Albert E. Whale
2002-Oct-17 16:32 UTC
[Samba] NT_STATUS_ACCESS_DENIED - Samba on Mandrake 8.2
I am attempting to integrate a Linux Samba Server with an NT 4.0 PDC.
Ideally I am looking to authenticate the users on the PDC, and then
permit access to the Samba Shares on the Linux Box. I have several
issues, but the one which is presenting itself currently is when I
attempt to Browse the PDC using smbclient. I get the following:
smbclient -L dumbo
added interface ip=192.168.0.11 bcast=192.168.15.255 nmask=255.255.240.0
session request to DUMBO failed (Called name not present)
Password:
Anonymous login successful
Domain=[FCCA.COM] OS=[Windows NT 4.0] Server=[NT LAN Manager 4.0]
Sharename Type Comment
--------- ---- -------
Error returning browse list: NT_STATUS_ACCESS_DENIED
Server Comment
--------- -------
ACCMAN-JAIME
ACCMAN-ROUSCHKA
Dumbo is the DNS Name of the PDC. Why Do I get the
NT_STATUS_ACCESS_DENIED message? I get this same message when I attempt
to use the Samba Share as an NT PDC User (using the Username and
password as well).
Your assistance is appreciated.
--
Albert E. Whale - CISSP
http://www.abs-comptech.com
----------------------------------------------------------------------
ABS Computer Technology, Inc. - ESM, Computer & Networking Specialists
Sr. Security, Network, and Systems Consultant
Board of Directors - InfraGard - Pittsburgh, PA
Buchan Milne
2002-Oct-18 14:38 UTC
[Samba] NT_STATUS_ACCESS_DENIED - Samba on Mandrake 8.2
> Message: 7 > Date: Thu, 17 Oct 2002 12:31:39 -0400 > From: "Albert E. Whale" <aewhale@ABS-CompTech.com> > Organization: ABS Computer Technology, Inc. > To: Samba <samba@lists.samba.org> > Subject: [Samba] NT_STATUS_ACCESS_DENIED - Samba on Mandrake 8.2 > > I am attempting to integrate a Linux Samba Server with an NT 4.0 PDC. > Ideally I am looking to authenticate the users on the PDC, and then > permit access to the Samba Shares on the Linux Box.You probably want to setup winbind. Winbind is available in Mandrake 8.2, you may need to install it: # urpmi samba-winbind You will need to uncomment the winbind sections of the default smb.conf file, set it to 'security=domain', set the workgroup, and join the domain: # smbpasswd -j <domain> -U <domain admin account> For more information (note that most steps should have been done for you in the 8.2 RPMS) see: http://ranger.dnsalias.com/mandrake/muo/connect/csamba5.html#winbind Note that Mandrake 9.0 allows you to join it to the domain (with full winbind setup) during installation (probably only in expert installation, choose "windows domain" as authentication method where you enter your root password). The latest samba RPMS for 8.2 (2.2.6 is available at http://ranger.dnsalias.com/mandrake/samba) have a better example smb.conf example configuration for winbind, /etc/samba/smb-winbind.conf. All that you should need to do to it is change your workgroup name).> I have several > issues, but the one which is presenting itself currently is when I > attempt to Browse the PDC using smbclient. I get the following: > > smbclient -L dumboYou haven't specified a username, by default smbclient uses the username you are currently logged in as. Do you have a domain account with the same username?> added interface ip=192.168.0.11 bcast=192.168.15.255 nmask=255.255.240.0 > > session request to DUMBO failed (Called name not present)Are you sure you're using the right netbios name for the machine (only applies to error above).> Password: > Anonymous login successfulYou haven't authenticated successfully.> Domain=[FCCA.COM] OS=[Windows NT 4.0] Server=[NT LAN Manager 4.0] > > Sharename Type Comment > --------- ---- ------- > Error returning browse list: NT_STATUS_ACCESS_DENIED > > Server Comment > --------- ------- > ACCMAN-JAIME > ACCMAN-ROUSCHKA > > Dumbo is the DNS Name of the PDC.Netbios and DNS names should preferably match (either using DNS aliases/CNAMEs etc)> Why Do I get the > NT_STATUS_ACCESS_DENIED message?Because your machine does not have the guest account enabled, and you haven't connected with a valid username/password.> I get this same message when I attempt > to use the Samba Share as an NT PDC User (using the Username and > password as well).That would probably be because you either haven't joined the domain, or don't have existing usernames on the samba server. Here are two sessions to our windows server (member of our samba domain), one without a valid username/password, one with a valid username/password: [bgmilne@bgmilne bgmilne]$ smbclient -L atlas added interface ip=146.232.174.36 bcast=146.232.174.255 nmask=255.255.255.0 Password: Anonymous login successful Domain=[CAE] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager] Sharename Type Comment --------- ---- ------- Error returning browse list: NT_STATUS_ACCESS_DENIED Server Comment --------- ------- Workgroup Master --------- ------- [bgmilne@bgmilne bgmilne]$ smbclient -L atlas added interface ip=146.232.174.36 bcast=146.232.174.255 nmask=255.255.255.0 Password: Domain=[CAE] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager] Sharename Type Comment --------- ---- ------- pwshare Disk pw Disk IPC$ IPC Remote IPC D$ Disk Default share ADMIN$ Disk Remote Admin C$ Disk Default share Server Comment --------- ------- Workgroup Master --------- ------- Regards, Buchan -- |----------------Registered Linux User #182071-----------------| Buchan Milne Mechanical Engineer, Network Manager Cellphone * Work +27 82 472 2231 * +27 21 8828820x121 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7