[Samba] Re: Samba server as part of AD domain keeps asking for username and password

[Henrik Beckman]

Sorry,

My german is not that good so I´ll stick to english.
I had a similar problem which was cause by samba not being able to recognize
machines (AWM013 is a machine account or a user?), we have a unix heavy
samba enviroment with user in both AD and unix both computers only in AD.

We had problems when the computer account tried to gain access to IPC$? but
where denied because the account not being recognized by samba.
If you to allow guest for bad users that would go away, security might be
solvable by mapping guest to nobody? Not that I would run this in production
but it´s a way to test.

Also if wbinfo -u or -g doesn´t work to set a valid user account in winbind
to use when connecting to the domain.

/Henrik


2008/9/5 Andreas Ladanyi <andy.ladanyi at web.de>

> Hallo Hendrik,
>
> Dein Beitrag ist leider nur bei mir gelandet ! Weder bei Wolfgang, noch auf
> der Mailingliste :-(
>
> Zum testen finde ich den parameter:
>
> map to guest = Bad User
>
> ok, aber nicht unbedingt fürs Produktivsystem.
>
> Was meinst Du ?
>
> Sollte ein "öffentliches" share "public=yes" oder "guest ok = yes" nicht
> dazu führen, dass Du eben kein Passwort Popup bekommst ? Sonst macht das ja
> irgendwo keinen Sinn oder ?
>
> Grüße,
> Andy
>
>
> > -----Ursprüngliche Nachricht-----
> > Von: "Henrik Beckman" <henrik.list at gmail.com>
> > Gesendet: 04.09.08 22:06:33
> > An: "Andreas Ladanyi" <knuffiandy at web.de>
> > Betreff: Re: [Samba] Re: Samba server as part of AD domain keeps asking
> for username and password
>
>
> >
> > On Thu, Sep 4, 2008 at 8:45 PM, Andreas Ladanyi <knuffiandy at web.de>
> > wrote:
> >
> >  Wolfgang.Mair at Emerson.com schrieb:
> >  Hi Andy,
> >
> >  Thanks for the answer but I've tryed this already.
> >  With guest ok = yes And/or
> >  valid users = TESTDOM\awm013 awm013 testdom\awm013 AWM013
> >
> >  I haven't set the winbind seperator so it should be ok to use \
> >
> >  And also with guest ok = yes I still get the password promt.
> >
> >  Thanks
> >  Wolfgang
> >
> >  Hi Wolfgang,
> >
> >  The error message is:
> >
> >  Username TESTDOM\AWM013 is invalid on this system <------------------
> > --
> >  There it is
> >  [2008/08/29 11:40:00, 3] smbd/error.c:error_packet_set(106)
> >  error packet at smbd/sesssetup.c(444) cmd=115 (SMBsesssetupX)
> >  NT_STATUS_LOGON_FAILURE
> >
> >  The username is invalid !! Is AWM013 really a user with unix
> > attributes in the Active Directory ?
> >
> >  You are working with winbind. Which backend do you use to save you
> > unix user information ? Windows Server 2003 R2 ?
> >
> >  Iam wondering i cant read an "idmap backend = " parameter in your
> > smb.conf !
> >
> >  What is the result of "wbinfo -u" and "wbinfo -g" and "wbinfo -t" ???
> > ????
> >
> >  Bye,
> >  Andy
> >
> >
> > Is awm013 a computer?
> > If so try guest = Ok and map to guest = Bad User.
> > Also as Andy asks does wbinfo -u and -g work, otherwise what user
> > does winbindd use?
> >
> > Do you have 2008 server as password servers?
> >
> > /Henrik
> >
> >
> >
> >
> >
>
>
> _____________________________________________________________________
> Der WEB.DE SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu sparen!
> http://smartsurfer.web.de/?mc=100071&distributionid=000000000066
>
>