thr3ads.net - samba - [Samba] Using samba as a PDC with win2k clients [Sep 2003]

If this information is useful, please help other people find it:
Share via:

Sandro Lex

2003-Sep-17 19:50 UTC

[Samba] Using samba as a PDC with win2k clients

Hello Samba users,

I'm trying to configure my samba server as a PDC for some Win2k
machines.
I'm running Red Hat 8.0 and samba-3.0.0rc4.
Everything seems to be ok, when using workgroup configuration, all the
shares works fine. But I cant get the Win2k clients to log in the
Domain.
It says I have a unknown user or an incorrect password. But at least it
prompted me for a user/password, so I know it is finding the Domain in
the Server. Moreover, if I browse the network neighborhood I can see the
Domain and the machines / shares.
So I just cant log in.

I have users and trust accounts configured at the server.
I switched log level to 2 and if I use a correct combination of
user/pass the log says :

[2003/09/17 16:45:46, 2] auth/auth.c:check_ntlm_password(302)
  check_ntlm_password:  authentication for user [sandro] -> [sandro] ->
[sandro] succeeded

If I use an incorrect combination the output would be:

[2003/09/17 16:46:42, 2] auth/auth.c:check_ntlm_password(309)
  check_ntlm_password:  Authentication for user [sandro] -> [sandro]
FAILED with error NT_STATUS_WRONG_PASSWORD

So, I presume the problem aint authentication. 


Anyone Can tell me what else it could be??


my smb.conf:

[global]
        workgroup = SAMBA
        encrypt passwords = yes
 
        domain master = Yes
        local master = yes
        preferred master = Yes
        os level = 65
 
        domain logons = Yes
        security = user
 
        log level = 2
 
 
[netlogon]
        path = /home/netlogon
        guest ok = Yes
        browseable = No
 
[homes]
        comment = "Diretorio Home de : %u "
        writeable = yes
        create mask = 0644
        browseable = No
 
[public]
        path = /tmp
        writeable = yes
        guest ok = yes



and the complete output of the log with a correct combination of
user/pass :

 
[2003/09/17 16:52:05, 2] smbd/reply.c:reply_special(93)
  netbios connect: name1=SIGMA           name2=PDV
[2003/09/17 16:52:05, 2] smbd/reply.c:reply_special(100)
  netbios connect: local=sigma remote=pdv, name type = 0
[2003/09/17 16:52:05, 2] smbd/server.c:exit_server(558)
  Closing connections
[2003/09/17 16:52:05, 2] smbd/sesssetup.c:setup_new_vc_session(535)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
[2003/09/17 16:52:05, 2] smbd/sesssetup.c:setup_new_vc_session(535)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
[2003/09/17 16:52:05, 2] auth/auth.c:check_ntlm_password(302)
  check_ntlm_password:  authentication for user [sandro] -> [sandro] ->
[sandro] succeeded
[2003/09/17 16:52:06, 2]
rpc_server/srv_samr_nt.c:_samr_lookup_domain(2540)
  Returning domain sid for domain SAMBA ->
S-1-5-21-331481452-486475617-929701000
[2003/09/17 16:52:06, 2]
rpc_server/srv_samr_nt.c:access_check_samr_object(93)
  _samr_open_domain: ACCESS DENIED  (requested: 0x00000211)
[2003/09/17 16:52:06, 2]
rpc_server/srv_samr_nt.c:_samr_lookup_domain(2540)
  Returning domain sid for domain SAMBA ->
S-1-5-21-331481452-486475617-929701000
[2003/09/17 16:52:06, 2]
rpc_server/srv_samr_nt.c:access_check_samr_function(115)
  _samr_create_user: ACCESS DENIED (granted: 0x00000201;  required:
0x00000010)
[2003/09/17 16:52:06, 2] smbd/server.c:exit_server(558)
  Closing connections
[2003/09/17 16:52:07, 2] smbd/reply.c:reply_special(93)
  netbios connect: name1=SIGMA           name2=PDV
[2003/09/17 16:52:07, 2] smbd/reply.c:reply_special(100)
  netbios connect: local=sigma remote=pdv, name type = 0
[2003/09/17 16:52:07, 2] smbd/sesssetup.c:setup_new_vc_session(535)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
[2003/09/17 16:52:07, 2] smbd/server.c:exit_server(558)
  Closing connections
[2003/09/17 16:52:07, 2] smbd/sesssetup.c:setup_new_vc_session(535)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
[2003/09/17 16:52:07, 2] auth/auth.c:check_ntlm_password(302)
  check_ntlm_password:  authentication for user [sandro] -> [sandro] ->
[sandro] succeeded
[2003/09/17 16:52:09, 2] smbd/server.c:exit_server(558)
  Closing connections

