Hi,
we have a very strange behaviour today. On of our clustered (by heartbeat) samba
server don't want provide shares
anymore. Every user is blocked with message "access denied".
So I thought there is a problem with mapping of users/groups. But wbinfo / id /
getent are working fine.
Do I move the share to another node everything works fine - the shared folders
and the smb.conf are stored on a cluster
filesystem, so all other nodes uses the same config file and the shared files
have the same permissions.
With log level of 10 I got following log:
[...]
[2009/12/16 10:57:26, 6] auth/auth_sam.c:416(check_samstrict_security)
check_samstrict_security: EVAN is not one of my local names
(ROLE_DOMAIN_MEMBER)
[2009/12/16 10:57:26, 10] auth/auth.c:262(check_ntlm_password)
check_ntlm_password: sam had nothing to say
[2009/12/16 10:57:26, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/12/16 10:57:26, 3] smbd/uid.c:428(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/12/16 10:57:26, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/12/16 10:57:26, 5] auth/token_util.c:522(debug_nt_user_token)
NT user token: (NULL)
[2009/12/16 10:57:26, 5] auth/token_util.c:548(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2009/12/16 10:57:27, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/12/16 10:57:27, 10] auth/auth_winbind.c:85(check_winbind_security)
check_winbind_security: wbcAuthenticateUserEx failed: WBC_ERR_AUTH_ERROR
[2009/12/16 10:57:27, 5] auth/auth.c:274(check_ntlm_password)
check_ntlm_password: winbind authentication for user [<username>]
FAILED with error NT_STATUS_ACCESS_DENIED
[2009/12/16 10:57:27, 2] auth/auth.c:320(check_ntlm_password)
check_ntlm_password: Authentication for user [<username>] ->
[<username>] FAILED with error NT_STATUS_ACCESS_DENIED
[2009/12/16 10:57:27, 5] auth/auth_util.c:2114(free_user_info)
attempting to free (and zero) a user_info structure
[2009/12/16 10:57:27, 10] auth/auth_util.c:2118(free_user_info)
structure was created for <username>
[2009/12/16 10:57:27, 3] smbd/error.c:60(error_packet_set)
error packet at smbd/sesssetup.c(1725) cmd=115 (SMBsesssetupX)
NT_STATUS_ACCESS_DENIED
[2009/12/16 10:57:27, 5] lib/util.c:632(show_msg)
[2009/12/16 10:57:27, 5] lib/util.c:642(show_msg)
[...]
Is there a possibility to get the reason for
"NT_STATUS_ACCESS_DENIED"?
What does " check_winbind_security: wbcAuthenticateUserEx failed:
WBC_ERR_AUTH_ERROR" meens?
Used samba version: 3.4.1 (by SerNet)
Thanks
Alex
