samba - Mar 2002 - Some users can't log in -- server shows username as " nobody"

Hi

I actually had this same problem when running up samba originally. 

Check that the user has a valid unix acount and that you have added that to
the folder share/valid users section. 

B

-----Original Message-----
From: Tony Ricker [mailto:rickera2@SLU.EDU]
Sent: Friday, 15 March 2002 5:21 AM
To: David Brodbeck
Cc: Samba
Subject: Re: [Samba] Some users can't log in -- server shows username as
"nobody"


Dave,
	I have had this issue and found that samba uses the nobody account
if
the user fails to authenticate. Basically, the user is failing to log in
so it tries the nobody account. Make sure that the user has a legitimate
account and try smbclient to test this. I hope this helps or at least
starts a dialogue if I am wrong.

Cheers,
Tony

David Brodbeck wrote:
> 
> Okay, this is a recurring problem that really has me frustrated.
> 
> I have a samba server that's using security=server.  There are four
people
> who use it.  It works fine for three of them, but the fourth one gets
> endlessly prompted for his password and is never allowed to log in.  All
are
> from NT 4.0 clients.
> 
> What's really puzzling is that when I look at the log at debug level 2,
I
> get the following when he tries to log in:
> 
> "Invalid username/password for game-devel [nobody]"
> 
> No matter what he puts in the "user" field of the password
dialog, Samba
is
> trying to log him in as nobody!  What's going on?
> 
> ----------
> 
> David Brodbeck, System Administrator
> InterClean Equipment, Inc.
> Ann Arbor, Michigan
> davidb@mail.interclean.com
> (734) 975-2967 x221
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Yup, he has a valid account, and there's no valid users section to worry
about.  The only thing at all odd about it is his account username starts
with a capital letter.  I've had problems with that in the past, but with
2.2.3a it seems to work okay -- the other three users are the same way and
don't have any problems.  Also, when it was a case problem it was always
obvious from the debug log -- the username would be 'Foo' and the log
would
show someone failing to log in as 'foo'.

-----Original Message-----
From: Brendan Donoghue [mailto:brendan.donoghue@peopletelecom.com.au]
Sent: Thursday, March 14, 2002 5:19 PM
Cc: Samba
Subject: RE: [Samba] Some users can't log in -- server shows username as
" nobody"


Hi

I actually had this same problem when running up samba originally. 

Check that the user has a valid unix acount and that you have added that to
the folder share/valid users section. 

B

-----Original Message-----
From: Tony Ricker [mailto:rickera2@SLU.EDU]
Sent: Friday, 15 March 2002 5:21 AM
To: David Brodbeck
Cc: Samba
Subject: Re: [Samba] Some users can't log in -- server shows username as
"nobody"


Dave,
	I have had this issue and found that samba uses the nobody account
if
the user fails to authenticate. Basically, the user is failing to log in
so it tries the nobody account. Make sure that the user has a legitimate
account and try smbclient to test this. I hope this helps or at least
starts a dialogue if I am wrong.

Cheers,
Tony

David Brodbeck wrote:
> 
> Okay, this is a recurring problem that really has me frustrated.
> 
> I have a samba server that's using security=server.  There are four
people
> who use it.  It works fine for three of them, but the fourth one gets
> endlessly prompted for his password and is never allowed to log in.  All
are
> from NT 4.0 clients.
> 
> What's really puzzling is that when I look at the log at debug level 2,
I
> get the following when he tries to log in:
> 
> "Invalid username/password for game-devel [nobody]"
> 
> No matter what he puts in the "user" field of the password
dialog, Samba
is
> trying to log him in as nobody!  What's going on?
> 
> ----------
> 
> David Brodbeck, System Administrator
> InterClean Equipment, Inc.
> Ann Arbor, Michigan
> davidb@mail.interclean.com
> (734) 975-2967 x221
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

The thing is, since I'm using security=server I don't have an smbpasswd
file.  I'd only need to add users to smbpasswd if I wanted to authenticate
them with Samba instead of against the server, right?  I'm trying to avoid
having to maintain two sets of passwords.

If I'm misunderstanding something, let me know.  I don't have a lot of
experience with security=server mode.

-----Original Message-----
From: pilsl@goldfisch.at [mailto:pilsl@goldfisch.at]
Sent: Thursday, March 14, 2002 7:08 PM
To: samba@lists.samba.org
Subject: Re: [Samba] Some users can't log in -- server shows username as
"nobody"


I just had the very same problem about 10 minutes ago. I couldnt logon
with a certain username even if I tried 10 times and checked the
user/pass very carefully.