rruegner

2003-Sep-17 20:47 UTC

head link

[Samba] Using samba as a PDC with win2k clients

hi,
for sure you must have the users on the samba server
in passwd and smbpasswd...
for admin root must be in smbpasswd too...
this is the way which it was in older samba and it works like charme with
3.rc4 too....in your conf a few
more entries will give you more functions...,study
this list with google many smb.conf were posted and with
3 rc4 there are more possible setups with ldap server i.e
Regards
----- Original Message ----- 
From: "Sandro Lex" <sandro@wnb.com.br>
To: <samba@lists.samba.org>
Sent: Wednesday, September 17, 2003 9:53 PM
Subject: [Samba] Using samba as a PDC with win2k clients

> Hello Samba users,
>
> I'm trying to configure my samba server as a PDC for some Win2k
> machines.
> I'm running Red Hat 8.0 and samba-3.0.0rc4.
> Everything seems to be ok, when using workgroup configuration, all the
> shares works fine. But I cant get the Win2k clients to log in the
> Domain.
> It says I have a unknown user or an incorrect password. But at least it
> prompted me for a user/password, so I know it is finding the Domain in
> the Server. Moreover, if I browse the network neighborhood I can see the
> Domain and the machines / shares.
> So I just cant log in.
>
> I have users and trust accounts configured at the server.
> I switched log level to 2 and if I use a correct combination of
> user/pass the log says :
>
> [2003/09/17 16:45:46, 2] auth/auth.c:check_ntlm_password(302)
>   check_ntlm_password:  authentication for user [sandro] -> [sandro]
->
> [sandro] succeeded
>
> If I use an incorrect combination the output would be:
>
> [2003/09/17 16:46:42, 2] auth/auth.c:check_ntlm_password(309)
>   check_ntlm_password:  Authentication for user [sandro] -> [sandro]
> FAILED with error NT_STATUS_WRONG_PASSWORD
>
> So, I presume the problem aint authentication.
>
>
> Anyone Can tell me what else it could be??
>
>
> my smb.conf:
>
> [global]
>         workgroup = SAMBA
>         encrypt passwords = yes
>
>         domain master = Yes
>         local master = yes
>         preferred master = Yes
>         os level = 65
>
>         domain logons = Yes
>         security = user
>
>         log level = 2
>
>
> [netlogon]
>         path = /home/netlogon
>         guest ok = Yes
>         browseable = No
>
> [homes]
>         comment = "Diretorio Home de : %u "
>         writeable = yes
>         create mask = 0644
>         browseable = No
>
> [public]
>         path = /tmp
>         writeable = yes
