESS_DENIED.
smbd/password.c:domain_client_validate(1591)
  domain_client_validate: Domain password server not available.

Here's my config file:

[global]
	workgroup = MY_DOM
	encrypt passwords = Yes
	security = DOMAIN
	password server = *

[test]
	comment = test share
	path = /home/test
	read only = No
	guest ok = Yes

The users I've tried to login with exist on both the 2K domain and
the samba host.

Other problems I've encountered (that may or may not be relevent):

1. Despite "guest ok" on the share, every time I try to connect
   from my 2K/XP boxes, I get the login dialog.
2. Trying to run smbpasswd as a user asks for old password (which
   there isn't) and always fails with "machine 127.0.0.1 rejected
   the password change: Error was : The specified password is
   invalid.  Failed to chnage password for my_user".

Thanks.

	- Dale.

Did you setup the initial smbpasswd file?  (the text file that holds the
accounts info with the same name as the binary executable, bad idea in my
opinion)  It's usually located in the same place as your smb.conf.  Just my
first thought.  Also, try setting the password server to a specific server
just until you're done troubleshooting.

--
Brian
----- Original Message -----
From: "Dale Peakall" <dale.peakall@bit-arts.com>
To: <samba@lists.samba.org>
Sent: Tuesday, March 26, 2002 5:13 AM
Subject: [Samba] NT_STATUS_ACCESS_DENIED after successfully joining domain

> I've successfully added my Solaris 2.8 samba (2.2.2) host to a
> 2K domain.
>
> The domain is MY_DOM, the PDC is MY_PDC (well they're not, but
> I've just done a global sub in this message :-)
>
> However, I get the following error in the log when a user tries
> to use a share (or browse the available shares).
>
> rpc_client/cli_netlogon.c:cli_net_auth2(160)
>   cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
> rpc_client/cli_login.c:cli_nt_setup_creds(72)
>   cli_nt_setup_creds: auth2 challenge failed
> smbd/password.c:connect_to_domain_password_server(1372)
>   connect_to_domain_password_server: unable to setup the PDC
>   credentials to machine MY_PDC.  Error was :
>   NT_STATUS_ACCESS_DENIED.
> smbd/password.c:domain_client_validate(1591)
>   domain_client_validate: Domain password server not available.
>
> Here's my config file:
>
> [global]
> workgroup = MY_DOM
> encrypt passwords = Yes
> security = DOMAIN
> password server = *
>
> [test]
> comment = test share
> path = /home/test
> read only = No
> guest ok = Yes
>
> The users I've tried to login with exist on both the 2K domain and
> the samba host.
>
> Other problems I've encountered (that may or may not be relevent):
>
> 1. Despite "guest ok" on the share, every time I try to connect
>    from my 2K/XP boxes, I get the login dialog.
> 2. Trying to run smbpasswd as a user asks for old password (which
>    there isn't) and always fails with "machine 127.0.0.1 rejected
>    the password change: Error was : The specified password is
>    invalid.  Failed to chnage password for my_user".
>
> Thanks.
>
> - Dale.
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>