samba - May 2003 - Accessing printer from outside the domain

We need to give a user in another domain access to our printer:


our domain: OURDOM  (samba)

other domain: OTHERDOM (AD?)

user's workstation: \\OTHERDOM\WKSTN, in other domain

printer: in our domain

user: JOEBLOW - an account in each domain with the same login/password


We're getting this error in wkstn.log:

[2003/05/28 20:44:20, 1] smbd/password.c:server_validate(1101)
   password server  is not connected
[2003/05/28 20:44:20, 1] smbd/password.c:pass_check_smb(545)
   Couldn't find user 'joeblow' in passdb.
[2003/05/28 20:44:20, 2] smbd/reply.c:reply_sesssetup_and_X(975)
   NT Password did not match for user 'joeblow'!
[2003/05/28 20:44:20, 2] smbd/reply.c:reply_sesssetup_and_X(985)
   Defaulting to Lanman password for joeblow
[2003/05/28 20:44:20, 1] smbd/password.c:pass_check_smb(545)
   Couldn't find user 'joeblow' in passdb.
[2003/05/28 20:44:20, 1] smbd/reply.c:reply_sesssetup_and_X(1001)
   Rejecting user 'joeblow': authentication failed
[2003/05/28 20:44:20, 3] smbd/error.c:error_packet(94)
   error string = No such file or directory
[2003/05/28 20:44:20, 3] smbd/error.c:error_packet(113)
   error packet at smbd/reply.c(1003) cmd=115 (SMBsesssetupX) 
NT_STATUS_LOGON_FAILURE



Our password server (samba pdc) is ourdc.ourorg.org and has smbpasswd 
accounts on it.  The print server has no user accounts on it, smbpasswd 
or passwd.

The guest account "sambaguest" exists in smbpasswd and passwd both on 
the print server and password server, with the same password in all files.


this smb.conf is from the print server:

[global]
    debuglevel = 3
    workgroup = OURDOMAIN
    server string = samba print server
    printcap name = /etc/printcap
    load printers = yes
    printing = cups
    guest account = sambaguest
    log file = /var/log/samba/%m.log
    max log size = 0
    security = server
    password server = ourdc.ourorg.org
    encrypt passwords = yes
    smb passwd file = /etc/samba/smbpasswd
    unix password sync = Yes
    passwd program = /usr/bin/passwd %u
    passwd chat = *New*password* %n\n *Retype*new*password* %n\n
           *passwd:*all*authentication*tokens*updated*successfully*
    pam password change = yes
    obey pam restrictions = yes
    socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
    domain master = no
    preferred master = no
    wins server = 123.123.123.123
    dns proxy = no

[printers]
    comment = All Printers
    path = /var/spool/samba
    browseable = no
    public = yes
    guest ok = yes
    writable = no
    printable = yes


Any suggestions appreciated.

I'm doing my best to advocate F/OSS in our organization, but this has 
been a problem for over a week now and it's starting to look bad.

Any takers?


lloyd wrote:
> 
> We need to give a user in another domain access to our printer:
> 
> 
> our domain: OURDOM  (samba)
> 
> other domain: OTHERDOM (AD?)
> 
> user's workstation: \\OTHERDOM\WKSTN, in other domain
> 
> printer: in our domain
> 
> user: JOEBLOW - an account in each domain with the same login/password
> 
> 
> We're getting this error in wkstn.log:
> 
> [2003/05/28 20:44:20, 1] smbd/password.c:server_validate(1101)
>   password server  is not connected
> [2003/05/28 20:44:20, 1] smbd/password.c:pass_check_smb(545)
>   Couldn't find user 'joeblow' in passdb.
> [2003/05/28 20:44:20, 2] smbd/reply.c:reply_sesssetup_and_X(975)
>   NT Password did not match for user 'joeblow'!
> [2003/05/28 20:44:20, 2] smbd/reply.c:reply_sesssetup_and_X(985)
>   Defaulting to Lanman password for joeblow
> [2003/05/28 20:44:20, 1] smbd/password.c:pass_check_smb(545)
>   Couldn't find user 'joeblow' in passdb.
> [2003/05/28 20:44:20, 1] smbd/reply.c:reply_sesssetup_and_X(1001)
>   Rejecting user 'joeblow': authentication failed
> [2003/05/28 20:44:20, 3] smbd/error.c:error_packet(94)
>   error string = No such file or directory
> [2003/05/28 20:44:20, 3] smbd/error.c:error_packet(113)
>   error packet at smbd/reply.c(1003) cmd=115 (SMBsesssetupX) 
> NT_STATUS_LOGON_FAILURE
> 
> 
> 
> Our password server (samba pdc) is ourdc.ourorg.org and has smbpasswd 
> accounts on it.  The print server has no user accounts on it, smbpasswd 
> or passwd.
> 
> The guest account "sambaguest" exists in smbpasswd and passwd
both on
> the print server and password server, with the same password in all files.
> 
> 
> this smb.conf is from the print server:
> 
> [global]
>    debuglevel = 3
>    workgroup = OURDOMAIN
>    server string = samba print server
>    printcap name = /etc/printcap
>    load printers = yes
>    printing = cups
>    guest account = sambaguest
>    log file = /var/log/samba/%m.log
>    max log size = 0
>    security = server
>    password server = ourdc.ourorg.org
>    encrypt passwords = yes
>    smb passwd file = /etc/samba/smbpasswd
>    unix password sync = Yes
>    passwd program = /usr/bin/passwd %u
>    passwd chat = *New*password* %n\n *Retype*new*password* %n\n
>           *passwd:*all*authentication*tokens*updated*successfully*
>    pam password change = yes
>    obey pam restrictions = yes
>    socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>    domain master = no
>    preferred master = no
>    wins server = 123.123.123.123
>    dns proxy = no
> 
> [printers]
>    comment = All Printers
>    path = /var/spool/samba
>    browseable = no
>    public = yes
>    guest ok = yes
>    writable = no
>    printable = yes
> 
> 
> Any suggestions appreciated.
>