[Samba] Re: Trusted domain user login

[Carlos Lorenzo Matés]

Hi.


El Viernes, 25 de Enero de 2008, Thorkil Olesen escribió:
> Carlos Lorenzo Matés <clmates <at> mundo-r.com> writes:
> > We are unable to estabilish a full bi directional trust between an NT
> > domain and a smaba domain
> >
> > we can make the NT to trust the samba, but not in the reverse, the samba
> > is not able to estabilish the trust with the NT
>
> Try to manually authenticate a user from the NT-domain at the samba-server
> using wbinfo -a
>
> If that succeeds then try to access a samba-share with that user.
>
> It will not solve the problem, but it may point out where the problem is.


I have logged in the samba server as root and tried this

myserver:~ # wbinfo -a clorenzo%myrealpassword
plaintext password authentication failed
error code was NT_STATUS_INVALID_HANDLE (0xc0000008)
error messsage was: Invalid handle
Could not authenticate user clorenzo%myrealpassword with plaintext password
challenge/response password authentication failed
error code was NT_STATUS_INVALID_HANDLE (0xc0000008)
error messsage was: Invalid handle
Could not authenticate user clorenzo with challenge/response


And if i try logged as my user it says

clorenzo at myserver:~> wbinfo -a clorenzo%myrealpassword
plaintext password authentication failed
error code was NT_STATUS_INVALID_HANDLE (0xc0000008)
error messsage was: Invalid handle
Could not authenticate user clorenzo%myrealpassword with plaintext password
challenge/response password authentication failed
error code was NT_STATUS_ACCESS_DENIED (0xc0000022)
error messsage was: winbind client not authorized to use 
winbindd_pam_auth_crap. Ensure permissions 
on /var/lib/samba/winbindd_privileged are set correctly.
Could not authenticate user clorenzo with challenge/response


wbinfo -u and wbinfo -g gets right the list of users and groups from the NT 
domain

Thanks




-- 
Un saludo.

Carlos Lorenzo Matés.
clmates AT mundo-r DOT com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 194 bytes
Desc: This is a digitally signed message part.
Url : http://lists.samba.org/archive/samba/attachments/20080128/11aac48c/attachment.bin