>         guest ok = yes
>
>
>
> and the complete output of the log with a correct combination of
> user/pass :
>
>
> [2003/09/17 16:52:05, 2] smbd/reply.c:reply_special(93)
>   netbios connect: name1=SIGMA           name2=PDV
> [2003/09/17 16:52:05, 2] smbd/reply.c:reply_special(100)
>   netbios connect: local=sigma remote=pdv, name type = 0
> [2003/09/17 16:52:05, 2] smbd/server.c:exit_server(558)
>   Closing connections
> [2003/09/17 16:52:05, 2] smbd/sesssetup.c:setup_new_vc_session(535)
>   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
> all old resources.
> [2003/09/17 16:52:05, 2] smbd/sesssetup.c:setup_new_vc_session(535)
>   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
> all old resources.
> [2003/09/17 16:52:05, 2] auth/auth.c:check_ntlm_password(302)
>   check_ntlm_password:  authentication for user [sandro] -> [sandro]
->
> [sandro] succeeded
> [2003/09/17 16:52:06, 2]
> rpc_server/srv_samr_nt.c:_samr_lookup_domain(2540)
>   Returning domain sid for domain SAMBA ->
> S-1-5-21-331481452-486475617-929701000
> [2003/09/17 16:52:06, 2]
> rpc_server/srv_samr_nt.c:access_check_samr_object(93)
>   _samr_open_domain: ACCESS DENIED  (requested: 0x00000211)
> [2003/09/17 16:52:06, 2]
> rpc_server/srv_samr_nt.c:_samr_lookup_domain(2540)
>   Returning domain sid for domain SAMBA ->
> S-1-5-21-331481452-486475617-929701000
> [2003/09/17 16:52:06, 2]
> rpc_server/srv_samr_nt.c:access_check_samr_function(115)
>   _samr_create_user: ACCESS DENIED (granted: 0x00000201;  required:
> 0x00000010)
> [2003/09/17 16:52:06, 2] smbd/server.c:exit_server(558)
>   Closing connections
> [2003/09/17 16:52:07, 2] smbd/reply.c:reply_special(93)
>   netbios connect: name1=SIGMA           name2=PDV
> [2003/09/17 16:52:07, 2] smbd/reply.c:reply_special(100)
>   netbios connect: local=sigma remote=pdv, name type = 0
> [2003/09/17 16:52:07, 2] smbd/sesssetup.c:setup_new_vc_session(535)
>   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
> all old resources.
> [2003/09/17 16:52:07, 2] smbd/server.c:exit_server(558)
>   Closing connections
> [2003/09/17 16:52:07, 2] smbd/sesssetup.c:setup_new_vc_session(535)
>   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
> all old resources.
> [2003/09/17 16:52:07, 2] auth/auth.c:check_ntlm_password(302)
>   check_ntlm_password:  authentication for user [sandro] -> [sandro]
->
> [sandro] succeeded
> [2003/09/17 16:52:09, 2] smbd/server.c:exit_server(558)
>   Closing connections
>
>
>
>
>
>
>
>
>
>
>
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>

