Rowland Penny
2018-Sep-18 06:56 UTC
[Samba] Fw: Share cannot be accessed when samba is in Domain with security enabled
Begin forwarded message: Date: Mon, 17 Sep 2018 22:36:21 -0500 (CDT) From: shivappa Sangapur via samba-technical <samba-technical at lists.samba.org> To: samba-technical at lists.samba.org Subject: Share cannot be accessed when samba is in Domain with security enabled Hi, I'm using samba-4.7.4. I have put my samba server in Domain. (Not using winbind) using NT domain with user test. /etc/password has 'test' user and pdbedit shows only 'test' user, since I've joined this samba server to Windows domain. domain server is Win2k12 R2. In windows domain server, I have enabled "Microsoft network client: Digitally sign communications (Always)" in domain Policy. I logged as 'Administrator' to Windows domain server PC and I tried to access share of my samba server(samba-4.7.4) from windows domain, but i get below error. *"The account is not authorized to login from this station"* Any idea why so ? If I joined my other Windows 7 PC to domain using domain user 'test2' and access samba-4.7.4 share, same error occurs. If I joined my other Windows 7 PC to domain using domain user 'test' and access samba-4.7.4 share, the share access successfully. test,test2 have full rights as domain users, Administrator and etc..... Any suggestions ?? -- Sent from: http://samba.2283325.n4.nabble.com/Samba-samba-technical-f2457555.html
Rowland Penny
2018-Sep-18 07:15 UTC
[Samba] Share cannot be accessed when samba is in Domain with security enabled
On Tue, 18 Sep 2018 07:56:43 +0100 Rowland Penny via samba <samba at lists.samba.org> wrote:> > > Begin forwarded message: > > Date: Mon, 17 Sep 2018 22:36:21 -0500 (CDT) > From: shivappa Sangapur via samba-technical > <samba-technical at lists.samba.org> To: samba-technical at lists.samba.org > Subject: Share cannot be accessed when samba is in Domain with > security enabled > > > Hi, > > I'm using samba-4.7.4. > I have put my samba server in Domain. (Not using winbind) using NT > domain with user test. > /etc/password has 'test' user and pdbedit shows only 'test' user, > since I've joined this samba server to Windows domain. > domain server is Win2k12 R2. > In windows domain server, > I have enabled "Microsoft network client: Digitally sign > communications (Always)" in domain Policy. > > I logged as 'Administrator' to Windows domain server PC and > I tried to access share of my samba server(samba-4.7.4) from windows > domain, but i get below error. > *"The account is not authorized to login from this station"* > > Any idea why so ? > > If I joined my other Windows 7 PC to domain using domain user 'test2' > and access samba-4.7.4 share, > same error occurs. > If I joined my other Windows 7 PC to domain using domain user 'test' > and access samba-4.7.4 share, > the share access successfully. > > test,test2 have full rights as domain users, Administrator and > etc..... > > Any suggestions ?? >OK, as I said yesterday it sounds like you are running an NT domain on a win2k12R2 server, this isn't possible, so it sounds like a misconfiguration somewhere. Please post your smb.conf Post it here on the 'samba' mailing list, not on the 'samba technical' list, that is not the correct place to post this type of question. I think I know what your problem is, but until I see your smb.conf, I cannot be sure. Rowland Penny Samba team member
Rowland Penny
2018-Sep-18 07:16 UTC
[Samba] Share cannot be accessed when samba is in Domain with security enabled
On Tue, 18 Sep 2018 07:56:43 +0100 Rowland Penny via samba <samba at lists.samba.org> wrote:> > > Begin forwarded message: > > Date: Mon, 17 Sep 2018 22:36:21 -0500 (CDT) > From: shivappa Sangapur via samba-technical > <samba-technical at lists.samba.org> To: samba-technical at lists.samba.org > Subject: Share cannot be accessed when samba is in Domain with > security enabled > > > Hi, > > I'm using samba-4.7.4. > I have put my samba server in Domain. (Not using winbind) using NT > domain with user test. > /etc/password has 'test' user and pdbedit shows only 'test' user, > since I've joined this samba server to Windows domain. > domain server is Win2k12 R2. > In windows domain server, > I have enabled "Microsoft network client: Digitally sign > communications (Always)" in domain Policy. > > I