samba - Sep 2012 - NT_STATUS_LOGON_FAILURE configuring samba with ads and no winbind

I cant figure this out.... reached to the end of internet.

i want to configure samba to work with ADS  but no winbind. I am able to do
kinit and then net ads join. But every time I try to access the share i get
prompted for uid and passwd and then authentication failure. when i look at the
logs, server is able to find password server but cant find my ID in AD which
exists... I always end up with this error.


Get_Pwnam_internals didn't find user [xxx]!
[2012/09/05 14:32:59.750611,  1]
auth/user_krb5.c:162(get_user_from_kerberos_info)
  Username XXX\xxx is invalid on this system
[2012/09/05 14:32:59.750782,  3] smbd/error.c:81(error_packet_set)
  error packet at smbd/sesssetup.c(359) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE


any pointers?

thanks

Nitin

On Wed, 2012-09-05 at 21:33 -0400, Nitin Thakur wrote:
> I cant figure this out.... reached to the end of internet.
> 
> i want to configure samba to work with ADS  but no winbind. I am able to do
kinit and then net ads join. But every time I try to access the share i get
prompted for uid and passwd and then authentication failure. when i look at the
logs, server is able to find password server but cant find my ID in AD which
exists... I always end up with this error.
> 
> 
> Get_Pwnam_internals didn't find user [xxx]!
> [2012/09/05 14:32:59.750611,  1]
auth/user_krb5.c:162(get_user_from_kerberos_info)
>   Username XXX\xxx is invalid on this system
> [2012/09/05 14:32:59.750782,  3] smbd/error.c:81(error_packet_set)
>   error packet at smbd/sesssetup.c(359) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
Why don't you want to use winbind?

Do you have local users defined somewhere else?

Andrew Bartlett
 		 	   		  

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org

On 09/05/2012 08:33 PM, Nitin Thakur wrote:
> 
> I cant figure this out.... reached to the end of internet.
> 
> i want to configure samba to work with ADS  but no winbind. I am able
> to do kinit and then net ads join. But every time I try to access the
> share i get prompted for uid and passwd and then authentication
> failure. when i look at the logs, server is able to find password
> server but cant find my ID in AD which exists... I always end up with
> this error.
> 
> 
> Get_Pwnam_internals didn't find user [xxx]! [2012/09/05
> 14:32:59.750611,  1]
> auth/user_krb5.c:162(get_user_from_kerberos_info) Username XXX\xxx is
> invalid on this system [2012/09/05 14:32:59.750782,  3]
> smbd/error.c:81(error_packet_set) error packet at
> smbd/sesssetup.c(359) cmd=115 (SMBsesssetupX)
> NT_STATUS_LOGON_FAILURE
> 
> 
> any pointers?
> 
> thanks
> 
> Nitin 
> 
Nitin,

You must have a good reason for wanting to avoid use of winbind. Please
share with us your concerns.

What is your understanding as to how this should work?

- John T.