samba - Jun 2007 - 3.025b tree connect failed: NT_STATUS_ACCESS_DENIED

I am trying to use new samba and having problems.

# smbclient //sambamachine/shareweb -Uusername
Password:
Domain=[MYDOMAIN] OS=[Unix] Server=[Samba 3.0.25b]
tree connect failed: NT_STATUS_ACCESS_DENIED


I noticed this in the log:
Checking password for unmapped user [DOMAIN]\[username]@[CLIENTMACHINE]
with the new password interface
[2007/06/27 10:15:21, 2] auth/auth.c:check_ntlm_password(309)
  check_ntlm_password:  authentication for user [username] ->
[username] -> [MYDOMAIN\username] succeeded

any idea?

I saw this entry from 2003.
http://lists.samba.org/archive/samba/2003-December/076227.html

It lets me through, but now anyone can edit the pages.
>     I had this problem last myself, but found the solution:
>
>     Replace the parameter "valid users" for just
"users" don't use any
> more valid users on your
> configuration it will either deny access to Samba server or deny access
> to shares.
--sharif


On 6/27/07, sharif islam <sharif.islam@gmail.com>
wrote:
> I am trying to use new samba and having problems.
>
> # smbclient //sambamachine/shareweb -Uusername
> Password:
> Domain=[MYDOMAIN] OS=[Unix] Server=[Samba 3.0.25b]
> tree connect failed: NT_STATUS_ACCESS_DENIED
>
>
> I noticed this in the log:
> Checking password for unmapped user [DOMAIN]\[username]@[CLIENTMACHINE]
> with the new password interface
> [2007/06/27 10:15:21, 2] auth/auth.c:check_ntlm_password(309)
>   check_ntlm_password:  authentication for user [username] ->
> [username] -> [MYDOMAIN\username] succeeded
>
> any idea?
>

-- 
Sharif Islam                            http://www.sharifislam.com
Research Programmer             University of Illinois, Urbana-Champaign
Library Systems Office            217-244-4688

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

sharif islam wrote:
> I am trying to use new samba and having problems.
> 
> # smbclient //sambamachine/shareweb -Uusername
> Password:
> Domain=[MYDOMAIN] OS=[Unix] Server=[Samba 3.0.25b]
> tree connect failed: NT_STATUS_ACCESS_DENIED
> 
> 
> I noticed this in the log:
> Checking password for unmapped user [DOMAIN]\[username]@[CLIENTMACHINE]
> with the new password interface
> [2007/06/27 10:15:21, 2] auth/auth.c:check_ntlm_password(309)
>  check_ntlm_password:  authentication for user [username] ->
> [username] -> [MYDOMAIN\username] succeeded
There's not enough information to comment.





cheers, jerry
====================================================================Samba       
------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGgqPiIR7qMdg1EfYRAtTIAJ9UpS7BjaYTUK8paek4WDKDMURRAACgkBme
XUHeOHkxx3XHHWewSSixfUY=XRwY
-----END PGP SIGNATURE-----

After much deliberation, I fixed my samba problem ( I was upgrading
from 3.0.20b to the new version in RHEL using krb5-libs-1.5-26
authenticating against windows 2003 AD server). Apparently  valid
users = "@MY Group Name" does not work anymore. I was able to connect
using  valid users = "MYDOMAIN\@My Group Name", even though I had
"winbind use default domain = Yes" in smb.conf.

--sharif


> sharif islam wrote:
> > I am trying to use new samba and having problems.
> >
> > # smbclient //sambamachine/shareweb -Uusername
> > Password:
> > Domain=[MYDOMAIN] OS=[Unix] Server=[Samba 3.0.25b]
> > tree connect failed: NT_STATUS_ACCESS_DENIED
> >
> >