Thomas Graham
2003-Feb-16 11:44 UTC
[Samba] Access Denied when trying to login to samba PDC
While trying to set up samba as a PDC, I followed O'Reillys Using Samba. This resulted in the following smb.conf: [global] workgroup = GRAHAM encrypt passwords = true log level = 1 max log size = 1000 hosts allow = 192.168.0/24 192.168.1/24 hosts deny = 1.1.1.1/0.0.0.0 domain logons = yes security = user os level = 34 local master = yes preferred master = yes domain master = yes [temp] comment = shared temporary directory path = /usr/tmp readonly = no guest ok = yes [homes] comment = Home Directories browseable = no writable = yes valid users = %S create mode = 0664 directory mode = 0775 map to guest = bad user If I try to join the domain "GRAHAM" from any of the WinXP(NT5.1) machines, by changing from workgroup GRAHAM to Domain GRAHAM, then click OK, I am prompted to "Enter the name and password of an account with permission to join the domain." If I enter a valid username and password (that allows access to the shared drives) I get the response: "The following error occurred attempting to access the domain "GRAHAM": ACCESS IS DENIED." [2003/02/16 11:30:47, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1416) unable to open passdb database. If I enter a bad username/pass I get the response: "The following error occurred attempting to access the domain "GRAHAM": Logon failure: Unknown username/bad password" [2003/02/16 11:29:17, 1] smbd/password.c:pass_check_smb(561) Account for user 'tg-1998' was disabled. [2003/02/16 11:29:17, 1] smbd/password.c:pass_check_smb(561) Account for user 'tg-1998' was disabled. [2003/02/16 11:29:17, 1] smbd/reply.c:reply_sesssetup_and_X(988) Rejecting user 'tg-1998': authentication failed [2003/02/16 11:29:18, 1] smbd/password.c:pass_check_smb(561) Account for user 'tg-1998' was disabled. [2003/02/16 11:29:18, 1] smbd/password.c:pass_check_smb(561) Account for user 'tg-1998' was disabled. [2003/02/16 11:29:18, 1] smbd/reply.c:reply_sesssetup_and_X(988) Rejecting user 'tg-1998': authentication failed nmbd.log: [2003/02/16 11:45:15, 0] nmbd/nmbd_logonnames.c:add_logon_names(156) add_domain_logon_names: Attempting to become logon server for workgroup GRAHAM on subnet 192.168.0.108 [2003/02/16 11:45:15, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(291) become_domain_master_browser_bcast: Attempting to become domain master browser on workgroup GRAHAM on subnet 192.168.0.108 [2003/02/16 11:45:15, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(305) become_domain_master_browser_bcast: querying subnet 192.168.0.108 for domain master browser on workgroup GRAHAM [2003/02/16 11:45:19, 0] nmbd/nmbd_logonnames.c:become_logon_server_success(115) become_logon_server_success: Samba is now a logon server for workgroup GRAHAM on subnet 192.168.0.108 [2003/02/16 11:45:19, 0] nmbd/nmbd_responserecordsdb.c:find_response_record(237) find_response_record: response packet id 30328 received with no matching record. [2003/02/16 11:45:19, 0] nmbd/nmbd_responserecordsdb.c:find_response_record(237) find_response_record: response packet id 30329 received with no matching record. [2003/02/16 11:45:24, 0] nmbd/nmbd_become_dmb.c:become_domain_master_stage2(115) ***** Samba server SUN is now a domain master browser for workgroup GRAHAM on subnet 192.168.0.108 ***** [2003/02/16 11:45:38, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(404) ***** Samba name server SUN is now a local master browser for workgroup GRAHAM on subnet 192.168.0.108 ***** [2003/02/16 11:46:34, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69) process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:34, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69) process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:47, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69) process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:47, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69) process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:47, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69) process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:47, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69) process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:47, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69) process_logon_packet: Logon from 192.168.0.2: code = 0x7 I am running samba 2.2.3a-12 on a Sun Sparc64 running Debian GNU/Linux 3.0 "woody". All the client machines will be running windows XP pro/home edition. Thomas Graham. -- But be not afraid of greatness: some men are born great, some achieve greatness, and some have greatness thrust upon them. --
One of the main things you need to remember when joining a system to the domain is, when prompted for a username and password, always use "root" as the user. Don Zajic -----Original Message----- From: samba-bounces+donald.zajic=verizon.net@lists.samba.org [mailto:samba-bounces+donald.zajic=verizon.net@lists.samba.org] On Behalf Of Thomas Graham Sent: Sunday, February 16, 2003 6:45 AM To: samba@lists.samba.org Subject: [Samba] Access Denied when trying to login to samba PDC While trying to set up samba as a PDC, I followed O'Reillys Using Samba. This resulted in the following smb.conf: [global] workgroup = GRAHAM encrypt passwords = true log level = 1 max log size = 1000 hosts allow = 192.168.0/24 192.168.1/24 hosts deny = 1.1.1.1/0.0.0.0 domain logons = yes security = user os level = 34 local master = yes preferred master = yes domain master = yes [temp] comment = shared temporary