Finally the following helped : remove the username from the
smbpasswd-file (just reapplying smbpasswd for this user was not
sufficient), add the user with smbpasswd and stop/start samba.

hope this helps for you too.

peter





On Thu, Mar 14, 2002 at 12:21:14PM -0600, Tony Ricker
wrote:
> Dave,
> 	I have had this issue and found that samba uses the nobody account
if
> the user fails to authenticate. Basically, the user is failing to log in
> so it tries the nobody account. Make sure that the user has a legitimate
> account and try smbclient to test this. I hope this helps or at least
> starts a dialogue if I am wrong.
> 
> Cheers,
> Tony
> 
> David Brodbeck wrote:
> > 
> > Okay, this is a recurring problem that really has me frustrated.
> > 
> > I have a samba server that's using security=server.  There are
four
people
> > who use it.  It works fine for three of them, but the fourth one gets
> > endlessly prompted for his password and is never allowed to log in. 
All
are
> > from NT 4.0 clients.
> > 
> > What's really puzzling is that when I look at the log at debug
level 2,
I
> > get the following when he tries to log in:
> > 
> > "Invalid username/password for game-devel [nobody]"
> > 
> > No matter what he puts in the "user" field of the password
dialog, Samba
is
> > trying to log him in as nobody!  What's going on?
> > 
> > ----------
> > 
> > David Brodbeck, System Administrator
> > InterClean Equipment, Inc.
> > Ann Arbor, Michigan
> > davidb@mail.interclean.com
> > (734) 975-2967 x221
> > 
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 
> 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Do you mean the UNIX user entry, or the entry on the password server?  For
various reasons I'd be very reluctant to remove the user entry on the
password server -- it's kind of a no-no in NT domains, since you can't
get
the same user ID back and it screws up file ownerships.

-----Original Message-----
From: pilsl@goldfisch.at [mailto:pilsl@goldfisch.at]
Sent: Friday, March 15, 2002 10:06 AM
To: samba@lists.samba.org
Subject: Re: [Samba] Some users can't log in -- server shows username as
" nobody"



hmmm .. you hit the point :)
but maybe you could try the same thing on your server:
remove user on server
stop samba
add user on server
start samba

just a vodoo-try. please tell if it works ..

peter

On Fri, Mar 15, 2002 at 08:53:21AM -0500, David Brodbeck
wrote:
> The thing is, since I'm using security=server I don't have an
smbpasswd
> file.  I'd only need to add users to smbpasswd if I wanted to
authenticate
> them with Samba instead of against the server, right?  I'm trying to
avoid
> having to maintain two sets of passwords.
> 
> If I'm misunderstanding something, let me know.  I don't have a lot
of
> experience with security=server mode.
> 
> -----Original Message-----
> From: pilsl@goldfisch.at [mailto:pilsl@goldfisch.at]
> Sent: Thursday, March 14, 2002 7:08 PM
> To: samba@lists.samba.org
> Subject: Re: [Samba] Some users can't log in -- server shows username
as
> "nobody"
> 
> 
> I just had the very same problem about 10 minutes ago. I couldnt logon
> with a certain username even if I tried 10 times and checked the
> user/pass very carefully.
> 
> Finally the following helped : remove the username from the
> smbpasswd-file (just reapplying smbpasswd for this user was not
> sufficient), add the user with smbpasswd and stop/start samba.
> 
> hope this helps for you too.
> 
> peter
> 
> 
> 
> 
> 
> On Thu, Mar 14, 2002 at 12:21:14PM -0600, Tony Ricker wrote:
> > Dave,
> > 	I have had this issue and found that samba uses the nobody account
> if
> > the user fails to authenticate. Basically, the user is failing to log
in
> > so it tries the nobody account. Make sure that the user has a
legitimate
> > account and try smbclient to test this. I hope this helps or at least
> > starts a dialogue if I am wrong.
> > 
> > Cheers,
> > Tony
> > 
> > David Brodbeck wrote:
> > > 
> > > Okay, this is a recurring problem that really has me frustrated.
> > > 
> > > I have a samba server that's using security=server.  There
are four
> people
> > > who use it.  It works fine for three of them, but the fourth one
gets
> > > endlessly prompted for his password and is never allowed to log
in.
All
> are
> > > from NT 4.0 clients.
> > > 
> > > What's really puzzling is that when I look at the log at
debug level
2,
> I
> > > get the following when he tries to log in:
> > > 
> > > "Invalid username/password for game-devel [nobody]"
> > > 
> > > No matter what he puts in the "user" field of the
password dialog,
Samba
> is
> > > trying to log him in as nobody!  What's going on?
> > > 
> > > ----------
> > > 
> > > David Brodbeck, System Administrator
> > > InterClean Equipment, Inc.
> > > Ann Arbor, Michigan
> > > davidb@mail.interclean.com
> > > (734) 975-2967 x221
> > > 
> > > --
> > > To unsubscribe from this list go to the following URL and read
the
> > > instructions:  http://lists.samba.org/mailman/listinfo/samba
> > 
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> > 
> > 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 
> 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Well, I tried changing from security = server to security = domain, and
joining the domain.  Now no one can log in, and I don't see any helpful log
messages at all at any debug level.  I'm really stumped here.  I've had
all
kinds of problems with this machine, and I really can't figure out why. :/

The Samba system is RedHat 6.2 plus numerous bugfixes.  It has a
custom-compiled kernel.  Samba version is 2.2.3a, workstations are all NT
4.0 SP6a Workstation, PDC is NT 4.0 SP6a Server.

