similar to: Problems accessing shares when authenticating to Win 2k3 AD

(refers to posting "Samba 3.0 + ADS, winbind problem" from August, 28th) Setup: client: SuSE8.2 professional (kernel 2.4.20-4GB) with openldap2 2.1.12 and heimdal kerberos 0.4e from the SuSE CDs and Samba 3.0.0RC3 compiled from source with flags "--with-ads --with-pam --with-acl-support". server: Windows 2003 Server as Active Directory Controller (configured as pure

I am running Samba 3.0.9/KRB5 1.4 on Centos 3.4 on x86 with security = ADS in a Win2k3 domain. I have successfully used kinit to authenticate, joined the domain, and wbinfo -g/-u/-t return the expected results. However, when I try and access the samba shares from a Win2k3 box, it fails telling me I don't have permissions to access the share. Needless to say I am thoroughly perplexed. I have

When a Windows client attempts to browse shares on a Samba 3.0 server authenticating against a Windows 2003 Active Directory domain, it requests credentials. Typing in user name and password fails. Basically, I can't see even see the shares. If I give username/password for a user in smbpasswd, then I can browse the Samba server. Configuration info: ADS server: LICENSE ADS server IP:

My goal is to authenticate a Windows 2003 Server user from a FreeBSD 4.10 box via samba. A week ago I had this working. I then needed to verify the procedure and test on a fresh install. Now it doesn't work, despite doing the same steps (I think). I generated a Kerberos ticket on the w2k3 box and transfered it to the FreeBSD box. I used the ktutil command to incorporate the ticket into

Hello all, I have 3 Linux boxes all authenticating against 2 Windows 2003 domain controllers. Each Linux box is running a different Linux and samba version: Box1: CentOS 3.4 3.0.25-7 Box2: CentOS 4.4 3.0.10-1 Box3: CentOS 5 3.0.23c-2 Their smb.conf and krb5.conf files are all identical (below). A few days ago authentication stopped working and my /var/log/messages fills up with

Help, wbinfo -t fails with the error in subject, and getting sids of groups that aren't BUILTIN fail. Everything else seems to work. Note: I am not converting my kerberos tickets to krb4, is this necessary? (It used to work without it..but now it seems not to work.) I get no errors from kinit. all other wbinfo requests succeed with the exception of looking up the SIDS of groups that

Greetings all, I have a problem with my Samba server seeming to hang for 10 seconds every 5 minutes or so. Client machines also become sluggish across the entire network during this period. It does not seem to affect file transfers that are in progress. Any ideas would be greatly appreciated. Philip nsc-dell01:/var/log/samba # uname -a Linux nsc-dell01 2.6.18.2-34-default #1 SMP Mon Nov 27

Hello, We have a RHEL4 x64 running for 3 years, which is a samba member server integrated with a AD domain without any problems (we was using samba-3.0.10-1.4E.6). Last Saturday we performed an entire server update, applying all RHN available patches. Everything is running fine, except for winbind service which has a strange behavior: often we are receiving some errors at logs, and the

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I recently upgraded my samba installation from 3.0.13c to 3.0.31 (debian testing). Now the server stops responding every five minutes. The logfiles tell me the following: log.$servername [2008/08/21 16:24:38, 0] groupdb/mapping.c:pdb_create_builtin_alias(739) pdb_create_builtin_alias: Could not add group mapping entry for alias 544

Hello! I've integrated samba into an existing NT Domain managed by a windows 2003 server. Recently I'm have trouble to use the "groups" command get the group of domain users. It worked well for weeks (but perhaps after setting up an ldap-connection to the same server via the apache2 module auth_ldap), there are irregular connection-losses, so winbind seems not to be able to

| When a Windows client attempts to browse shares on a Samba 3.0 server | authenticating against a Windows 2003 Active Directory domain, it | requests credentials. Typing in user name and password fails I am having this exact same issue. Attached is a sample copy of my smb.conf and krb5.conf along with some errors I got from the smbd logs (max debug level). smb.conf ---- [global] server

Hello All, I don't know how, but I managed to get my no logon server found error to go away, but now I am experiencing another problem. When I run "net join ads -d 3" I get the following error message. I know it's authenticating, because if I enter an incorrect password it says "The username or password was not correct." So it's accessing the correct server, but

Problem: Trying to finish creation of Samba 3.3.2 domain server on new 9.04 Ubuntu server. Did default Ubuntu installation of LAMP and Samba during installation. Successfully edited smb.conf, built users, server and resources visible in smbclient and in windows test workstation. Can login as different users, and join machines to the domain via windows. However, the whole system was INCREDIBLY

Hi I had to upgrade samba because we upgrade DC windows to 2008. My current samba version is 3.5.4-0.70.el5 . I'm using RHE Server release 5.4 After the upgrade this message started to appear: Feb 27 20:52:26 mailgate winbindd[316]: [2011/02/27 20:52:26.682422, 0] libsmb/cliconnect.c:1051(cli_session_setup_spnego) Feb 27 20:52:26 mailgate winbindd[316]: Kinit failed: Cannot contact any

I have this message coming every 20 seconds in winbind log. [2008/08/16 11:23:18, 0] libsmb/clientgen.c:cli_receive_smb(165) Receiving SMB: Server stopped responding This is a samba/winbind setup with ldapbackend (editposix feature). I have seen error message in a post of last year but no final explanation of the issue: http://lists.samba.org/archive/samba/2007-August/134178.html version

Problem: wbinfo -t fails. As long as it fails, I am unable to map sids to Group Names. I need this functionality for my application. I can use just about everyother function of wbinfo at least partially... Distro: Debian woody. Packages: ii samba 3.0.11-0woody1 a LanManager-like file and printer server fo ii samba-common 3.0.11-0woody1 Samba common files used by both the server a

Hi there I'm having trouble getting winbindd working properly (I think). My understanding is that winbindd uses a kerberos 5 session (with 2003 server) to authenticate the machine to ADS, before any users have logged in. Then it uses that session ticket to authenticate all users of the smb server. Is that correct ? I can run kinit ok, and klist shows me a krb5 ticket (using a Domain

Hello, I've spent the last couple of days following the HOW-TO's on how to make a Linux server running Samba part of a Windows 2003 Active Directory, and a lot of supplemental research from these groups and elsewhere, but now I'm totally stuck and I can't seem to find the answer anywhere. Basically, most of the configuration seems to be working: - The Linux box is showing up in

I have Samba 3.4.11 + OpenLDAP (slapd 2.4.11) as domain controller for small windows network. Everything works (almost) ok, but sometimes clients report delays with access on shares on primary domain controller (PDC) and sometimes I had problems with adding new computers to domain. In /var/log/message I found these errors: Feb 15 10:38:11 pdc winbindd[14772]: [2011/02/15 10:38:11, 0]

(Samba 3.0.1, RedHat 9, share is a w2k3, security = ADS) Here is a snippet of debug level 3 output of an smbclient tar operation, with error at the end. Command is: # smbclient \\\\snapper\\dfs <password> -U Administrator -E -W CISWINNET -D home -d3 -Tqca /tmp/test.tar [2004/01/14 15:05:10, 3] lib/util.c:dos_clean_name(549) dos_clean_name