[Samba] Samba 3.0alpha23 problems

Jordan, Shane
Tue, 13 May 2003 21:26:29 -0000

Ok guys I am having some issues with Samba via ADS.

I went to browse a share I setup on my Linux box and it prompted me for a
username and password. This did not work but I found this in the log.winbind


[2003/05/13 16:15:56, 1]
nsswitch/winbindd_util.c:rescan_trusted_domains(168)
  scanning trusted domain list
[2003/05/13 16:15:56, 1] libsmb/clikrb5.c:krb5_mk_req2(267)
  krb5_cc_get_principal failed (No credentials cache found)
[2003/05/13 16:15:57, 0] libads/kerberos.c:ads_kinit_password(133)
  kerberos_kinit_password HOST/demarc@CORP.DELINEA.COM failed:
Preauthentication failed
[2003/05/13 16:15:57, 1] nsswitch/winbindd_ads.c:ads_cached_connection(69)
  ads_connect for domain CORP failed: Invalid credentials

Now let me shed some light before everyone ask what I did and didn't do :)

I setup and joined the ads server fine via "net ads join" The machine
shows
up fine. Also doing a the kinit sjordan@corp.delinea.com goes through
perfect with no errors. I checked the ADS server and the computer demarc
does show as being joined to the ADS server.

Now one odd thing showed up for me:
wbinfo -m
comes up with nothing.

Here is my smb.conf file:

[global]
        workgroup = CORP
        netbios name = demarc
        remote announce = 10.2.41.101
        realm = CORP.DELINEA.COM
        ads server = 10.2.20.4
        server string = Linux

        security = ADS
        password server = CORPSVCS
        passwd program = /usr/bin/passwd %u
        encrypt passwords = yes
        unix password sync = Yes
        preferred master = No
        local master = No
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        domain master = No
        dns proxy = no
        ldap ssl = no

        winbind separator = +
        winbind uid = 10000-20000
        winbind gid = 10000-20000
        winbind enum users = yes
        winbind enum groups = yes
        winbind use default domain = No
        template homedir = /home/%U
        template shell = /bin/bash

[Opt]
        path=/opt
        guest ok = no
        read only = yes
        admin users = CORP+sjordan

I also tried just CORP as the realm and I get the same problem.

One other thing. If I comment out DOMAIN = CORP I can actually do a \\demarc
and I can get access to the shares and they work perfect....when I do this
wbinfo -m shows the following:
DELINEA
CORP

Please help or give me some ideas of where to go next. I am totally lost
now.

Shane