Volker Schwicking
2009-May-22 11:17 UTC
[Samba] empty authentication string sent so samba-server
Hi,
for the last two weeks ive been trying, to authenticate against a
samba-domain using a win2k3-server. the server joined the domain without
any problem and the basic login seems to work. but if i try to execute
programs from mapped network drive (mapped using a domain-logon-skript),
it fails with a message telling me, that i dont have sufficient rights
to do so.
the share has a forced user and group like this;
...
[programm]
comment = samba
guest ok = yes
path = /samba
public = yes
browseable = yes
writable = yes
force user = samba
force group = users
...
this only happens on the win2k3-server, all xp-workstations work just
fine with domain-logons, network-drives, logon-skripts, etc. in the
samba-logs for the win2k3-server i found this:
...
[2009/05/22 09:20:51, 3] auth/auth.c:check_ntlm_password(219)
check_ntlm_password: Checking password for unmapped user
[]\[]@[SRV_NAME] with the new password interface
...
compared to logons from an xp-workstation its missing the user/domain
part that should look like this:
...
[2009/05/22 09:15:45, 3] auth/auth.c:check_ntlm_password(219)
check_ntlm_password: Checking password for unmapped user
[WORKGROUP]\[kappen]@[BUCHHALTUNG] with the new password interface
...
does anyone have an idea what seems to be the problem with win2k3?
mabye its a switch i have to (de)activate on the win2k3-side?
regards
volker
Volker Schwicking
2009-May-27 07:32 UTC
[Samba] empty authentication string sent so samba-server
Come on, somebodys got to have an at least an idea :-) Volker Schwicking wrote:> Hi, > > for the last two weeks ive been trying, to authenticate against a > samba-domain using a win2k3-server. the server joined the domain without > any problem and the basic login seems to work. but if i try to execute > programs from mapped network drive (mapped using a domain-logon-skript), > it fails with a message telling me, that i dont have sufficient rights > to do so. > > the share has a forced user and group like this; > > ... > [programm] > comment = samba > guest ok = yes > path = /samba > public = yes > browseable = yes > writable = yes > force user = samba > force group = users > ... > > this only happens on the win2k3-server, all xp-workstations work just > fine with domain-logons, network-drives, logon-skripts, etc. in the > samba-logs for the win2k3-server i found this: > > ... > [2009/05/22 09:20:51, 3] auth/auth.c:check_ntlm_password(219) > check_ntlm_password: Checking password for unmapped user > []\[]@[SRV_NAME] with the new password interface > ... > > compared to logons from an xp-workstation its missing the user/domain > part that should look like this: > > ... > [2009/05/22 09:15:45, 3] auth/auth.c:check_ntlm_password(219) > check_ntlm_password: Checking password for unmapped user > [WORKGROUP]\[kappen]@[BUCHHALTUNG] with the new password interface > ... > > does anyone have an idea what seems to be the problem with win2k3? > mabye its a switch i have to (de)activate on the win2k3-side? > > regards > volker >Mit freundlichen Gr??en Volker Schwicking -- ----------------------------------------------------------------------- * * * * bee Baastrup EDV-Entwicklung GmbH Volker Schwicking || * * * * Schwanenwall 40 v.schwicking@bee.de ||\\ //\\ //\\ 44135 Dortmund/Germany http://www.bee.de ||// \\-' \\-' fon: +49 (0)231 58719-0 Systemadministration * * * * fax: +49 (0)231 58719-50 ----------------------------------------------------------------------- * Geschaeftsfuehrer: Dipl.-Inf. Joern Baastrup * * Handelsregistergericht: Amtsgericht Dortmund * * Handelsregisternummer: HRB 12333 * ***********************************************************************
Liutauras Adomaitis
2009-May-27 21:17 UTC
[Samba] empty authentication string sent so samba-server
On Wed, May 27, 2009 at 10:32 AM, Volker Schwicking <vos@bee.de> wrote:> Come on, somebodys got to have an at least an idea :-) > > Volker Schwicking wrote: >> >> Hi, >> >> for the last two weeks ive been trying, to authenticate against a >> samba-domain using a win2k3-server. the server joined the domain without >> any problem and the basic login seems to work. but if i try to execute >> programs from mapped network drive (mapped using a domain-logon-skript), >> it fails with a message telling me, that i dont have sufficient rights >> to do so. >> >> the share has a forced user and group like this; >> >> ... >> [programm] >> ? comment = samba >> ? guest ok = yes >> ? path = /samba >> ? public = yes >> ? browseable = yes >> ? writable = yes >> ? force user = samba >> ? force group = users >> ... >> >> this only happens on the win2k3-server, all xp-workstations work just >> fine with domain-logons, network-drives, logon-skripts, etc. in the >> samba-logs for the win2k3-server i found this: >> >> ... >> [2009/05/22 09:20:51, 3] auth/auth.c:check_ntlm_password(219) >> ?check_ntlm_password: ?Checking password for unmapped user >> []\[]@[SRV_NAME] with the new password interface >> ... >> >> compared to logons from an xp-workstation its missing the user/domain >> part that should look like this: >> >> ... >> [2009/05/22 09:15:45, 3] auth/auth.c:check_ntlm_password(219) >> ?check_ntlm_password: ?Checking password for unmapped user >> [WORKGROUP]\[kappen]@[BUCHHALTUNG] with the new password interface >> ... >> >> does anyone have an idea what seems to be the problem with win2k3? >> mabye its a switch i have to (de)activate on the win2k3-side? >> >> regards >> volker >> >There must be more log info. If you join win2k3 to samba domain it should not be much different from winxp behavior. Then you logon to server there must be info about user password validation.