samba - Sep 2005 - Auth problem

Hi All,


I am experiencing a strange problem with authentication process. Everything
was going very fine until today, my users account stop to login on domain,
but the administrator account is the only one that can do it without
problems. I get this error log.  

Sep 19 11:04:32 zeus smbd[3227]: [2005/09/19 11:04:32, 2]
smbd/sesssetup.c:setup_new_vc_session(608)
Sep 19 11:04:32 zeus smbd[3227]:   setup_new_vc_session: New VC == 0, if
NT4.x compatible we would close all old resources.
Sep 19 11:04:32 zeus smbd[3227]: [2005/09/19 11:04:32, 2]
smbd/sesssetup.c:setup_new_vc_session(608)
Sep 19 11:04:32 zeus smbd[3227]:   setup_new_vc_session: New VC == 0, if
NT4.x compatible we would close all old resources.
Sep 19 11:04:32 zeus smbd[3227]: [2005/09/19 11:04:32, 2]
lib/smbldap.c:smbldap_open_connection(692)
Sep 19 11:04:32 zeus smbd[3227]:   smbldap_open_connection: connection
opened
Sep 19 11:04:32 zeus slapd[2123]: conn=29 fd=20 ACCEPT from
IP=127.0.0.1:32806 (IP=0.0.0.0:389)
Sep 19 11:04:32 zeus slapd[2123]: conn=29 op=0 BIND
dn="cn=admin,dc=cultura,dc=gov,dc=br" method=128
Sep 19 11:04:32 zeus slapd[2123]: conn=29 op=0 BIND
dn="cn=admin,dc=cultura,dc=gov,dc=br" mech=SIMPLE ssf=0
Sep 19 11:04:32 zeus slapd[2123]: conn=29 op=0 RESULT tag=97 err=0 textSep 19
11:04:32 zeus slapd[2123]: conn=29 op=1 SRCH base="" scope=0 deref=0
filter="(objectClass=*)"
Sep 19 11:04:32 zeus slapd[2123]: conn=29 op=1 SRCH attr=supportedControl
Sep 19 11:04:32 zeus slapd[2123]: conn=29 op=1 SEARCH RESULT tag=101 err=0
nentries=1 textSep 19 11:04:32 zeus slapd[2123]: conn=29 op=2 SRCH
base="dc=cultura,dc=gov,dc=br" scope=2 deref=0
filter="(&(uid=testuser)(objectClass=sambaSamAccount))"
Sep 19 11:04:32 zeus slapd[2123]: conn=29 op=2 SRCH attr=uid uidNumber
gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange sambaPwdMustChange
sambaLogonTime sambaLogoffTime sambaKickoffTime cn displayName
sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description
sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword
sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial
sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory
modifyTimestamp sambaLogonHours modifyTimestamp
Sep 19 11:04:32 zeus slapd[2123]: conn=29 op=2 SEARCH RESULT tag=101 err=0
nentries=0 textSep 19 11:04:32 zeus smbd[3227]: [2005/09/19 11:04:32, 2]
auth/auth.c:check_ntlm_password(312)
Sep 19 11:04:32 zeus smbd[3227]:   check_ntlm_password:  Authentication for
user [testuser] -> [testuser] FAILED with error NT_STATUS_NO_SUCH_USER
Sep 19 11:04:32 zeus smbd[3227]: [2005/09/19 11:04:32, 2]
smbd/server.c:exit_server(609)
Sep 19 11:04:32 zeus smbd[3227]:   Closing connections
Sep 19 11:04:32 zeus slapd[2123]: conn=29 fd=20 closed


Anyone have an idea to fix it?

Thanks,


Sergio

Okay, I'll keep asking questions, until I word one in a way that 
someone will answer. :)

i'm trying to get Samba setup. I've done this before, and it has 
never given me this much trouble.
In short, it seems to be insisting that the user be in smbpasswd 
(I've not experienced this before).

If the user is in smbpasswd, all seems well. If not, even though they 
exist on the server (via ldap + kerberos), I get a user not found error.
On the last set of servers I did this on, even ones who authenticate 
via ldap, I never did anything special to samba to get it to work. 
But I've not been so lucky this time.

The setup:

Server: IBM AIX 5.2
Samba 3.0.14a

Authentication: LDAP
Security:  Kerberos

The user entry in /etc/security/user:
     <user name>
                            SYSTEM = "KRB5files"

smb.conf (in a simple form)

       [global]
         workgroup = WIN
         log level = 5 auth
         log file = /var/log/samba/%m.log
         username map = /usr/local/samba/lib/smbusers

[Homes]
         comment = User home directories
         guest ok = no
         read only = No

I need the username map because the user names do not match between 
the windows clients & the samba server. So I need to map the translation.


When I try to access the system, I get an unknown user error.

The ONLY thing I need samba to do is provide shares (not shown above) 
to windows users. Nothing else.
If, I add a user to samba with smbpasswd .....     then the users can 
access the shares. If not, they can't.
I also, in the past have not had a server prompt me for passwords to 
access shares.
I'm missing something really obvious.
I'd really appreciate some assistance on this one.

thanks in advance!