[Samba] smbd/service.c:make_connection_snum - Access denied

[Felipe Augusto van de Wiel]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 09/29/2006 07:15 AM, Eric Van Buggenhaut escreveu:
> Hi,
> 
> Two days ago, I tried to turned my samba server, which worked perfectly
> into a PDC but despite of all my efforts, skimming thru the docs,
> mailing lists, hanging on #samba, I've never been able to logon to the
> new domain from the WinXP clients.
> Authentication is OK, but then access to the share is denied. Here's
> part of the log:
> 
> [2006/09/28 19:03:36, 2] auth/auth.c:check_ntlm_password(305)
>  check_ntlm_password:  authentication for user [root] -> [root] ->
> [root] suc
> ceeded
> [2006/09/28 19:03:36, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(319)
>  NTLMSSP Sign/Seal - Initialising with flags:
> [2006/09/28 19:03:36, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
>  Got NTLMSSP neg_flags=0x60088215
> [2006/09/28 19:03:36, 3] smbd/password.c:register_vuid(222)
>  User name: root       Real name: root
> [2006/09/28 19:03:36, 3] smbd/password.c:register_vuid(241)
>  UNIX uid 0 is UNIX user root, and will be vuid 100
> [2006/09/28 19:03:36, 3] smbd/password.c:register_vuid(270)
>  Adding homes service for user 'root' using home directory: '/root'
> [2006/09/28 19:03:36, 3] param/loadparm.c:lp_add_home(2368)
>  adding home's share [root] for user 'root' at '/root'
> [2006/09/28 19:03:36, 3] smbd/process.c:process_smb(1091)
>  Transaction 4 of length 80
> [2006/09/28 19:03:36, 3] smbd/process.c:switch_message(886)
>  switch message SMBtconX (pid 23977) conn 0x0
> [2006/09/28 19:03:36, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2006/09/28 19:03:36, 2] smbd/service.c:make_connection_snum(321)
>  user 'root' (from session setup) not permitted to access this share (IPC$)
> [2006/09/28 19:03:36, 3] smbd/error.c:error_packet(129)
>  error packet at smbd/reply.c(415) cmd=117 (SMBtconX)
> NT_STATUS_ACCESS_DENIED
> 
> Anyone, please give me a hint, I'm totally puzzled.

	Ok, a few things are not clear (at least to me).

a) What share are you trying to connect? Which is the user?

	From the logs, looks like you are using root to
	connect to a share that is commented on the
	smb.conf that you sent.

b) Did you join the client machines to the domain? (And of course, did
   you create the machine accounts?)


c) Are you able to access other shares? Using other users?


> Attached is our smb.conf
> ------------------------------------------------------------------------
[... smb.conf ...]


	Kind regards,

- --
Felipe Augusto van de Wiel <felipe at paranacidade.org.br>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/           Phone: (+55 41 3350 3300)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFFIphECj65ZxU4gPQRAjYGAJ9ZqxCvialjcYO6s8syRGCZkNcp/wCeOmZv
cnDCNUksRhkhXA/jyQzZPt8=
=Yt0K
-----END PGP SIGNATURE-----