[Samba] Authenticating Samba on NT4 SRV

[fonteneau]

Hi,

I'm just using samba for few weeks and i'm triing to migrate all NT4 SAM 
base to Samba Linux.
I'm working with Red Hat enterprise Linux ES 4.0 updated, openldap 
2.2.13-4, samba samba-3.0.10-1.4E.2 and i've followed IDEALX migration 
procedure with smbldap-tools-0.9.3-1.

Every configuration seems to be clean but not ;o)))))

I'm using cleartext password in slapd.conf and smbldap.conf no md5, sha 
or ssha. I'm just using IDEALX procedure and when triing to pass the 
command :
net rpc join -S PDC-NT4 -Uroot i've got :

[2006/02/21 15:05:29, 3] param/loadparm.c:lp_load(3911)
  lp_load: refreshing parameters
[2006/02/21 15:05:29, 3] param/loadparm.c:init_globals(1312)
  Initialising global parameters
[2006/02/21 15:05:29, 3] param/params.c:pm_process(566)
  params.c:pm_process() - Processing configuration file 
"/etc/samba/smb.conf"
[2006/02/21 15:05:29, 3] param/loadparm.c:do_section(3404)
  Processing section "[global]"
[2006/02/21 15:05:29, 2] lib/interface.c:add_interface(79)
  added interface ip=192.168.2.13 bcast=192.168.2.255 nmask=255.255.255.0
[2006/02/21 15:05:29, 3] libsmb/namequery.c:resolve_lmhosts(855)
  resolve_lmhosts: Attempting lmhosts lookup for name PDC-NT4<0x20>
[2006/02/21 15:05:29, 3] libsmb/namequery.c:resolve_wins(752)
  resolve_wins: Attempting wins lookup for name PDC-NT4<0x20>
[2006/02/21 15:05:29, 3] libsmb/namequery.c:resolve_wins(755)
  resolve_wins: WINS server resolution selected and no WINS servers listed.
[2006/02/21 15:05:29, 3] libsmb/namequery.c:resolve_hosts(917)
  resolve_hosts: Attempting host lookup for name PDC-NT4<0x20>
[2006/02/21 15:05:29, 3] libsmb/cliconnect.c:cli_start_connection(1388)
  Connecting to host=PDC-NT4
[2006/02/21 15:05:29, 3] lib/util_sock.c:open_socket_out(752)
  Connecting to 192.168.2.17 at port 445
[2006/02/21 15:05:29, 2] lib/util_sock.c:open_socket_out(789)
  error connecting to 192.168.2.17:445 (Connexion refusée)
[2006/02/21 15:05:29, 3] lib/util_sock.c:open_socket_out(752)
  Connecting to 192.168.2.17 at port 139
[2006/02/21 15:05:29, 3] rpc_client/cli_netlogon.c:cli_nt_setup_creds(290)
  cli_nt_setup_creds: auth2 challenge failed NT_STATUS_ACCESS_DENIED
[2006/02/21 15:05:29, 3] libsmb/trusts_util.c:just_change_the_password(43)
  just_change_the_password: unable to setup creds (NT_STATUS_ACCESS_DENIED)!
[2006/02/21 15:05:29, 1] utils/net_rpc.c:run_rpc_command(142)
  rpc command function failed! (NT_STATUS_ACCESS_DENIED)
Password:

seems to be password, credential problem but can't investigate which one.

Then entered password and :

[2006/02/21 15:06:45, 3] libsmb/cliconnect.c:cli_start_connection(1388)
  Connecting to host=PDC-NT4
[2006/02/21 15:06:45, 3] lib/util_sock.c:open_socket_out(752)
  Connecting to 192.168.2.17 at port 445
[2006/02/21 15:06:45, 2] lib/util_sock.c:open_socket_out(789)
  error connecting to 192.168.2.17:445 (Connexion refusée)
[2006/02/21 15:06:45, 3] lib/util_sock.c:open_socket_out(752)
  Connecting to 192.168.2.17 at port 139
[2006/02/21 15:06:45, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181)
  lsa_io_sec_qos: length c does not match size 8
[2006/02/21 15:06:45, 3] libsmb/cliconnect.c:cli_start_connection(1388)
  Connecting to host=PDC-NT4
[2006/02/21 15:06:45, 3] lib/util_sock.c:open_socket_out(752)
  Connecting to 192.168.2.17 at port 445
[2006/02/21 15:06:45, 2] lib/util_sock.c:open_socket_out(789)
  error connecting to 192.168.2.17:445 (Connexion refusée)
[2006/02/21 15:06:45, 3] lib/util_sock.c:open_socket_out(752)
  Connecting to 192.168.2.17 at port 139
Joined domain MONDOMAINE.FR.
[2006/02/21 15:06:45, 2] utils/net.c:main(859)
  return code = 0

command : net rpc testjoin -S PDC-NT4
Join to 'MONDOMAINE.FR' is OK

triing  wbinfo -t
checking the trust secret via RPC calls failed
error code was  (0x0)
Could not check secret

Bye the way using all smbldap-<scripts> and every things goes well with 
openldap.

command :  net rpc vampire -S PDC-NT4 -d3
[2006/02/21 15:09:12, 3] param/loadparm.c:lp_load(3911)
  lp_load: refreshing parameters
[2006/02/21 15:09:12, 3] param/loadparm.c:init_globals(1312)
  Initialising global parameters
[2006/02/21 15:09:12, 3] param/params.c:pm_process(566)
  params.c:pm_process() - Processing configuration file 
"/etc/samba/smb.conf"
[2006/02/21 15:09:12, 3] param/loadparm.c:do_section(3404)
  Processing section "[global]"
[2006/02/21 15:09:12, 2] lib/interface.c:add_interface(79)
  added interface ip=192.168.2.13 bcast=192.168.2.255 nmask=255.255.255.0
[2006/02/21 15:09:12, 3] libsmb/cliconnect.c:cli_start_connection(1388)
  Connecting to host=PDC-NT4
[2006/02/21 15:09:12, 3] lib/util_sock.c:open_socket_out(752)
  Connecting to 192.168.2.17 at port 445
[2006/02/21 15:09:12, 2] lib/util_sock.c:open_socket_out(789)
  error connecting to 192.168.2.17:445 (Connexion refusée)
[2006/02/21 15:09:12, 3] lib/util_sock.c:open_socket_out(752)
  Connecting to 192.168.2.17 at port 139
Fetching DOMAIN database
Failed to fetch domain database: NT_STATUS_ACCESS_DENIED
[2006/02/21 15:09:12, 1] utils/net_rpc.c:run_rpc_command(142)
  rpc command function failed! (NT_STATUS_ACCESS_DENIED)
[2006/02/21 15:09:12, 2] utils/net.c:main(859)
  return code = 1

In NT4 srv Evenments i've got NETLOGON message : triing to log with 
BDC-SAMBA which is not valid b'cause named base referencde is BDC-SAMBA$ 
access refused.

Where is the problem ?

Can someone could help me please ?

Thanks
Vincent