samba - Jun 2024 - SePrintOperatorPrivilege NT_STATUS_LOGON_FAILURE

On Wed, 05 Jun 2024 17:25:52 +0200
calm.job89448 at fastmail.com wrote:
> Hi Rowland,
> 
> thanks again.
> 
> On Wed, Jun 5, 2024, at 17:10, Rowland Penny via samba wrote:
> 
> >> I tried both. First sudo, as I setup everything with sudo and out
> >> of curiosity with root. No luck.
> >> Was it wrong to setup as user with sudo privileges?
> >
> > No, it should work, perhaps you have a dns problem. Can you please
> > post the contents of:
> > /etc/resolv.conf
> domain mydomain.work
> search mydomain.work
'domain, and 'search' in resolv.conf were mutually exclusive and the
last one wins, but in the last resolv.conf code, 'domain' has been
removed.
> nameserver 10.1.1.1
> nameserver 10.1.1.3
I take it the nameservers are DCs.
> 
> > /etc/hostname
> prnt01
> 
> > /etc/hosts
> 127.0.0.1       localhost
> 10.1.1.33       prnt01.mydomain.work    prnt01
I take it this machine has a fixed IP.
> 
> > Can you also explain why there doesn't appear to be any 'idmap
> > config' lines in your smb.conf ?
> 
> Sorry, thought I'd only post what I thought is relevant.
Better to post the full current smb.conf than fragments ;-)
But there doesn't seem to be anything wrong with the smb.conf

Is there a firewall in use ?

Rowland

Point taken. Updated in

http://samba.bigbird.es/doku.php?id=samba:provision-dc#reconfigure_your_etc_resolvconf_file

and

http://samba.bigbird.es/doku.php?id=samba:aditional-dc#configure_your_etc_resolvconf_file

and

http://samba.bigbird.es/doku.php?id=samba:file-server#configure_your_etc_resolvconf_file_with_you_dcs_address

Thank.

LP
On Jun 5, 2024 at 16:58 +0100, samba at lists.samba.org <samba at
lists.samba.org>, wrote:
>
> 'domain, and 'search' in resolv.conf were mutually exclusive
and the
> last one wins, but in the last resolv.conf code, 'domain' has been
> removed.

On Wed, Jun 5, 2024, at 17:58, Rowland Penny via samba
wrote:
>> > /etc/resolv.conf
>> domain mydomain.work
>> search mydomain.work
>
> 'domain, and 'search' in resolv.conf were mutually exclusive
and the
> last one wins, but in the last resolv.conf code, 'domain' has been
> removed.
Thank you. This is how it looks now.

nameserver 10.1.1.1
nameserver 10.1.1.3
search keuchen.local
> I take it the nameservers are DCs.
Yes, exactly.
>> > /etc/hosts
>> 127.0.0.1       localhost
>> 10.1.1.33       prnt01.mydomain.work    prnt01
>
> I take it this machine has a fixed IP.
It was not, actually. 
I had a reservation for the machine on the DHCP server which always gave it the
same IP address.
I changed the setting to static now because I noticed another issue with
resolv.conf ... it would always revert after a reboot. Now it doesn't
anymore.
> Is there a firewall in use ?
No, none that I know of. 
The machine runs a vanilla Debian 12 with nothing but SSH server, so no firewall
afaik.

I said this already but by now I'm starting to wonder whether it
wouldn't be easier and quicker to just start again. Hoping of course, that
the problem would not reappear. :-D