General information about our Samba server configuration:
- Server is a domain member and passes authentication to a domain that
also has trust relationships
- UNIX passwd/group lookups are performed via NIS
- Running Debian Sarge, Samba 3.0.14a
The problem scenario is this:
- If I map a share, i.e. \\samba\home, then map the dfs root
\\samba\dfs, I get "Access Denied" to all shares mapping back to the
Samba server, including a DFS pointer to \\samba\home.
Samba logs:
[2005/09/15 11:25:56, 0] auth/auth_domain.c:domain_client_validate(199)
domain_client_validate: unable to validate password for user [my
user] in domain [my domain] to Domain controller \\[my server]. Error
was NT_STATUS_WRONG_PASSWORD.
On the domain controller side, the following event is logged:
09/15 11:25:56 [LOGON] SamLogon: Transitive Network logon of [my
domain]\[my user] from \\[my client] (via [my server]) Entered
09/15 11:25:56 [LOGON] SamLogon: Transitive Network logon of [my
domain]\[my user] from \\[my client] (via [my server]) Returns 0xC000006A
However, if I map \\samba\dfs first OR if I use
\\samba.fully-qualified.domain.name\dfs in either order, I don't
received the error. Any explanation for this behavior and possible
remedies to fix it other than the other scenarios?
Thanks,
Dennis