Raul

2003-Sep-18 16:09 UTC

head link

[Samba] Re: Using samba as a PDC with win2k clients

1) useradd -d /dev/null -g 100 -s /bin/false -M machine_name$
2) smbpasswd -m -a machine_name


"Sandro Lex" <sandro@wnb.com.br> escribió en el mensaje
news:1063828384.3734.42.camel@sigma...> Hello Samba users,
>
> I'm trying to configure my samba server as a PDC for some Win2k
> machines.
> I'm running Red Hat 8.0 and samba-3.0.0rc4.
> Everything seems to be ok, when using workgroup configuration, all the
> shares works fine. But I cant get the Win2k clients to log in the
> Domain.
> It says I have a unknown user or an incorrect password. But at least it
> prompted me for a user/password, so I know it is finding the Domain in
> the Server. Moreover, if I browse the network neighborhood I can see the
> Domain and the machines / shares.
> So I just cant log in.
>
> I have users and trust accounts configured at the server.
> I switched log level to 2 and if I use a correct combination of
> user/pass the log says :
>
> [2003/09/17 16:45:46, 2] auth/auth.c:check_ntlm_password(302)
>   check_ntlm_password:  authentication for user [sandro] -> [sandro]
->
> [sandro] succeeded
>
> If I use an incorrect combination the output would be:
>
> [2003/09/17 16:46:42, 2] auth/auth.c:check_ntlm_password(309)
>   check_ntlm_password:  Authentication for user [sandro] -> [sandro]
> FAILED with error NT_STATUS_WRONG_PASSWORD
>
> So, I presume the problem aint authentication.
>
>
> Anyone Can tell me what else it could be??
>
>
> my smb.conf:
>
> [global]
>         workgroup = SAMBA
>         encrypt passwords = yes
>
>         domain master = Yes
>         local master = yes
>         preferred master = Yes
>         os level = 65
>
>         domain logons = Yes
>         security = user
>
>         log level = 2
>
>
> [netlogon]
>         path = /home/netlogon
>         guest ok = Yes
>         browseable = No
>
> [homes]
>         comment = "Diretorio Home de : %u "
>         writeable = yes
>         create mask = 0644
>         browseable = No
>
> [public]
>         path = /tmp
>         writeable = yes
>         guest ok = yes
>
>
>
> and the complete output of the log with a correct combination of
> user/pass :
>
>
> [2003/09/17 16:52:05, 2] smbd/reply.c:reply_special(93)
>   netbios connect: name1=SIGMA           name2=PDV
> [2003/09/17 16:52:05, 2] smbd/reply.c:reply_special(100)
>   netbios connect: local=sigma remote=pdv, name type = 0
> [2003/09/17 16:52:05, 2] smbd/server.c:exit_server(558)
>   Closing connections
> [2003/09/17 16:52:05, 2] smbd/sesssetup.c:setup_new_vc_session(535)
>   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
> all old resources.
> [2003/09/17 16:52:05, 2] smbd/sesssetup.c:setup_new_vc_session(535)
>   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
> all old resources.
> [2003/09/17 16:52:05, 2] auth/auth.c:check_ntlm_password(302)
>   check_ntlm_password:  authentication for user [sandro] -> [sandro]
->
> [sandro] succeeded
> [2003/09/17 16:52:06, 2]
> rpc_server/srv_samr_nt.c:_samr_lookup_domain(2540)
>   Returning domain sid for domain SAMBA ->
> S-1-5-21-331481452-486475617-929701000
> [2003/09/17 16:52:06, 2]
> rpc_server/srv_samr_nt.c:access_check_samr_object(93)
>   _samr_open_domain: ACCESS DENIED  (requested: 0x00000211)
> [2003/09/17 16:52:06, 2]
> rpc_server/srv_samr_nt.c:_samr_lookup_domain(2540)
>   Returning domain sid for domain SAMBA ->
> S-1-5-21-331481452-486475617-929701000
> [2003/09/17 16:52:06, 2]
> rpc_server/srv_samr_nt.c:access_check_samr_function(115)
>   _samr_create_user: ACCESS DENIED (granted: 0x00000201;  required:
> 0x00000010)
> [2003/09/17 16:52:06, 2] smbd/server.c:exit_server(558)
>   Closing connections
> [2003/09/17 16:52:07, 2] smbd/reply.c:reply_special(93)
>   netbios connect: name1=SIGMA           name2=PDV
> [2003/09/17 16:52:07, 2] smbd/reply.c:reply_special(100)
>   netbios connect: local=sigma remote=pdv, name type = 0
> [2003/09/17 16:52:07, 2] smbd/sesssetup.c:setup_new_vc_session(535)
>   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
> all old resources.
> [2003/09/17 16:52:07, 2] smbd/server.c:exit_server(558)
>   Closing connections
> [2003/09/17 16:52:07, 2] smbd/sesssetup.c:setup_new_vc_session(535)
>   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
> all old resources.
> [2003/09/17 16:52:07, 2] auth/auth.c:check_ntlm_password(302)
>   check_ntlm_password:  authentication for user [sandro] -> [sandro]
->
> [sandro] succeeded
> [2003/09/17 16:52:09, 2] smbd/server.c:exit_server(558)
>   Closing connections
>
>
>
>
>
>
>
>
>
>
>
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>

Possibly Parallel Threads

Search for more apparently analagous threads

samba - Sep 2003 - Using samba as a PDC with win2k clients

[Samba] Using samba as a PDC with win2k clients

[Samba] Using samba as a PDC with win2k clients

[Samba] Re: Using samba as a PDC with win2k clients

Possibly Parallel Threads