logged as 'Administrator' to Windows domain server PC and > I tried to access share of my samba server(samba-4.7.4) from windows > domain, but i get below error. > *"The account is not authorized to login from this station"* > > Any idea why so ? > > If I joined my other Windows 7 PC to domain using domain user 'test2' > and access samba-4.7.4 share, > same error occurs. > If I joined my other Windows 7 PC to domain using domain user 'test' > and access samba-4.7.4 share, > the share access successfully. > > test,test2 have full rights as domain users, Administrator and > etc..... > > Any suggestions ?? >OK, as I said yesterday it sounds like you are running an NT domain on a win2k12R2 server, this isn't possible, so it sounds like a misconfiguration somewhere. Please post your smb.conf Post it here on the 'samba' mailing list, not on the 'samba technical' list, that is not the correct place to post this type of question. I think I know what your problem is, but until I see your smb.conf, I cannot be sure. Rowland Penny Samba team member
Shivappa
2018-Sep-18 15:43 UTC
[Samba] Share cannot be accessed when samba is in Domain with security enabled
Hi Rowland, Sorry, I shall post such questions to mailing list in future. Here is my smb.conf #############My smb.conf########## [global] workgroup=SAMBADFS server string=SMB Server netbios name=Shivatest realm=SAMBADFS.LOCAL log level=1 log file= max log size=2000 max smbd processes=100 security=ADS password server=10.10.1.1 wins support=no client NTLMv2 auth=Yes wins proxy=no server max protocol=SMB3 client max protocol=SMB3 dns proxy=no wins server=0.0.0.0, 0.0.0.0 name resolve order=lmhosts host wins bcast map to guest=bad uid guest only=yes guest account=root local master=no encrypt passwords=yes ntlm auth=yes deadtime=60 server signing=auto client signing=auto dos charset=CP932 #my share [SHIVA_SHARE] path=/etc/test browseable=yes writeable=no public=no guest ok=yes available=1 ##############END########### Regards, Shivappa> On Sep 18, 2018, at 12:46, Rowland Penny <rpenny at samba.org> wrote: > > On Tue, 18 Sep 2018 07:56:43 +0100 > Rowland Penny via samba <samba at lists.samba.org> wrote: > >> >> >> Begin forwarded message: >> >> Date: Mon, 17 Sep 2018 22:36:21 -0500 (CDT) >> From: shivappa Sangapur via samba-technical >> <samba-technical at lists.samba.org> To: samba-technical at lists.samba.org >> Subject: Share cannot be accessed when samba is in Domain with >> security enabled >> >> >> Hi, >> >> I'm using samba-4.7.4. >> I have put my samba server in Domain. (Not using winbind) using NT >> domain with user test. >> /etc/password has 'test' user and pdbedit shows only 'test' user, >> since I've joined this samba server to Windows domain. >> domain server is Win2k12 R2. >> In windows domain server, >> I have enabled "Microsoft network client: Digitally sign >> communications (Always)" in domain Policy. >> >> I logged as 'Administrator' to Windows domain server PC and >> I tried to access share of my samba server(samba-4.7.4) from windows >> domain, but i get below error. >> *"The account is not authorized to login from this station"* >> >> Any idea why so ? >> >> If I joined my other Windows 7 PC to domain using domain user 'test2' >> and access samba-4.7.4 share, >> same error occurs. >> If I joined my other Windows 7 PC to domain using domain user 'test' >> and access samba-4.7.4 share, >> the share access successfully. >> >> test,test2 have full rights as domain users, Administrator and >> etc..... >> >> Any suggestions ?? >> > > OK, as I said yesterday it sounds like you are running an NT domain on > a win2k12R2 server, this isn't possible, so it sounds like a > misconfiguration somewhere. > > Please post your smb.conf > > Post it here on the 'samba' mailing list, not on the 'samba technical' > list, that is not the correct place to post this type of question. > > I think I know what your problem is, but until I see your smb.conf, I > cannot be sure. > > Rowland Penny > Samba team member
Possibly Parallel Threads
- Share cannot be accessed when samba is in Domain with security enabled
- Share cannot be accessed when samba is in Domain with security enabled
- Issue on DEBUG statement
- SMB Signing with "map to guest = " options
- [PATCH] inspect: return osinfo short IDs for recent Windows versions