Hello,
I have a setup with virtual Samba hosts. The configuration has been
copied from an older setup with Samba 2.x, where it worked without
prpblems. But now (Samba 3.0.0) I have some problems. The Samba host
and PDC is called //BERTHA, the virtual host on the same machine is
named //SCHUELER and there is a third host (located on another
workstation) with the name //JESSICA. There is a share with the name
//SCHUELER/KLASSEN, which I want to access as an example. All of the
hosts involved are Linux machines.
I did the following:
| sfroehli@bertha:~$ smbclient //schueler/klassen -U sfroehli
| Password:
| smb: \>
So the vhost setup seems to be ok, as far as I can tell.
| jessica:~# smbpasswd -U root -j MEITNER
| Password:
| Joined domain MEITNER.
Our other host successfully joined the domain. Now try to mount the
share:
| sfroehli@jessica:~$ smbclient //schueler/klassen -U sfroehli
| added interface ip=10.10.0.6 bcast=10.10.255.255 nmask=255.255.0.0
| Password:
| session setup failed: NT_STATUS_ACCESS_DENIED
I guarantee that the password has been entered correctly (and the error
message would have been different anyway). I have error logs at level 10
of both bertha and jessica (please ask for them, if you need them - they
have a size of app. 500 KB, too much for here). I can only guess about
the contents, but the essential lines seem to boil down to:
| cli_net_req_chal: LSA Request Challenge from SCHUELER to BERTHA:
5DA4377A8CC39340
| cli_net_auth2: srv:\\BERTHA acct:SCHUELER$ sc:2 mc: SCHUELER chal
8D94777A1A9D3654 neg: 400701ff
| cli_nt_setup_creds: auth2 challenge failed NT_STATUS_ACCESS_DENIED
Now what are possible reasons for this failure? Any ideas?
To summarize, the following do work:
| sfroehli@jessica:~$ smbclient //bertha/klassen -U sfroehli
| sfroehli@bertha:~$ smbclient //bertha/klassen -U sfroehli
| sfroehli@bertha:~$ smbclient //schueler/klassen -U sfroehli
"Only" access from a remote host to a virtual samba host is denied
(which is of course nothing which can be accepted) - local access to a
vhost does work as well as remote access to the base host does...
Bye,
Stefan