search for: dacrib

Greetings! I am having a bit of an issue using Ubuntu 9.10 and AD 2003. AD domain = dacrib.local AD server = dim-2300.dacrib.local IP = 10.0.0.60 Samba server = workhorse.dacrib.local IP = 10.0.0.20 I joined the server to AD, and I can see all the domain users and groups when I do a "getent passwd" and "getent group". "wbinfo -u" lists all domain users,...

...ame smb.conf for the 2 machines (less the share definitions, which exist only on the desktop, known as "workhorse"). wbinfo -u, wbinfo -g, wbinfo -t, wbinfo -a domainuser- these all work. getent passwd and getent group both work, and both return the exact same info, on both machines: DACRIB+administrator:*:10002:10000:Administrator:/home/DACRIB/Administrator:/bin/sh DACRIB+krbtgt:*:10006:10000:krbtgt:/home/DACRIB/krbtgt:/bin/sh DACRIB+turgon:*:10003:10000:Mike Leone:/home/DACRIB/turgon:/bin/bash DACRIB+leonem:*:10000:10000:Leone, Mike:/home/DACRIB/LeoneM:/bin/bash DACRIB+servicerunner...

...sers, domain and local. wbinfo -g shows me all groups. wbinfo -a user%password returns successfully. "getent passwd" works as expected - I see local users, and domain users. "net ads info" works correctly, returning info. LDAP server: 10.0.0.60 LDAP server name: dim-win2300.DaCrib.local Realm: DACRIB.LOCAL Bind Path: dc=DACRIB,dc=LOCAL LDAP port: 389 Server time: Fri, 23 Apr 2010 13:12:53 EDT KDC server: 10.0.0.60 Server time offset: 1 And yet: $ smbclient -L workhorse Enter turgon's password: session setup failed: NT_STATUS_ACCESS_DENIED I have no idea why it's f...

...res from each other. I get mount error(13): Permission denied no matter what I try, I find various pages on how to do this, half of which conflict with each other, or are outdated, none of which work. I am using virtually the same smb.conf on both machines. Domain name = DCRIB.LOCAL (short name DACRIB) Win2003 DC = dim-win2300.dacrib.local 2 Ubuntu 9.10 members (Samba 3.4.0) Desktop = workhorse (with various shares) Laptop = Dual-Booter (which will access the shares on workhorse and elsewhere) So, can anyone point out what's wrong with these configs? Dual-Booter can see the shares on workho...

Ben Love had this to say: > * Mike Leone wrote on [2010-03-27 22:02:38 -0400]: >> I tried to log on as "DACRIB+administrator" at the physical console. I >> was prompted twice for my password (dunno if that's because my password >> has a "!" in it or not). Then it starts to login. I see the motd. I see >> it say that it was trying to create a home directory for adminis...

clients on the domain. But I can not mount shares from the other Samba server; I always get "Permission denied". $ sudo mount -t cifs //workhorse/OldHome /mnt/OldHome -o username=DACRIB+turgon --verbose Password: mount.cifs kernel mount options: unc=//workhorse\OldHome,ver=1,rw,username=DACRIB+turgon,ip=10.0.0.20,pass=******** mount error(13): Permission denied Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) The user DACRIB+turgon is a Domain Admin, and is the accou...

...s. I am trying to mount a share from the other (i.e., "workhorse" is trying to mount a share on "dual-booter"). If I specify a smbmount command with a -k option, I can mount the share: turgon at workhorse:~$ klist Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: turgon at DACRIB.LOCAL Valid starting Expires Service principal 05/03/10 18:55:31 05/04/10 04:55:31 krbtgt/DACRIB.LOCAL at DACRIB.LOCAL renew until 05/09/10 22:56:03 05/03/10 23:07:07 05/04/10 04:55:31 cifs/dual-booter.dacrib.local at DACRIB.LOCAL renew until 05/09/10 22:56:03 turgon at workh...

