Displaying 5 results from an estimated 5 matches for "celadonsystem".
Did you mean:
celadonsystems
2017 Apr 21
2
samba, sssd, Active Directory, NT_STATUS_NO_LOGON_SERVERS, NT_STATUS_ACCESS_DENIED
...he same setup as site1 I can authenticate with services like ssh but samba authentication fails with NT_STATUS_NO_LOGON_SERVERS, and/or NT_STATUS_ACCESS_DENIED errors.
smb.conf
==========================================================================
[global]
workgroup = CORP
realm = CORP.CELADONSYSTEMS.COM
preferred master = no
wins server = 10.77.14.249
server string = samba-2
security = ADS
encrypt passwords = true
obey pam restrictions = yes
kerberos method = secrets and keytab
logging = file at 5
log file = /var/log/samba/%m.log
log level = 5
max...
2017 Apr 23
2
samba, sssd, Active Directory, NT_STATUS_NO_LOGON_SERVERS, NT_STATUS_ACCESS_DENIED
...authentication information.
Maybe a permissions problem on the AD DC? Although I can auth via ssh?
[2017/04/23 16:38:33.202569, 0] ../source3/auth/auth_domain.c:121(connect_to_domain_password_server) connect_to_domain_password_server: unable to open the domain client session to machine DC-1.CORP.CELADONSYSTEMS.COM. Error was : NT_STATUS_ACCESS_DENIED.
Can you recommend web links on confirming permissions are appropriate on the AD DC?
Maybe switching back to winbind is the right choice? Setting up sssd is just a lot easier.
--
Bob Tanner <tanner at real-time.com>...
2017 Apr 24
1
samba, sssd, Active Directory, NT_STATUS_NO_LOGON_SERVERS, NT_STATUS_ACCESS_DENIED
...omplish? Based on the smb.conf that you posted, it looks like you only want to be able to authenticate using the active directory server (i.e. I don't see any shares).
I did not include the share as I didn’t think it was relevant. Included now.
[global]
workgroup = CORP
realm = CORP.CELADONSYSTEMS.COM
server string = samba-2
security = ADS
kerberos method = secrets and keytab
log file = /var/log/samba/%m.log
logon script = %U.bat
load printers = no
[users]
path = /var/samba/users
public = no
printable = no
browseable = no
writeable = yes
hi...
2017 Apr 22
0
samba, sssd, Active Directory, NT_STATUS_NO_LOGON_SERVERS, NT_STATUS_ACCESS_DENIED
...ntication fails with
> NT_STATUS_NO_LOGON_SERVERS, and/or NT_STATUS_ACCESS_DENIED errors.
>
If all the default settings and settings that shouldn't be there
because you are using sssd are removed, your [global] part should look
like this:
[global]
workgroup = CORP
realm = CORP.CELADONSYSTEMS.COM
server string = samba-2
security = ADS
kerberos method = secrets and keytab
logging = file at 5
log file = /var/log/samba/%m.log
log level = 5
max xmit = 16384
logon script = %U.bat
restrict anonymous = 2
load printers = no
If winbind is installed and...
2017 Apr 24
0
samba, sssd, Active Directory, NT_STATUS_NO_LOGON_SERVERS, NT_STATUS_ACCESS_DENIED
...authentication information.
Maybe a permissions problem on the AD DC? Although I can auth via ssh?
[2017/04/23 16:38:33.202569, 0]
../source3/auth/auth_domain.c:121(connect_to_domain_password_server)
connect_to_domain_password_server: unable to open the domain client session
to machine DC-1.CORP.CELADONSYSTEMS.COM. Error was :
NT_STATUS_ACCESS_DENIED.
Can you recommend web links on confirming permissions are appropriate on
the AD DC?
Maybe switching back to winbind is the right choice? Setting up sssd is
just a lot easier.
--
Bob Tanner <tanner at real-time.com>...