[Samba] session setup failed: NT_STATUS_LOGON_FAILURE

LaSusa, Dan
Mon, 20 Jan 2003 17:24:02 -0000

I'm kinda new to this, so you may have already tried all of this and then
some....but I'm just trying to help...

1.  Winbind IS running right?  (I'm assuming so, but just checking)
2.  What do you get if you run "wbinfo -t" ?

Dan

-----Original Message-----
From: Johnson, Dave S. [mailto:Dave.Johnson@gmacrfc.com]
Sent: Monday, January 20, 2003 4:31 AM
To: 'samba@lists.samba.org'
Subject: [Samba] session setup failed: NT_STATUS_LOGON_FAILURE



I know this subject has been beaten to death .. but I haven't been able to
find a solution .. so here it is again:

I can join the my Windows DOMAIN without issue.

[djohns1@lmsprfc24208a djohns1]$ smbclient -L \\\\mspap01u
added interface ip=192.168.240.53 bcast=192.168.240.255 nmask=255.255.255.0
added interface ip=192.168.131.1 bcast=192.168.131.255 nmask=255.255.255.0
Password:
session setup failed: NT_STATUS_LOGON_FAILURE

If I use localhost instead of mspap01u I get a list of shares locally.  No
matter what I do to my smb.conf file locally I get denied EVERYWHERE in the
DOMAIN when trying to connect to Windows machines.  I am using
SECURITY=DOMAIN andPASSWORD SERVER = *

[djohns1@lmsprfc24208a djohns1]$ smbclient //vmspap01caa/prod -W NA -U
djohns1
added interface ip=192.168.240.53 bcast=192.168.240.255 nmask=255.255.255.0
added interface ip=192.168.131.1 bcast=192.168.131.255 nmask=255.255.255.0
Password:
session setup failed: NT_STATUS_LOGON_FAILURE

I know there's communication there because I get some output if I use -N :
[djohns1@lmsprfc24208a djohns1]$ smbclient //vmspap01caa/prod -W NA -N
added interface ip=192.168.240.53 bcast=192.168.240.255 nmask=255.255.255.0
added interface ip=192.168.131.1 bcast=192.168.131.255 nmask=255.255.255.0
Anonymous login successful
Domain=[NA] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]
tree connect failed: NT_STATUS_ACCESS_DENIED

I have several HP-UX 11.00 machines with Samba 2.2.3a running on them with
SECURITY=DOMAIN and all of the users can access the shares without issue.  I
just can't get anywhere on the DOMAIN with smbclient ...

