Vincent.Badier@alcatel.fr
2003-Jul-15 14:56 UTC
[Samba] Samba-3.0.0beta2 - cannot connect to share
Samba 3.0beta2 with ADS support. Said my domain is named "MD" in an Active Directory environment I joined MD, and tested my smb.conf with testparm : # /usr/local/samba/bin/testparm /usr/local/samba/lib/smb.conf Load smb config files from /usr/local/samba/lib/smb.conf Processing section "[oneshare]" Processing section "[secshare]" Loaded services file OK. 'winbind separator = +' might cause problems with group membership. Server role: ROLE_DOMAIN_MEMBER Press enter to see a dump of your service definitions # Global parameters [global] workgroup = MD netbios name = MYHOSTNAME server string = SambaPFT security = DOMAIN update encrypted = Yes allow trusted domains = No password server = ip.of.my.dc client plaintext auth = No syslog = 0 log file = /var/log/samba/beta/log.%m max log size = 8000 announce version = 4.5 show add printer wizard = No preferred master = No local master = No domain master = No dns proxy = No wins server = ip.of.my.dc ldap ssl = no idmap uid = 10000-20000 idmap gid = 10000-20000 winbind separator = + invalid users = root [oneshare] path = /mnt/alcanet/share1 valid users = MD+SEC_GROUP read only = No [secshare] path = /mnt/alcanet/share2 valid users = MD+SEC_GROUP read only = No I run 3 daemons, and try to see if i can fetch domain accounts : # /usr/local/samba/bin/wbinfo -u | grep myaccount MD+myaccount Well, this looks like good. In addition, no error founded in the winbindd log file # cat log.winbindd [2003/07/15 16:50:21, 1] nsswitch/winbindd_util.c:add_trusted_domain(139) Added domain MD I then try to connect to my share via a windows client (whitchever it is), and a dialog box appear prompting to enter another account/password. The log.winbindd looks like this at this time : [2003/07/15 16:50:21, 1] nsswitch/winbindd_util.c:add_trusted_domain(139) Added domain AD2 [2003/07/15 16:53:01, 0] nsswitch/winbindd.c:process_loop(692) process_loop: Invalid request size from pid 1818845549: 4 bytes sent, should be 1312 [2003/07/15 16:53:52, 0] nsswitch/winbindd_sid.c:winbindd_lookupname(103) could not find domain entry for domain [2003/07/15 16:53:52, 0] nsswitch/winbindd_sid.c:winbindd_lookupname(103) could not find domain entry for domain [2003/07/15 16:53:52, 0] nsswitch/winbindd_sid.c:winbindd_lookupname(103) could not find domain entry for domain [...] I don't understand what's happen. I had some messages when i joined the domain, but if it has failed, i couldn't fetch any account, could i? I addition, i tried to change the security = DOMAIN in security = ADS, without any success. If anyone could point me on one direction, it would be greet. Regard's -- Vincent