thr3ads.net - samba - [Samba] PDC Question For Windows Clients [Jul 2006]

If this information is useful, please help other people find it:
Share via:

zdennis

2006-Jul-13 16:36 UTC

[Samba] PDC Question For Windows Clients

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

My windows xp clients do not have the groups Domain Users, Domain Groups, Domain
Admins, etc... Are they supposed to have those
groups?

My windows xp laptop has joined my domain, but I cannot login (even though my
LDAP backend is getting queried successfully). I do
not know if this might be a cause of the problem.

After joining a domain, should my windows clients have the Domain * groups on
the machine, or no ? Thanks,

Zach
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFEtngpMyx0fW1d8G0RAvPSAJkBe3XkllTUOxV745oh1LNncigDIQCfZXco
w/MiB2t4ak/bo73tH9khCbc=4lMW
-----END PGP SIGNATURE-----

zdennis

2006-Jul-13 20:14 UTC

head link

[Samba] PDC Question For Windows Clients

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ok, Here is my samba log. Authentication succeeds but my user still gets
"The system could not log you on. Make sure your User
name and domain are correct..." Any ideas?

[2006/07/13 15:56:06, 3] smbd/process.c:process_smb(1194)
  Transaction 40 of length 388
[2006/07/13 15:56:06, 3] smbd/process.c:switch_message(993)
  switch message SMBwriteX (pid 7634) conn 0x83afdd8
[2006/07/13 15:56:06, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2006/07/13 15:56:06, 4] smbd/vfs.c:vfs_ChDir(738)
  vfs_ChDir to /tmp
[2006/07/13 15:56:06, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261)
  search for pipe pnum=7094
[2006/07/13 15:56:06, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526)
  free_pipe_context: destroying talloc pool of size 0
[2006/07/13 15:56:06, 4] rpc_server/srv_pipe.c:api_rpcTNP(2230)
  api_rpcTNP: NETLOGON op 0x2 - api_rpcTNP: rpc command: NET_SAMLOGON
[2006/07/13 15:56:06, 3] rpc_server/srv_netlog_nt.c:_net_sam_logon(680)
  SAM Logon (Interactive). Domain:[MKTEC].  User:[testuser@ARIES] Requested
Domain:[MKTEC]
[2006/07/13 15:56:06, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2006/07/13 15:56:06, 3] smbd/uid.c:push_conn_ctx(393)
  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2006/07/13 15:56:06, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2006/07/13 15:56:06, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2006/07/13 15:56:06, 3] auth/auth.c:check_ntlm_password(219)
  check_ntlm_password:  Checking password for unmapped user
[MKTEC]\[testuser]@[ARIES] with the new password interface
[2006/07/13 15:56:06, 3] auth/auth.c:check_ntlm_password(222)
  check_ntlm_password:  mapped user is: [MKTEC]\[testuser]@[ARIES]
[2006/07/13 15:56:06, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2006/07/13 15:56:06, 3] smbd/uid.c:push_conn_ctx(393)
  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2006/07/13 15:56:06, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2006/07/13 15:56:06, 2] passdb/pdb_ldap.c:init_sam_from_ldap(640)
  init_sam_from_ldap: Entry found for user: testuser
[2006/07/13 15:56:06, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2006/07/13 15:56:06, 4] auth/auth_sam.c:sam_account_ok(123)
  sam_account_ok: Checking SMB password for user testuser
[2006/07/13 15:56:06, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2006/07/13 15:56:06, 3] smbd/uid.c:push_conn_ctx(393)
  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2006/07/13 15:56:06, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2006/07/13 15:56:06, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2006/07/13 15:56:06, 3] smbd/uid.c:push_conn_ctx(393)
  push_conn_ctx(101) : conn_ctx_stack_ndx = 1
[2006/07/13 15:56:06, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2006/07/13 15:56:06, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2006/07/13 15:56:06, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(267)
  fetch sid from gid cache 513 ->
S-1-5-21-3040749549-2843134544-1782940832-513
[2006/07/13 15:56:06, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2006/07/13 15:56:06, 3] lib/privileges.c:get_privileges(261)
  get_privileges: No privileges assigned to SID
[S-1-5-21-3040749549-2843134544-1782940832-3002]
[2006/07/13 15:56:06, 3] lib/privileges.c:get_privileges(261)
  get_privileges: No privileges assigned to SID
[S-1-5-21-3040749549-2843134544-1782940832-513]
[2006/07/13 15:56:06, 3] lib/privileges.c:get_privileges(261)
  get_privileges: No privileges assigned to SID [S-1-5-2]
[2006/07/13 15:56:06, 3] lib/privileges.c:get_privileges(261)
  get_privileges: No privileges assigned to SID [S-1-5-11]
[2006/07/13 15:56:06, 3] auth/auth.c:check_ntlm_password(268)
  check_ntlm_password: sam authentication for user [testuser] succeeded
[2006/07/13 15:56:06, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2006/07/13 15:56:06, 3] smbd/uid.c:push_conn_ctx(393)
  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2006/07/13 15:56:06, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2006/07/13 15:56:06, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2006/07/13 15:56:06, 2] auth/auth.c:check_ntlm_password(307)
  check_ntlm_password:  authentication for user [testuser] -> [testuser]
-> [testuser] succeeded
[2006/07/13 15:56:06, 4] rpc_parse/parse_net.c:init_dom_sid2s(1009)
  init_dom_sid2s:
[2006/07/13 15:56:06, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526)
  free_pipe_context: destroying talloc pool of size 912
[2006/07/13 15:56:06, 3] smbd/pipes.c:reply_pipe_write_and_X(207)
  writeX-IPC pnum=7094 nwritten=320
[2006/07/13 15:56:06, 3] smbd/process.c:process_smb(1194)
  Transaction 41 of length 63
[2006/07/13 15:56:06, 3] smbd/process.c:switch_message(993)
  get_privileges: No privileges assigned to SID [S-1-5-11]
[2006/07/13 15:56:06, 3] auth/auth.c:check_ntlm_password(268)
  check_ntlm_password: sam authentication for user [testuser] succeeded
[2006/07/13 15:56:06, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2006/07/13 15:56:06, 3] smbd/uid.c:push_conn_ctx(393)
  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2006/07/13 15:56:06, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2006/07/13 15:56:06, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2006/07/13 15:56:06, 2] auth/auth.c:check_ntlm_password(307)
  check_ntlm_password:  authentication for user [testuser] -> [testuser]
-> [testuser] succeeded
[2006/07/13 15:56:06, 4] rpc_parse/parse_net.c:init_dom_sid2s(1009)
  init_dom_sid2s:
[2006/07/13 15:56:06, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526)
  free_pipe_context: destroying talloc pool of size 912
[2006/07/13 15:56:06, 3] smbd/pipes.c:reply_pipe_write_and_X(207)
  writeX-IPC pnum=7094 nwritten=320
[2006/07/13 15:56:06, 3] smbd/process.c:process_smb(1194)
  Transaction 41 of length 63
[2006/07/13 15:56:06, 3] smbd/process.c:switch_message(993)
  switch message SMBreadX (pid 7634) conn 0x83afdd8
[2006/07/13 15:56:06, 4] smbd/uid.c:change_to_user(222)
  change_to_user: Skipping user change - already user
[2006/07/13 15:56:06, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1261)
  search for pipe pnum=7094
[2006/07/13 15:56:06, 3] smbd/pipes.c:reply_pipe_read_and_X(252)
  readX-IPC pnum=7094 min=1024 max=1024 nread=648
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFEtqsrMyx0fW1d8G0RAhAOAJ9S/5hL7W9pF70lmZoV7xwnMNLSHwCfdyAN
pdJUFLJ6tFeGGQVQ2qvUNPA=V8bw
-----END PGP SIGNATURE-----