directory path = /usr/tmp readonly = no guest ok = yes [homes] comment = Home Directories browseable = no writable = yes valid users = %S create mode = 0664 directory mode = 0775 map to guest = bad user If I try to join the domain "GRAHAM" from any of the WinXP(NT5.1) machines, by changing from workgroup GRAHAM to Domain GRAHAM, then click OK, I am prompted to "Enter the name and password of an account with permission to join the domain." If I enter a valid username and password (that allows access to the shared drives) I get the response: "The following error occurred attempting to access the domain "GRAHAM": ACCESS IS DENIED." [2003/02/16 11:30:47, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1416) unable to open passdb database. If I enter a bad username/pass I get the response: "The following error occurred attempting to access the domain "GRAHAM": Logon failure: Unknown username/bad password" [2003/02/16 11:29:17, 1] smbd/password.c:pass_check_smb(561) Account for user 'tg-1998' was disabled. [2003/02/16 11:29:17, 1] smbd/password.c:pass_check_smb(561) Account for user 'tg-1998' was disabled. [2003/02/16 11:29:17, 1] smbd/reply.c:reply_sesssetup_and_X(988) Rejecting user 'tg-1998': authentication failed [2003/02/16 11:29:18, 1] smbd/password.c:pass_check_smb(561) Account for user 'tg-1998' was disabled. [2003/02/16 11:29:18, 1] smbd/password.c:pass_check_smb(561) Account for user 'tg-1998' was disabled. [2003/02/16 11:29:18, 1] smbd/reply.c:reply_sesssetup_and_X(988) Rejecting user 'tg-1998': authentication failed nmbd.log: [2003/02/16 11:45:15, 0] nmbd/nmbd_logonnames.c:add_logon_names(156) add_domain_logon_names: Attempting to become logon server for workgroup GRAHAM on subnet 192.168.0.108 [2003/02/16 11:45:15, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(291) become_domain_master_browser_bcast: Attempting to become domain master browser on workgroup GRAHAM on subnet 192.168.0.108 [2003/02/16 11:45:15, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(305) become_domain_master_browser_bcast: querying subnet 192.168.0.108 for domain master browser on workgroup GRAHAM [2003/02/16 11:45:19, 0] nmbd/nmbd_logonnames.c:become_logon_server_success(115) become_logon_server_success: Samba is now a logon server for workgroup GRAHAM on subnet 192.168.0.108 [2003/02/16 11:45:19, 0] nmbd/nmbd_responserecordsdb.c:find_response_record(237) find_response_record: response packet id 30328 received with no matching record. [2003/02/16 11:45:19, 0] nmbd/nmbd_responserecordsdb.c:find_response_record(237) find_response_record: response packet id 30329 received with no matching record. [2003/02/16 11:45:24, 0] nmbd/nmbd_become_dmb.c:become_domain_master_stage2(115) ***** Samba server SUN is now a domain master browser for workgroup GRAHAM on subnet 192.168.0.108 ***** [2003/02/16 11:45:38, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(404) ***** Samba name server SUN is now a local master browser for workgroup GRAHAM on subnet 192.168.0.108 ***** [2003/02/16 11:46:34, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69) process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:34, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69) process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:47, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69) process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:47, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69) process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:47, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69) process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:47, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69) process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:47, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69) process_logon_packet: Logon from 192.168.0.2: code = 0x7 I am running samba 2.2.3a-12 on a Sun Sparc64 running Debian GNU/Linux 3.0 "woody". All the client machines will be running windows XP pro/home edition. Thomas Graham. -- But be not afraid of greatness: some men are born great, some achieve greatness, and some have greatness thrust upon them. -- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Thomas Graham
2003-Feb-16 14:25 UTC
[Samba] Access Denied when trying to login to samba PDC
Having managed to join my system to the domain using the root user, when I try to logon from the WinNT login screen, I get the response "Windows cannot connect to the domain, either because the domain controller is down or otherwise unavailable, or because your computer account was not found." nmbd.log: [2003/02/16 14:25:58, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69) process_logon_packet: Logon from 192.168.0.2: code = 0x12 --- On 16th Feb Don Zaijic said:> >One of the main things you need to remember when joining a system to the domain is, when promptedfor a username and password, always use "root" as the>user.--- While trying to set up samba as a PDC, I followed O'Reillys Using Samba. This resulted in the following smb.conf: [global] workgroup = GRAHAM encrypt passwords = true log level = 1 max log size = 1000 hosts allow = 192.168.0/24 192.168.1/24 hosts deny = 1.1.1.1/0.0.0.0 domain logons = yes security = user os level = 34 local master = yes preferred master = yes domain master = yes [temp] comment = shared temporary directory path = /usr/tmp readonly = no guest ok = yes [homes] comment = Home Directories browseable = no writable = yes valid users = %S create mode = 0664 directory mode = 0775 map to guest = bad user