similar to: Client accessing Samba doesn't authenticate against Active Directory

Hi there I'm having trouble getting winbindd working properly (I think). My understanding is that winbindd uses a kerberos 5 session (with 2003 server) to authenticate the machine to ADS, before any users have logged in. Then it uses that session ticket to authenticate all users of the smb server. Is that correct ? I can run kinit ok, and klist shows me a krb5 ticket (using a Domain

I am running Samba 3.0.9/KRB5 1.4 on Centos 3.4 on x86 with security = ADS in a Win2k3 domain. I have successfully used kinit to authenticate, joined the domain, and wbinfo -g/-u/-t return the expected results. However, when I try and access the samba shares from a Win2k3 box, it fails telling me I don't have permissions to access the share. Needless to say I am thoroughly perplexed. I have

Hello all, I have 3 Linux boxes all authenticating against 2 Windows 2003 domain controllers. Each Linux box is running a different Linux and samba version: Box1: CentOS 3.4 3.0.25-7 Box2: CentOS 4.4 3.0.10-1 Box3: CentOS 5 3.0.23c-2 Their smb.conf and krb5.conf files are all identical (below). A few days ago authentication stopped working and my /var/log/messages fills up with

(refers to posting "Samba 3.0 + ADS, winbind problem" from August, 28th) Setup: client: SuSE8.2 professional (kernel 2.4.20-4GB) with openldap2 2.1.12 and heimdal kerberos 0.4e from the SuSE CDs and Samba 3.0.0RC3 compiled from source with flags "--with-ads --with-pam --with-acl-support". server: Windows 2003 Server as Active Directory Controller (configured as pure

(Samba 3.0.1, RedHat 9, share is a w2k3, security = ADS) Here is a snippet of debug level 3 output of an smbclient tar operation, with error at the end. Command is: # smbclient \\\\snapper\\dfs <password> -U Administrator -E -W CISWINNET -D home -d3 -Tqca /tmp/test.tar [2004/01/14 15:05:10, 3] lib/util.c:dos_clean_name(549) dos_clean_name

Greetings all, I have a problem with my Samba server seeming to hang for 10 seconds every 5 minutes or so. Client machines also become sluggish across the entire network during this period. It does not seem to affect file transfers that are in progress. Any ideas would be greatly appreciated. Philip nsc-dell01:/var/log/samba # uname -a Linux nsc-dell01 2.6.18.2-34-default #1 SMP Mon Nov 27

| When a Windows client attempts to browse shares on a Samba 3.0 server | authenticating against a Windows 2003 Active Directory domain, it | requests credentials. Typing in user name and password fails I am having this exact same issue. Attached is a sample copy of my smb.conf and krb5.conf along with some errors I got from the smbd logs (max debug level). smb.conf ---- [global] server

Hello, We have a RHEL4 x64 running for 3 years, which is a samba member server integrated with a AD domain without any problems (we was using samba-3.0.10-1.4E.6). Last Saturday we performed an entire server update, applying all RHN available patches. Everything is running fine, except for winbind service which has a strange behavior: often we are receiving some errors at logs, and the

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I recently upgraded my samba installation from 3.0.13c to 3.0.31 (debian testing). Now the server stops responding every five minutes. The logfiles tell me the following: log.$servername [2008/08/21 16:24:38, 0] groupdb/mapping.c:pdb_create_builtin_alias(739) pdb_create_builtin_alias: Could not add group mapping entry for alias 544

Help, wbinfo -t fails with the error in subject, and getting sids of groups that aren't BUILTIN fail. Everything else seems to work. Note: I am not converting my kerberos tickets to krb4, is this necessary? (It used to work without it..but now it seems not to work.) I get no errors from kinit. all other wbinfo requests succeed with the exception of looking up the SIDS of groups that

Hello, I've spent the last couple of days following the HOW-TO's on how to make a Linux server running Samba part of a Windows 2003 Active Directory, and a lot of supplemental research from these groups and elsewhere, but now I'm totally stuck and I can't seem to find the answer anywhere. Basically, most of the configuration seems to be working: - The Linux box is showing up in

My goal is to authenticate a Windows 2003 Server user from a FreeBSD 4.10 box via samba. A week ago I had this working. I then needed to verify the procedure and test on a fresh install. Now it doesn't work, despite doing the same steps (I think). I generated a Kerberos ticket on the w2k3 box and transfered it to the FreeBSD box. I used the ktutil command to incorporate the ticket into

I have this message coming every 20 seconds in winbind log. [2008/08/16 11:23:18, 0] libsmb/clientgen.c:cli_receive_smb(165) Receiving SMB: Server stopped responding This is a samba/winbind setup with ldapbackend (editposix feature). I have seen error message in a post of last year but no final explanation of the issue: http://lists.samba.org/archive/samba/2007-August/134178.html version

Problem: Trying to finish creation of Samba 3.3.2 domain server on new 9.04 Ubuntu server. Did default Ubuntu installation of LAMP and Samba during installation. Successfully edited smb.conf, built users, server and resources visible in smbclient and in windows test workstation. Can login as different users, and join machines to the domain via windows. However, the whole system was INCREDIBLY

Hi I had to upgrade samba because we upgrade DC windows to 2008. My current samba version is 3.5.4-0.70.el5 . I'm using RHE Server release 5.4 After the upgrade this message started to appear: Feb 27 20:52:26 mailgate winbindd[316]: [2011/02/27 20:52:26.682422, 0] libsmb/cliconnect.c:1051(cli_session_setup_spnego) Feb 27 20:52:26 mailgate winbindd[316]: Kinit failed: Cannot contact any

I'm a bit of a newbie to Samba, and am having some trouble getting it running with my Windows Server 2003 Active Directory. I've followed the procedures in the HOWTO-Collection.pdf, with no luck. "kinit administrator" works fine, and stores a ticket in the cache: [root@firewall root]# klist -5 Default principal: administrator@HOME.EXAMPLE.COM Valid starting Expires Service

Hello All, I don't know how, but I managed to get my no logon server found error to go away, but now I am experiencing another problem. When I run "net join ads -d 3" I get the following error message. I know it's authenticating, because if I enter an incorrect password it says "The username or password was not correct." So it's accessing the correct server, but

Hi there I'm built samba-3.0.0-2 from the src rpm on a redhat 7.1 system. I had to make sure a few ldap and kerberos devel rpms were installed, but I managed to build and install it eventually. I added: --with-ads \ --with-krb5=/usr/kerberos \ --with-ldap to the SPEC file for the package. I followed mainly whats in here:

I've been checking the authentication with "wbinfo -a <username>%<password>", which is failing with the following error: plaintext password authentication failed error code was NT_STATUS_NO_SUCH_USER (0xc0000064) error messsage was: No such user Could not authenticate user <username>%<password> with plaintext password challenge/response password

I have a samba PDC (using samba 3.0.24). When I try to establish trust with a win2003 domain, I got signing error, see the log below. Trust with NT domain and win2000 domain works. Any help are appreciated. Thanks, Lin [2007/04/04 17:00:13, 5] lib/debug.c:debug_dump_status(391) INFO: Current debug levels: all: True/10 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0