similar to: Connecting to share - errors authenticating machine account - why?

Hi, Our Samba Servers are getting slower and slower. Even opening the context menu on some files take 5 seconds. My log file is filled up with messages like: nsaction 909 of length 1454 [2005/10/31 12:58:04, 3] smbd/process.c:switch_message(886) switch message SMBsesssetupX (pid 24227) conn 0x0 [2005/10/31 12:58:04, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) -

Hi, i have problems connecting to DFS-Share from Client WindowsXP. Same configuration works fine for Windows Vista and 7. On Windows 7 the LMCompatibility Level is 3. the striking point I see in logfile is following 2010/12/20 10:30:17, 1] smbd/service.c:make_connection_snum(1119) 10.184.144.171 (10.184.144.171) signed connect to service applbin initially as user useracc

Hi, We have a Windows 2000 domain controller using active directory. I would like to authenticate users against it, but it's not working. I've been trying for 2 weeks without much luck. Any (and I do mean ANY) help would be greatly appreciated. My linux box: Linux cptapp01 2.6.10-5-386 #1 Tue Apr 5 12:12:40 UTC 2005 i686 GNU/Linux (Ubuntu) My samba: Version 3.0.20 My smb.conf: [global]

Hi All, The latest Debian unstable release of samba 3.0.1-1 appears to be fail in storing the machine account password when joining a 2000 AD domain. kinit user@realm works fine, as does net ads join suggesting the issue is not related kerberos misconfiguration. klist indicates no cached tickets, until kinit is used. and winbindd.log shows the following entries when winbindd starts.

Greetings, I'm using Samba (3.0.2) on debian sarge as a file server for W2K clients. I'm having problems with one user in particular. The user can connect to a share, but has no write access. On the Unix side of the world, he has full write access. Attached are the relevant portions of the log file and my smb.conf file. Other details: The domain controller is W2K ADS. I have several

system is redhat 9 on a dell power edge 2450 running latest krb5 and openldap rpm It worked perfectly on 3.0.4 but arcserve wouldn't back up so I upgraded to 306 and everything installed correctly but now when you try and connect to the server it pops the user login box up. I can run net ads user -U Administrator and log in with my admin password and it lists all my user accounts. I can add

Dear All: I made a change to my Samba configuration to enable Solaris ACLs in my Installation of Samba 3.0.11. After then, I lost the ability to permit domain users to browse the shares. The server is running Solaris 8 2/04, and Samba is bound against MIT Kerberos 1.4 and OpenLDAP 2.2.23. It authenticates to two Windows 2000 DCs. I had obtained a Kerberos ticket from the Domain Controllers,

Hi, we're using samba 3.0.24 on Solaris 10. Not long ago we've migrated from NIS to LDAP with the Solaris integrated LDAP Server/Client. Now the user mapping doesn't work any more. If I map the WINDOWS\Administrator account to the unix account admin (this is a local account on the samba server) all works fine. [2007/02/06 16:27:25, 3, effective(0, 0), real(0, 0)]

Hi List - I have a friend that runs a Windows domain with Active Directory and is setting up some new laptops with Redhat. He wants to automate installs, etc. on these laptops as he would on a Windows machine. Just wondering if anyone has any experience with this - and also if anyone knows of a good tutorial for joining a Linux machine to a Windows domain. I've heard that it is possible.

I have a Samba-3, v3.0.10-1.4E installation on RedHat Enterprise 4. The server has successfully joined a Native Windows 2003 Active Directory Domain as a member. All users within the Samba server's domain authenticat successfully via AD and can access Samba shares on this server fine. When running the wbinfo -t command it is successful. The wbinfo -m command lists 14 trusted domains and

Hi everyone, I've done a lot of reading on this issue over the last couple of days I had a "Red Hat Linux release 9 (Shrike)" box running 3.0.3a and the stock redhat krb5 package and it was authenticating against a w2k AD domain (over which I have very little control save for my little OU). things were working ok, but I wanted to update it to the new bug fixed versions.

Hello everyone, There is a FreeBSD box, which is a member of ADS domain. The domain has both W2000 and W2003 domain controllers. After upgrading to samba-3.0.23a I discovered that it is not possible to browse a share on a FreeBSD computer, but pam_winbind seems to work. Connecting from a WindowsXP box to the FreeBSD causes WinXP to ask for a password a number of times, and eventually say

Hi I successfully joined the AD as member server, smbclient \\\\hostname\\homes -U username works, but on a windows 2000 client connecting to the homes share using \\hostname failes with [2003/11/13 16:39:46, 1] smbd/sesssetup.c:reply_spnego_kerberos(172) Failed to verify incoming ticket! [2003/11/13 16:39:46, 1] smbd/sesssetup.c:reply_spnego_kerberos(172) Failed to verify incoming ticket!

Hi all- In migrating from 3.0.2 to 3.0.8 on a box that's an ADS domain member, I had a relic line in smb.conf like this: winbind separator char = - With 3.0.2, users connecting wouldn't have a domain and separator char component, so spnego kerberos replies to the 2003 domain controller would be fine. In 3.0.8, users connections would have the domain and separator char for spnego

I'm running samba 3.0.24 (the latest package that seems to be available for Ubuntu 7). I have a Windows 2003 AD with the R2/RFC2307 schema loaded. I would prefer to use the 3.0.24 package if possible unless there is an ubuntu package for 3.0.25. Any suggestions would be appreciated. Wbinfo -u and -g appear to work great. Net ads testjoin comes back successful. In log.winbindd-idmap I get

=20 \\128.252.123.123\sharename <file:///\\128.252.123.123\sharename>=20 =20 And it works as expected - my clients are in the same domain, no password is asked for, etc. =20 Using any form of the hostname in the URI, either \\hostname\sharename <file:///\\hostname\sharename> or \\hostname.domain.name\sharename <file:///\\hostname.domain.name\sharename> in the URI will

When I attempt to authenticate a user from another domain, I am seeing some strange issues. My winbindd.log shows that I am indeed already trusting the other domain. (I am a member of the na.uis.unisys.com domain.) However, when I try to gain access to a share where the username EU\INBLR-AUTH1 has access, I get prompted for a username and password over and over. Obviously, it can't

Here is my situation: I have an AIX 4.3.3 machine, that I have compiled open-ldap, kerberos5 (1.3..6), and Samba 3.0.20. Here is my smb.conf file: [global] realm = REGION.DOMAIN.COM security = ADS password server = randomdc.region.domain.com workgroup = REGION client use spnego = yes ;winbind separator = \ [homes] comment = Home Directories read only = no create mode = 0750

MY OS is: Red Hat Enterprise Linux ES release 4 (Nahant Update 8) Samba version: samba-3.0.25b-0.4E.6 I'm map a share drive and I get asked for user name and password. Right now I'm just trouble shooting the samba part. "smb" service is running and "winbind" server is running too. The /var/log/samba/xxxx log file has the following in it:

I am struggling with a Samba/Server 2003 problem which doesn't make sense. I have compiled Samba 3.0.14a and MIT Kerberos 1.3.6 several times on different machines. I have a set of RPMS which work fine on one of my workstations, but do not work on the server. On the server I get the dreaded: reply_spnego_kerberos(173) Failed to verify incoming ticket! in the logs. I have compiled