testparm output:
--------------------------------------------------------------------
# Global parameters
[global]
        coding system =
        client code page = 850
        code page directory = /etc/codepages
        workgroup = NA
        netbios name = LMSPRFC24208A
        netbios aliases =
        netbios scope =
        server string = Dave Johnson's Samba Server
        interfaces =
        bind interfaces only = No
        security = DOMAIN
        encrypt passwords = Yes
        update encrypted = No
        allow trusted domains = Yes
        hosts equiv =
        min passwd length = 5
        map to guest = Never
        null passwords = No
        obey pam restrictions = No
        password server = *
        smb passwd file = /etc/samba/smbpasswd
        root directory =
        pam password change = No
        passwd program = /usr/bin/passwd
        passwd chat = *new*password* %n\n *new*password* %n\n *changed*
        passwd chat debug = No
        username map =
        password level = 0
        username level = 0
        unix password sync = No
        restrict anonymous = No
        lanman auth = Yes
        use rhosts = No
        admin log = No
        log level = 5
        syslog = 1
        syslog only = No
        log file = /var/log/samba/log.%m
        max log size = 50        timestamp logs = Yes
        debug hires timestamp = No
        debug pid = No
        debug uid = No
        protocol = NT1
        large readwrite = Yes
        max protocol = NT1
        min protocol = CORE
        read bmpx = No
        read raw = Yes
        write raw = Yes
        nt smb support = Yes
        nt pipe support = Yes
        nt status support = Yes
        announce version = 4.9
        announce as = NT
        max mux = 50
        max xmit = 16644
        name resolve order = lmhosts host wins bcast
        max ttl = 259200
        max wins ttl = 518400
        min wins ttl = 21600
        time server = No
        unix extensions = No
        change notify timeout = 60
        deadtime = 0
        getwd cache = Yes
        keepalive = 300
        lpq cache time = 10
        max smbd processes = 0
        max disk size = 0
        max open files = 10000
        name cache timeout = 660
        read size = 16384
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        stat cache size = 50
        use mmap = Yes
        total print jobs = 0
        load printers = Yes
        printcap name = /etc/printcap
        disable spoolss = No
        enumports command =
        addprinter command =
        deleteprinter command =
        show add printer wizard = Yes
        os2 driver map =
        strip dot = No
        mangling method = hash
        character set =
        mangled stack = 50
        stat cache = Yes
        domain admin group =
        domain guest group =
        machine password timeout = 604800
        add user script =
        delete user script =
        logon script =
        logon path = \\%N\%U\profile
        logon drive =
        logon home = \\%N\%U
        domain logons = No
        os level = 20
        lm announce = Auto
        lm interval = 60
        preferred master = Auto
        local master = Yes
        domain master = Auto
        browse list = Yes
        enhanced browsing = Yes
        dns proxy = No
        wins proxy = No
        wins server = 199.21.57.20,199.21.56.57
        wins support = No
        wins hook =
        kernel oplocks = Yes
        lock spin count = 3
        lock spin time = 10
        oplock break wait time = 0
        add share command =
        change share command =
        delete share command =
        config file =
        preload =
        lock dir = /var/cache/samba
        pid directory = /var/run/samba
        utmp directory =
        wtmp directory =
        utmp = No
        default service =
        message command =
        dfree command =
        valid chars =
        remote announce =
        remote browse sync =
        socket address = 0.0.0.0
        homedir map =
        time offset = 0
        NIS homedir = No
        source environment =
        panic action =
        hide local users = No
        host msdfs = No
        winbind uid =         winbind gid =
        template homedir = /home/%D/%U
        template shell = /bin/false
        winbind separator = \
        winbind cache time = 15
        winbind enum users = Yes
        winbind enum groups = Yes
        winbind use default domain = No
        comment =
        path =
        alternate permissions = No
        username =
        guest account = nobody
        invalid users =
        valid users =
        admin users =
        read list =
        write list =
        printer admin =
        force user =
        force group =
        read only = Yes
        create mask = 0744
        force create mode = 00
        security mask = 0777
        force security mode = 00
        directory mask = 0755
        force directory mode = 00
        directory security mask = 0777
        force directory security mode = 00
        force unknown acl user = 00
        inherit permissions = No
        inherit acls = No
        guest only = No
        guest ok = No
        only user = No
        hosts allow =
        hosts deny =
        status = Yes
        nt acl support = Yes
        profile acls = No
        block size = 1024
        max connections = 0
        min print space = 0
        strict allocate = No
        strict sync = No
        sync always = No
        write cache size = 0
        max print jobs = 1000
        printable = No
        postscript = No
        printing = bsd
        print comman        lpq command = lpq -P%p
        lprm command = lprm -P%p %j
        lppause command =
        lpresume command =
        queuepause command =
        queueresume command =
        printer name =
        use client driver = No
        default devmode = No
        printer driver =
        printer driver file = /etc/samba/printers.def
        printer driver location =
        default case = lower
        case sensitive = No
        preserve case = Yes
        short preserve case = Yes
        mangle case = No
        mangling char = ~
        hide dot files = Yes
        hide unreadable = No
        delete veto files = No
        veto files =
        hide files =
        veto oplock files =
        map system = No
        map hidden = No
        map archive = Yes
        mangled names = Yes
        mangled map =
        browseable = Yes
        blocking locks = Yes
        csc policy = manual
        fake oplocks = No
        locking = Yes
        oplocks = Yes
        level2 oplocks = Yes
        oplock contention limit = 2
        posix locking = Yes
        strict locking = No
        share modes = Yes
        copy =
        include =
        exec =
        preexec close = No
        postexec =
        root preexec =
        root preexec close = No
        root postexec =
        available = Yes
        volume =
        fstype = NTFS
        set directory = No
        wide links = Yes
        follow symlinks = Yes
        dont descend =
        magic script =
        magic output =
        delete readonly = No
        dos filemode = No
        dos filetimes = No
        dos filetime resolution = No
        fake directory create times = No
        vfs object =
        vfs options =
        msdfs root = No

[homes]
        comment = Home Directories
        read only = No
        browseable = No

[printers]
        comment = All Printers
        path = /var/spool/samba
        printable = Yes
        browseable = No



-------------- next part --------------
HTML attachment scrubbed and removed