...in my Win2003 AD (which has MS Services for Unix 3.5 installed). All seems well, in that it is properly joined to my AD, I've got it all configured so that domain members can log into the Linux servers using their domain credentials. Here's my config: # WINBIND # idmap domains = DACRIB idmap config DACRIB: default = true idmap uid = 10000-20000 idmap gid = 10000-20000 idmap config DACRIB:schema_mode = rfc2307 2 questions: 1. I had to comment out "idmap domains = DACRIB", as it said it was an unknown parameter. Isn't that the pr...

Greetings! I am having a bit of an issue using Ubuntu 9.10 and AD 2003. AD domain = dacrib.local AD server = dim-2300.dacrib.local IP = 10.0.0.60 Samba server = workhorse.dacrib.local IP = 10.0.0.20 I have been following <https://help.ubuntu.com/community/Samba/Kerberos>, and my Kerberos seems set up properly, as I can get a ticket. root at workhorse:/etc/samba# klist Ticket c...

So I ended up doing a net ads leave which removed the machine account from Active directory. Now I am trying to re-add it, but it seems to still be hanging around in Kerberos ... root at workhorse:/etc# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: administrator at DACRIB.LOCAL Valid starting Expires Service principal 04/24/10 17:25:50 04/25/10 03:25:55 krbtgt/DACRIB.LOCAL at DACRIB.LOCAL renew until 04/25/10 17:25:50 root at workhorse:/etc# net ads testjoin -Uadministrator%password Enter WORKHORSE$@DACRIB.LOCAL's password: [2010/04/24 17:30:...

Honestly, it's enough to make you scream. :-( I can't seem to mount a samba share: $ mount -t smbfs //workhorse/OldHome /network -o username=DACRIB+turgon,password=xxxxxx mount error(13): Permission denied Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) (I'm logging into this laptop as the domain user DACRIB+turgon, domain = DACRIB. That part works perfectly.) I have the share name right, and I can query the list of shares...

...ying to add a machine to my Win2003 AD (that has Services for Unix installed). I am using Xubuntu 9.10, and samba 3.4.0. I set up Kerberos, and am getting a ticket. I have successfully joined the domain. # net ads join -U administrator Enter administrator's password: Using short domain name -- DACRIB Joined 'DUAL-BOOTER' to realm 'DaCrib.local' wbinfo -u does return all users, both local and AD. wbinfo -g returns all groups, both local and AD. wbinfo -t succeeds. However, I am failing plaintext authentication, with wbinfo -a: wbinfo -a turgon Enter turgon's password: pl...

...ive up, and use the Windows installed on this laptop. That one has no problem accessing shares from the Samba server, or the Windows stations on the LAN. Anyone? Please. :-) Testparm of smb.conf: (I had to add the "idmap uid/gid" statements to the 10.04 server) [global] workgroup = DACRIB realm = DACRIB.LOCAL server string = %h server (Samba %v, Domain: %D, Server: %L - %R) security = ADS auth methods = winbind allow trusted domains = No map to guest = Bad User obey pam restrictions = Yes password server = dim-win2300.DaCrib.local pam password cha...

This used to work ... root at workhorse:/var/log/samba# wbinfo -t checking the trust secret via RPC calls failed error code was NT_STATUS_ACCESS_DENIED (0xc0000022) Could not check secret root at workhorse:/var/log/samba# net ads info LDAP server: 10.0.0.60 LDAP server name: dim-win2300.DaCrib.local Realm: DACRIB.LOCAL Bind Path: dc=DACRIB,dc=LOCAL LDAP port: 389 Server time: Sat, 24 Apr 2010 16:20:52 EDT KDC server: 10.0.0.60 Server time offset: 0 log.smbd: [2010/04/24 16:08:15, 0] libads/kerberos.c:332(ads_kinit_password) kerberos_kinit_password WORKHORSE$@DACRIB.LOCAL failed: Prea...