I have installed Samba 2.2.3a on a Solaris 2.6 box,
and it has been configured with a small smb.conf that
sets security = domain, workgroup = GFMNET, password server = GFMNET01,
I have succesfully joined domain GFMNET (controlled by
GFMNET01).
I can attach to resources anywhere in the domain from
this new box(E250), but any attempt to connect to its
resources results in failed authentication.
I earlier had 2.2.2 running on GFMNET01, but have just upgraded
to 2.2.3a to match that on E250 (in case that was the
problem). I also previously had "password server = *"
on E250. It claims (in the log files) that it cannot
find the password server so I specified GFMNET01, and
still have the same error.
I feel that the GFMNET01<Domain Controller> machine needs to authenticate
itself to E250 even though E250 is using GFMNET01 as its' password
server, but how would this be done? I could be barking
up the wrong tree here... Anybody?
The errors are as follows from running this on E250:
smbclient //e250/SystemReports -U <Valid username>
====Begin snippet===[2002/02/12 20:00:22, 0]
rpc_client/cli_netlogon.c:cli_net_auth2(157)
cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
[2002/02/12 20:00:22, 0] rpc_client/cli_login.c:cli_nt_setup_creds(74)
cli_nt_setup_creds: auth2 challenge failed
[2002/02/12 20:00:22, 0]
smbd/password.c:connect_to_domain_password_server(1336)
connect_to_domain_password_server: unable to setup the PDC credentials
to machine GFMNET01. Error was : SUCCESS - 0.
[2002/02/12 20:00:22, 0] smbd/password.c:domain_client_validate(1554)
domain_client_validate: Domain password server not available.
[2002/02/12 20:00:28, 0] rpc_client/cli_netlogon.c:cli_net_auth2(157)
cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
[2002/02/12 20:00:28, 0] rpc_client/cli_login.c:cli_nt_setup_creds(74)
cli_nt_setup_creds: auth2 challenge failed
[2002/02/12 20:00:28, 0]
smbd/password.c:connect_to_domain_password_server(1336)
connect_to_domain_password_server: unable to setup the PDC credentials
to machine GFMNET01. Error was : SUCCESS - 0.
[2002/02/12 20:00:28, 0] smbd/password.c:domain_client_validate(1554)
domain_client_validate: Domain password server not available.
====End snippet===
The E250 machine then falls back to using the local smbpasswd file
(verified by different passwords between local and remote smbpasswd
for a valid username).
Any and all comments appreciated...
Con.