I'll summarize what I said earlier in the thread:

In SECURITY = SERVER mode, everyone can log in except one user.  He can
browse the server but can't open any shares -- he gets endlessly prompted
for his username and password.  The log shows that Samba thinks he's trying
to log in as nobody no matter what he puts in the Username field of the
dialog box.  Everyone else (three other users) can log in just fine.

Here's the debug level 2 log output when the problem user tries to log in:

[2002/03/18 10:37:41, 2] smbd/service.c:make_connection(328)
  Invalid username/password for game-devel [nobody]
[2002/03/18 10:37:41, 2] smbd/service.c:make_connection(328)
  Invalid username/password for game-devel [nobody]
[2002/03/18 10:37:41, 2] smbd/service.c:make_connection(328)
  Invalid username/password for game-devel [nobody]
[2002/03/18 10:37:41, 2] smbd/service.c:make_connection(328)
  Invalid username/password for game-devel [nobody]
(etc.)

In SECURITY = DOMAIN no one can log in.  The log shows nothing that appears
relevent (in debug level 2).

-----Original Message-----
From: Ken Cobler [mailto:kcobler@coblercorp.com]
Sent: Monday, March 18, 2002 11:46 AM
To: David Brodbeck
Subject: Re: [Samba] Some users can't log in -- server shows username as
"nobody"




David Brodbeck wrote:
> Well, I tried changing from security = server to security = domain, and
> joining the domain.  Now no one can log in, and I don't see any helpful
log
> messages at all at any debug level.  I'm really stumped here.  I've
had
all
> kinds of problems with this machine, and I really can't figure out why.
:/
Need a little more background.

What type of server, Samba version,  workstation versions that work and
don't
work.

Ken Cobler

I finally got it working.  Looks like it's the old case sensitivity bugaboo.
The user's UNIX account name is "Chua".  I added this to my
username map:

Chua = chua

and he was able to log in with no problem.  Oddly, I have another user with
an account called "Pasi" that works just fine; I can only assume he
happens
to log into his Windows workstation with the first letter of his username in
uppercase.

-----Original Message-----
From: David Brodbeck [mailto:DavidB@mail.interclean.com]
Sent: Monday, March 18, 2002 11:54 AM
To: 'Ken Cobler'
Cc: 'samba@samba.org'
Subject: RE: [Samba] Some users can't log in -- server shows username as
" nobody"


The Samba system is RedHat 6.2 plus numerous bugfixes.  It has a
custom-compiled kernel.  Samba version is 2.2.3a, workstations are all NT
4.0 SP6a Workstation, PDC is NT 4.0 SP6a Server.

I'll summarize what I said earlier in the thread:

In SECURITY = SERVER mode, everyone can log in except one user.  He can
browse the server but can't open any shares -- he gets endlessly prompted
for his username and password.  The log shows that Samba thinks he's trying
to log in as nobody no matter what he puts in the Username field of the
dialog box.  Everyone else (three other users) can log in just fine.

Here's the debug level 2 log output when the problem user tries to log in:

[2002/03/18 10:37:41, 2] smbd/service.c:make_connection(328)
  Invalid username/password for game-devel [nobody]
[2002/03/18 10:37:41, 2] smbd/service.c:make_connection(328)
  Invalid username/password for game-devel [nobody]
[2002/03/18 10:37:41, 2] smbd/service.c:make_connection(328)
  Invalid username/password for game-devel [nobody]
[2002/03/18 10:37:41, 2] smbd/service.c:make_connection(328)
  Invalid username/password for game-devel [nobody]
(etc.)

In SECURITY = DOMAIN no one can log in.  The log shows nothing that appears
relevent (in debug level 2).

-----Original Message-----
From: Ken Cobler [mailto:kcobler@coblercorp.com]
Sent: Monday, March 18, 2002 11:46 AM
To: David Brodbeck
Subject: Re: [Samba] Some users can't log in -- server shows username as
"nobody"




David Brodbeck wrote:
> Well, I tried changing from security = server to security = domain, and
> joining the domain.  Now no one can log in, and I don't see any helpful
log
> messages at all at any debug level.  I'm really stumped here.  I've
had
all
> kinds of problems with this machine, and I really can't figure out why.
:/
Need a little more background.

What type of server, Samba version,  workstation versions that work and
don't
work.

Ken Cobler

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba