samba - Apr 2005 - No domain server was available to validate your password.

I am a Samba newbie who has just set up a Samba server running under
Fedora Core 3 and a client running under Win 98.  

When I log in, I get the message:
        No domain server was available to validate your password.  You
        may not be able to gain access to some network resources.

Also, Any attempt to see the network from "Network Neighborhood" or
from
"Windows Explorer" fails with the error box:
        Unable to browse the network
        .
        The network is not accessible
        For more information ...

I have run all the tests in the HOWTO section:
	.../Samba-HOWTO-Collection/diagnosis.html
up to and including the last two:
	C:\WINDOWS>net use x: \\claremont\TMP
on the client, which does, in fact make the device x: on my client
equivalent to /tmp on my server, and
        $ nmblookup -M MYGROUP
        querying MYGROUP on 192.168.255.255
        192.168.1.35 MYGROUP<1d>
on the server, which looks OK.

Nevertheless (to repeat) attempts to browse the network from "Network
Neighborhood" or from "Windows Explorer" all fail.

I have taken some logs with ethereal.  The one attached, windowsLogin
shows activity from starting smbd and nmbd, through logging on from the
windows machine (amito) and and attempt to browse the network from it.
I have also attached my smb.conf file.

The network is very small.  It consists of only 3 machines:

	# Gateway to the Internet and name server for the local net
	192.168.0.1	homeportal.gateway.2wire.net

	# Windows client
	192.168.1.34	amito.localdomain	amito

	# Linux Samba server
	192.168.1.35	claremont.localdomain	claremont

What's going on?

-------------- next part --------------
# Samba config file created using SWAT
# from 127.0.0.1 (127.0.0.1)
# Date: 2005/04/07 17:33:00

# Global parameters
[global]
	workgroup = MYGROUP
	server string = Samba Server
	auth methods = guest, sam
	username map = /etc/samba/smbusers
	log file = /var/log/samba/%m.log
	max log size = 50
	name resolve order = lmhosts host bcast
	server signing = auto
	socket options = TCP_NODELAY SO_SNDBUF=8192 SO_RCVBUF=8192
	printcap name = /etc/printcap
	preferred master = Yes
	domain master = Yes
	wins support = Yes
	ldap ssl = no
	idmap uid = 16777216-33554431
	idmap gid = 16777216-33554431
	cups options = raw

[homes]
	comment = Home Directories
	read only = No

[printers]
	comment = All Printers
	path = /var/spool/samba
	printable = Yes
	browseable = No

[tmp]
	comment = Temporary file space
	path = /tmp
	read only = No
	guest ok = Yes

[jonrysh]
	path = /home/jonrysh
	guest ok = Yes

> On Friday 08 April 2005 16:30, Jonathan Ryshpan wrote:
> > I am a Samba newbie who has just set up a Samba server running under
> > Fedora Core 3 and a client running under Win 98.
> >
> > When I log in, I get the message:
> >         No domain server was available to validate your password.  You
> >         may not be able to gain access to some network resources.
> > ...
> > I have run all the tests in the HOWTO section:
> >         .../Samba-HOWTO-Collection/diagnosis.html
> > up to and including the last two:
> >         C:\WINDOWS>net use x: \\claremont\TMP
> > on the client, which does, in fact make the device x: on my client
> > equivalent to /tmp on my server...
On Fri, 2005-04-08 at 17:50 -0600, John H Terpstra
wrote:
> Did you turn off the Linux firewall?
The firewall was never on.  Would it have been possible to access files
in the server (as it was possible) if the firewall was on?

On Sat, 9 Apr 2005 13:24 -0400 alton bailey wrote:
> in your smb.conf ther is an option  domain logon should be enable in
> order to validate user authentication.
This was the problem.  Thank you very much for your help.

I am afraid the documentation for this option and it's handling in swat
isn't what it should be.  The implication in the documentation is that
"Domain Logon" should be "NO" except for unusual cases.  In
swat, it's
only visible when the view is "Advanced".  Judging by my experience,
it
looks like it should always be on in very simple networks like mine.

-- 
Jonathan Ryshpan <jonrysh@pacbell.net>
Berkeley Linux Team