samba - Sep 2005 - Authentication for user FAILED with error NT_STATUS_NO_SUCH_USER

Hi list,


I?m trying to get help from list but I am not being happy. What I need to do
to get It???

I getting this on syslog file:

Sep 21 14:59:15 zeus slapd[2123]: conn=18 fd=15 ACCEPT from
IP=127.0.0.1:32791 (IP=0.0.0.0:389)
Sep 21 14:59:15 zeus slapd[2123]: conn=18 op=0 BIND
dn="cn=samba,ou=DSA,dc=cultura,dc=gov,dc=br" method=128
Sep 21 14:59:15 zeus slapd[2123]: conn=18 op=0 BIND
dn="cn=samba,ou=DSA,dc=cultura,dc=gov,dc=br" mech=SIMPLE ssf=0
Sep 21 14:59:15 zeus slapd[2123]: conn=18 op=0 RESULT tag=97 err=0 textSep 21
14:59:15 zeus slapd[2123]: conn=18 op=1 SRCH base="" scope=0 deref=0
filter="(objectClass=*)"
Sep 21 14:59:15 zeus slapd[2123]: conn=18 op=1 SRCH attr=supportedControl
Sep 21 14:59:15 zeus slapd[2123]: conn=18 op=1 SEARCH RESULT tag=101 err=0
nentries=1 textSep 21 14:59:15 zeus slapd[2123]: conn=18 op=2 SRCH
base="dc=cultura,dc=gov,dc=br" scope=2 deref=0
filter="(&(uid=testuser)(objectClass=sambaSamAccount))"
Sep 21 14:59:15 zeus slapd[2123]: conn=18 op=2 SRCH attr=uid uidNumber
gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange sambaPwdMustChange
sambaLogonTime sambaLogoffTime sambaKickoffTime cn displayName
sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description
sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword
sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial
sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory
modifyTimestamp sambaLogonHours modifyTimestamp
Sep 21 14:59:15 zeus slapd[2123]: conn=18 op=2 SEARCH RESULT tag=101 err=0
nentries=0 textSep 21 14:59:15 zeus smbd[2380]: [2005/09/21 14:59:15, 2]
auth/auth.c:check_ntlm_password(312)
Sep 21 14:59:15 zeus smbd[2380]:   check_ntlm_password:  Authentication for
user [testuser] -> [testuser] FAILED with error NT_STATUS_NO_SUCH_USER
Sep 21 14:59:15 zeus smbd[2380]: [2005/09/21 14:59:15, 2]
smbd/server.c:exit_server(609)
Sep 21 14:59:15 zeus smbd[2380]:   Closing connections
Sep 21 14:59:15 zeus slapd[2123]: conn=18 fd=15 closed



I can?t authenticate Domain users or insert machines into domain. I created
the account for the user through smbldap-useradd. The administrator account
works fine, only users account failed,

How can I fix It, probably there is a configuration problem. But I don?t
know where It is, and I don?t have anymore time to waste with this trouble.
I almost backing to Microsoft.


Any help will be very welcome.

Sergio

S?rgio A P Ferreira wrote:
> Hi list,
> Sep 21 14:59:15 zeus slapd[2123]: conn=18 op=2 SRCH
> base="dc=cultura,dc=gov,dc=br" scope=2 deref=0
> filter="(&(uid=testuser)(objectClass=sambaSamAccount))"
> Sep 21 14:59:15 zeus slapd[2123]: conn=18 op=2 SRCH attr=uid uidNumber
> gidNumber homeDirectory sambaPwdLastSet sambaPwdCanChange
sambaPwdMustChange
> sambaLogonTime sambaLogoffTime sambaKickoffTime cn displayName
> sambaHomeDrive sambaHomePath sambaLogonScript sambaProfilePath description
> sambaUserWorkstations sambaSID sambaPrimaryGroupSID sambaLMPassword
> sambaNTPassword sambaDomainName objectClass sambaAcctFlags sambaMungedDial
> sambaBadPasswordCount sambaBadPasswordTime sambaPasswordHistory
> modifyTimestamp sambaLogonHours modifyTimestamp
> Sep 21 14:59:15 zeus slapd[2123]: conn=18 op=2 SEARCH RESULT tag=101 err=0
> nentries=0 textSee the nentries=0? This is telling you the object was not
found in your
LDAP directory. Try to search from the commandline with ldapsearch like:

ldapsearch -D <here goes what you have for "ldap admin dn" in your
smb.conf> -b "dc=gov,dc=br" -W
(&(uid=testuser)(objectClass=sambaSamAccount)

if that doesn't work try modifying the search filter to read:

(&(uid=*)(objectClass=*)

if it works (you get the entries back), your entry most likely misses
the sambaSamAccount attributes, that is to say you missed a step in your
setup (smbpasswd?)

if it does not work it might be a problem with ACLs in your LDAP server.
 Try using your "rootdn" from slapd.conf for the -D switch in the
above
search. If that works change your ACLs to allow your "ldap admin dn"
to
read and write the necessary attributes.

Another thing to check is if your users are visible to the system via
NSS, a "getent passwd" should show your samba users along with the
users
from /etc/passwd.

hth
 Paul

On 9/21/2005 2:29 PM, S?rgio A P Ferreira wrote:
> Sep 21 14:59:15 zeus slapd[2123]: conn=18 op=2 SEARCH RESULT tag=101 err=0
> nentries=0 text
check your LDAP ACLs ... most frequent problem for LDAP apps by far

-- 
Eric A. Hall                                        http://www.ehsco.com/
Internet Core Protocols          http://www.oreilly.com/catalog/coreprot/