Dominik J. Fischer
2003-Apr-14 12:12 UTC
Samba maps any user to nobody -> [Samba] problem logging on to sambadomain (pdc) from a win xp workstation
Dear Craig, I just set up a redhat 7.3 machine (P3LIN) with only Samba running to test systematically. I am using samba 2.2.8a. I set up all necessary users and my smb.conf. However smbd and nmbd do not run as samba user: I did not want to create even more problems. The shares are owned by samba. With user dom I can access all my shares! Then I set up P3LIN as a pdc and the joined a samba domain PERNEX on this machine with my xp workstation and a win 2k workstation. I. PROBLEM Domain logon still fails on both windows machines. The "nt" box says that there is no domain controller available or my machine account is not found. II. log.smbd MESSAGES [2003/04/14 14:13:34, 3] smbd/sec_ctx.c:get_current_groups(172) get_current_groups: user is in 1 groups: 99 [2003/04/14 14:13:34, 3] smbd/password.c:register_vuid(336) uid 99 registered to name nobody This message is weird since I have a samba = default mapping in my smbusers file. Thus, if the system fails to recognize the name, it should at least map to user samba. [2003/04/14 14:13:34, 3] smbd/password.c:register_vuid(338) Clearing default real name [2003/04/14 14:13:34, 3] smbd/password.c:register_vuid(340) User name: nobody Real name: Nobody [2003/04/14 14:13:34, 3] smbd/password.c:authorise_login(854) authorise_login: ACCEPTED: guest account and guest ok (nobody) [2003/04/14 14:13:34, 0] smbd/password.c:authorise_login(863) authorise_login: rejected invalid user nobody [2003/04/14 14:13:34, 2] smbd/service.c:make_connection(331) => Invalid username/password for ipc$ [nobody] [2003/04/14 14:13:34, 3] smbd/error.c:error_packet(109) error packet at smbd/reply.c(166) cmd=117 (SMBtconX) => NT_STATUS_WRONG_PASSWORD [2003/04/14 14:13:34, 3] smbd/process.c:timeout_processing(1066) end of file from client What is it all about ipc$? There is no pc named ipc$. III. WIN XP PRO EVENTMANAGER - The Eventmanager on my XP says that the domain PERNEX is found but authentification failed: The password for the workstation could be wrong. Ereignistyp (Type of event): Fehler Ereignisquelle (source): NETLOGON Ereigniskategorie (categorie): Keine (None) Ereigniskennung (Event id): 3210 IV. UNIX ACCOUNTS It becomes more and more clear to me that there is a problem with the workstation account on unix: - Could it be that all Computer Accounts have to have big caps? - What is the password you have to set, e.g. for a workstation called P4WS$? - What the correct shell and which home dir? V. JOINING THE DOMAIN - When joining the domain on win xp pro, win 2k you only have to provide the root account data? Or do you have to fill in the workstation password somewhere? VI. SAMBA CONFIGURATION - Has the update encrypted option in smb.conf to be set to yes? What role does the machine.sid file have in /etc/samba/? - Would it perhaps help to install samba-3 alpha since they have a new lanman auth? - My smb.conf is included at the end of the e-mail. VII. Win XP Configuration: Do I have to install SP1 on my Win XP Pro. Will it make it worse? ################################################################ smb.conf # Global parameters [global] coding system = client code page = 850 code page directory = /etc/codepages workgroup = PERNEX netbios name = P3LIN netbios aliases = netbios scope = server string = p3lin interfaces = bind interfaces only = No security = USER encrypt passwords = Yes update encrypted = Yes allow trusted domains = Yes hosts equiv = min passwd length = 5 map to guest = Never null passwords = No obey pam restrictions = Yes password server = smb passwd file = /etc/samba/smbpasswd root directory = pam password change = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* passwd chat debug = No username map = password level = 0 username level = 0 unix password sync = Yes restrict anonymous = No lanman auth = Yes use rhosts = No admin log = No log level = 3 syslog = 1 syslog only = No log file = /var/log/samba/%m.log max log size = 0 timestamp logs = Yes debug hires timestamp = No debug pid = No debug uid = No protocol = NT1 large readwrite = Yes max protocol = NT1 min protocol = CORE read bmpx = No read raw = Yes write raw = Yes acl compatibility = nt smb support = Yes nt pipe support = Yes nt status support = Yes announce version = 4.9 announce as = NT max mux = 50 max xmit = 16644 name resolve order = lmhosts host wins bcast max ttl = 259200 max wins ttl = 518400 min wins ttl = 21600 time server = No unix extensions = No change notify timeout = 60 deadtime = 0 getwd cache = Yes keepalive = 300 lpq cache time = 10 max smbd processes = 0 max disk size = 0 max open files = 10000 name cache timeout = 660 read size = 16384 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 stat cache size = 50 use mmap = Yes total print jobs = 0 load printers = Yes printcap name = /etc/printcap disable spoolss = No enumports command = addprinter command = deleteprinter command = show add printer wizard = Yes os2 driver map = strip dot = No mangling method = hash character set = mangled stack = 50 stat cache = Yes domain admin group = domain guest group = machine password timeout = 604800 add user script = delete user script = logon script = logon path = \\%N\%U\profile logon drive = logon home = \\%N\%U domain logons = Yes os level = 85 lm announce = Auto lm interval = 60 preferred master = Auto local master = Yes domain master = Yes browse list = Yes enhanced browsing = Yes dns proxy = Yes wins proxy = No wins server = wins support = Yes wins hook = kernel oplocks = Yes lock spin count = 3 lock spin time = 10 oplock break wait time = 0 add share command = change share command = delete share command = config file = preload = lock dir = /var/cache/samba pid directory = /var/run/samba utmp directory = wtmp directory = utmp = No default service = message command = dfree command = valid chars = remote announce = remote browse sync = socket address = 0.0.0.0 homedir map = time offset = 0 NIS homedir = No source environment = panic action = hide local users = No host msdfs = No winbind uid = winbind gid = template homedir = /home/%D/%U template shell = /bin/false winbind separator = \ winbind cache time = 15 winbind enum users = Yes winbind enum groups = Yes winbind use default domain = No comment = path = alternate permissions = No username = guest account = nobody invalid users = valid users = smb_usr, root, dom, samba admin users = samba, root read list = samba write list = samba printer admin = force user = force group = read only = Yes create mask = 0744 force create mode = 00 security mask = 0777 force security mode = 00 directory mask = 0755 force directory mode = 00 directory security mask = 0777 force directory security mode = 00 force unknown acl user = 00 inherit permissions = No inherit acls = No guest only = No guest ok = No only user = No hosts allow = hosts deny = status = Yes nt acl support = Yes profile acls = No block size = 1024 max connections = 0 min print space = 0 strict allocate = No strict sync = No sync always = No write cache size = 0 max print jobs = 1000 printable = No postscript = No printing = cups print command = lpr -r -P%p %s lpq command = lpq -P%p lprm command = lprm -P%p %j lppause command = lpresume command = queuepause command = queueresume command = printer name = use client driver = No default devmode = No printer driver = printer driver file = /etc/samba/printers.def printer driver location = default case = lower case sensitive = No preserve case = Yes short preserve case = Yes mangle case = No mangling char = ~ hide dot files = Yes hide unreadable = No delete veto files = No veto files = hide files = veto oplock files = map system = No map hidden = No map archive = Yes mangled names = Yes mangled map = browseable = Yes blocking locks = Yes csc policy = manual fake oplocks = No locking = Yes oplocks = Yes level2 oplocks = Yes oplock contention limit = 2 posix locking = Yes strict locking = No share modes = Yes copy = include = exec = preexec close = No postexec = root preexec = root preexec close = No root postexec = available = Yes volume = fstype = NTFS set directory = No wide links = Yes follow symlinks = Yes dont descend = magic script = magic output = delete readonly = No dos filemode = No dos filetimes = No dos filetime resolution = No fake directory create times = No vfs object = vfs options = msdfs root = No [homes] comment = Home Directories valid users = %S admin users = samba, root, dom read only = No create mask = 0664 directory mask = 0775 browseable = No [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No [pub] path = /samba/pub ################################################################ smbusers # Unix_name = SMB_name1 SMB_name2 ... root = administrator admin nobody = guest pcguest smbguest default = samba p5ws = p5ws$ p5ws ipc$ ipc samba = default ################################################################ Cheers Dominik Fischer -----Urspr?ngliche Nachricht----- Von: Coreix Systems - Unix - Linux Development & Internetworking Engineers [mailto:lists@coreixsystems.com.au] Gesendet: Samstag, 12. April 2003 15:26 An: dominik Betreff: RE: Samba maps any user to nobody -> [Samba] problem logging on to sambadomain (pdc) from a win xp workstation