search for: turgon

...quot; works correctly, returning info. LDAP server: 10.0.0.60 LDAP server name: dim-win2300.DaCrib.local Realm: DACRIB.LOCAL Bind Path: dc=DACRIB,dc=LOCAL LDAP port: 389 Server time: Fri, 23 Apr 2010 13:12:53 EDT KDC server: 10.0.0.60 Server time offset: 1 And yet: $ smbclient -L workhorse Enter turgon's password: session setup failed: NT_STATUS_ACCESS_DENIED I have no idea why it's failing; I'm not seeing anything in the samba or winbind logs. (workhorse is Ubuntu 9.10, configured as a domain member server) I can do the reverse; from "workhorse" I can see all the shares...

Honestly, it's enough to make you scream. :-( I can't seem to mount a samba share: $ mount -t smbfs //workhorse/OldHome /network -o username=DACRIB+turgon,password=xxxxxx mount error(13): Permission denied Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) (I'm logging into this laptop as the domain user DACRIB+turgon, domain = DACRIB. That part works perfectly.) I have the share name right, and I can query the list of shares on the...

I am confused (nothing new there ...). I have 2 Ubuntu 9.10 Samba servers. I am trying to mount a share from the other (i.e., "workhorse" is trying to mount a share on "dual-booter"). If I specify a smbmount command with a -k option, I can mount the share: turgon at workhorse:~$ klist Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: turgon at DACRIB.LOCAL Valid starting Expires Service principal 05/03/10 18:55:31 05/04/10 04:55:31 krbtgt/DACRIB.LOCAL at DACRIB.LOCAL renew until 05/09/10 22:56:03 05/03/10 23:07:07 05/04/10 04:55:31...

...ord: Using short domain name -- DACRIB Joined 'DUAL-BOOTER' to realm 'DaCrib.local' wbinfo -u does return all users, both local and AD. wbinfo -g returns all groups, both local and AD. wbinfo -t succeeds. However, I am failing plaintext authentication, with wbinfo -a: wbinfo -a turgon Enter turgon's password: plaintext password authentication failed Could not authenticate user turgon with plaintext password Enter turgon's password: challenge/response password authentication succeeded Google seems to be non-helpful, with this failure message from samba. Can anyone shed...

...nfo -t, wbinfo -a domainuser- these all work. getent passwd and getent group both work, and both return the exact same info, on both machines: DACRIB+administrator:*:10002:10000:Administrator:/home/DACRIB/Administrator:/bin/sh DACRIB+krbtgt:*:10006:10000:krbtgt:/home/DACRIB/krbtgt:/bin/sh DACRIB+turgon:*:10003:10000:Mike Leone:/home/DACRIB/turgon:/bin/bash DACRIB+leonem:*:10000:10000:Leone, Mike:/home/DACRIB/LeoneM:/bin/bash DACRIB+servicerunner:*:10005:10000:ServiceRunner:/home/DACRIB/ServiceRunner:/bin/sh DACRIB+ldap-proxy:*:10001:10000:LDAP Proxy:/home/DACRIB/ldap-proxy:/bin/sh It returns the...

So I ended up doing a net ads leave which removed the machine account from Active directory. Now I am trying to re-add it, but it seems to still be hanging around in Kerberos ... root at workhorse:/etc# klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: administrator at DACRIB.LOCAL Valid starting Expires Service principal 04/24/10 17:25:50 04/25/10 03:25:55

clients on the domain. But I can not mount shares from the other Samba server; I always get "Permission denied". $ sudo mount -t cifs //workhorse/OldHome /mnt/OldHome -o username=DACRIB+turgon --verbose Password: mount.cifs kernel mount options: unc=//workhorse\OldHome,ver=1,rw,username=DACRIB+turgon,ip=10.0.0.20,pass=******** mount error(13): Permission denied Refer to the mount.cifs(8) manual page (e.g. man mount.cifs) The user DACRIB+turgon is a Domain Admin, and is the account set...