Dariusz Dwornikowski

2006-Jul-13 21:47 UTC

head link

[Samba] PDC Question For Windows Clients

zdennis wrote:> Ok, Here is my samba log. Authentication succeeds but my user still
> gets "The system could not log you on. Make sure your User
> name and domain are correct..." Any ideas?
>
same problem here..>
> -- 
> Regards,
> Dariusz Dwornikowski      Network Administrator
> Cognifide Poland
>

zdennis

2006-Jul-14 20:06 UTC

head link

[Samba] PDC Question For Windows Clients

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dariusz Dwornikowski wrote:> zdennis wrote:
> 
>>Ok, Here is my samba log. Authentication succeeds but my user still
>>gets "The system could not log you on. Make sure your User
>>name and domain are correct..." Any ideas?
>>
> 
> 
> same problem here..
> 

ping... anyone able to resolve this issue?

Zach
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFEt/rHMyx0fW1d8G0RAl6wAJ9EqczwpnfQdeWdDTGPf1eTbSiAPwCcCVz/
yUVPlOklnaInRGpmWXcX33A=ddRx
-----END PGP SIGNATURE-----

zdennis

2006-Jul-14 21:39 UTC

head link

[Samba] PDC Question For Windows Clients

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Barry L. Kline wrote:> zdennis wrote:
> 
>>My windows xp clients do not have the groups Domain Users, Domain
Groups, Domain Admins, etc... Are they supposed to have those
>>groups?
>>
>>My windows xp laptop has joined my domain, but I cannot login (even
though my LDAP backend is getting queried successfully). I do
>>not know if this might be a cause of the problem.
>>
>>After joining a domain, should my windows clients have the Domain *
groups on the machine, or no ? Thanks,
> 
> 
> 
> What does the command:
> 
> net groupmap list
> 
> produce on your PDC?

Domain Admins (S-1-5-21-3040749549-2843134544-1782940832-512) -> Domain
Admins
Domain Users (S-1-5-21-3040749549-2843134544-1782940832-513) -> Domain Users
Domain Guests (S-1-5-21-3040749549-2843134544-1782940832-514) -> Domain
Guests
Domain Computers (S-1-5-21-3040749549-2843134544-1782940832-515) -> Domain
Computers
Administrators (S-1-5-32-544) -> Administrators
Account Operators (S-1-5-32-548) -> Account Operators
Print Operators (S-1-5-32-550) -> Print Operators
Backup Operators (S-1-5-32-551) -> Backup Operators
Replicators (S-1-5-32-552) -> Replicators


Zach
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFEuBCdMyx0fW1d8G0RAt2PAJ0TLrhbzaKVVJCKFk40cKDOib9ymQCggsc6
TNwKoQ9SOfpP8LfizK/mT1A=ET0x
-----END PGP SIGNATURE-----

Barry L. Kline

2006-Jul-14 21:52 UTC

head link

[Samba] PDC Question For Windows Clients

zdennis wrote:> My windows xp clients do not have the groups Domain Users, Domain Groups,
Domain Admins, etc... Are they supposed to have those
> groups?
> 
> My windows xp laptop has joined my domain, but I cannot login (even though
my LDAP backend is getting queried successfully). I do
> not know if this might be a cause of the problem.
> 
> After joining a domain, should my windows clients have the Domain * groups
on the machine, or no ? Thanks,

What does the command:

net groupmap list

produce on your PDC?

samba - Jul 2006 - PDC Question For Windows Clients

[Samba] PDC Question For Windows Clients

[Samba] PDC Question For Windows Clients

[Samba] PDC Question For Windows Clients

[Samba] PDC Question For Windows Clients

[Samba] PDC Question For Windows Clients

[Samba] PDC Question For Windows Clients