...rse, and workhorse can see the share on Dual-Booter. Each can (and is) mounting shares from a WinXP machine. I can get Kerberos tickets on each Samba server. Each Samba server can mount a share from a WinXP desktop called "p4-desktop", altho I seem to have to specify the username as "turgon at DACRIB" in the credentials; it doesn't work any other way. I can't mount shares from the other Samba regardless of how I specify the user, however. testparm output - Dual-Booter: [global] workgroup = DACRIB realm = DACRIB.LOCAL server string = %h server (Samba %v, Domain: %D,...

...quot;/home/DACRIB/administrator" - which is exactly what it should do. Then I am immediately logged out, and returned to a new login prompt. No other messages on the console, nothing. auth.log says: Mar 27 21:04:15 workhorse login[4213]: pam_unix(login:auth): authentication failure; logname=turgon uid=0 euid=0 tty=/dev/tty1 ruser= rhost= user=DACRIB+administrator Mar 27 21:04:15 workhorse login[4213]: pam_winbind(login:auth): getting password (0x00000180) Mar 27 21:04:21 workhorse login[4213]: pam_winbind(login:auth): user 'DACRIB+administrator' granted access Mar 27 21:04:21 w...

Package: xen-utils-3.0 Version: 3.0.2+hg9681-0bpo1 Severity: important Disclaimer: I'm using the packages from www.backports.org here (in the box where the problem manifested), but I've seen that it happens too with the packages straight from sid. When I installed the packages for Xen and created a domU ("chen.cfg"), it couldn't be brougth up. The error that was displayed

Hi all, I just stepped over a problem where I can't add a local user to an AD group. Running getent passwd and getent group doesn't display the AD users. Wbinfo -g and -u work fine. Here is my smb.conf: [global] netbios name = sles11test1 realm = SOMEDOMAIN.NET workgroup = SOMEDOMAIN security = ADS encrypt passwords = yes password server =

Some may remember all my issues trying to get one Samba server to mount shares from another Samba server. Well, I decided to completely reformat my laptop with Ubuntu 10.04, and start over (leaving the other Samba server at Ubuntu 9.10) (to recap - I have a Win2003 AD (not R2), with SFU installed) I took the smb.conf from the 9.10 server (running 3.4.0) and loaded it on the Ubuntu 10.04 laptop,

I have a Samba 3.4.0 server (from Ubuntu 9.04), as a member server in my Win2003 AD (which has MS Services for Unix 3.5 installed). All seems well, in that it is properly joined to my AD, I've got it all configured so that domain members can log into the Linux servers using their domain credentials. Here's my config: # WINBIND # idmap domains = DACRIB idmap config

This used to work ... root at workhorse:/var/log/samba# wbinfo -t checking the trust secret via RPC calls failed error code was NT_STATUS_ACCESS_DENIED (0xc0000022) Could not check secret root at workhorse:/var/log/samba# net ads info LDAP server: 10.0.0.60 LDAP server name: dim-win2300.DaCrib.local Realm: DACRIB.LOCAL Bind Path: dc=DACRIB,dc=LOCAL LDAP port: 389 Server time: Sat, 24 Apr 2010

Greetings! I am having a bit of an issue using Ubuntu 9.10 and AD 2003. AD domain = dacrib.local AD server = dim-2300.dacrib.local IP = 10.0.0.60 Samba server = workhorse.dacrib.local IP = 10.0.0.20 I have been following <https://help.ubuntu.com/community/Samba/Kerberos>, and my Kerberos seems set up properly, as I can get a ticket. root at workhorse:/etc/samba# klist Ticket cache:

Ben Love had this to say: > * Mike Leone wrote on [2010-03-27 22:02:38 -0400]: >> I tried to log on as "DACRIB+administrator" at the physical console. I >> was prompted twice for my password (dunno if that's because my password >> has a "!" in it or not). Then it starts to login. I see the motd. I see >> it say that it was trying to create a