[Samba] Re: Trusted domain user login
Carlos Lorenzo Matés
clmates at mundo-r.com
Mon Jan 28 20:19:18 GMT 2008
Hi.
El Viernes, 25 de Enero de 2008, Thorkil Olesen escribió:
> Carlos Lorenzo Matés <clmates <at> mundo-r.com> writes:
> > We are unable to estabilish a full bi directional trust between an NT
> > domain and a smaba domain
> >
> > we can make the NT to trust the samba, but not in the reverse, the samba
> > is not able to estabilish the trust with the NT
>
> Try to manually authenticate a user from the NT-domain at the samba-server
> using wbinfo -a
>
> If that succeeds then try to access a samba-share with that user.
>
> It will not solve the problem, but it may point out where the problem is.
I have logged in the samba server as root and tried this
myserver:~ # wbinfo -a clorenzo%myrealpassword
plaintext password authentication failed
error code was NT_STATUS_INVALID_HANDLE (0xc0000008)
error messsage was: Invalid handle
Could not authenticate user clorenzo%myrealpassword with plaintext password
challenge/response password authentication failed
error code was NT_STATUS_INVALID_HANDLE (0xc0000008)
error messsage was: Invalid handle
Could not authenticate user clorenzo with challenge/response
And if i try logged as my user it says
clorenzo at myserver:~> wbinfo -a clorenzo%myrealpassword
plaintext password authentication failed
error code was NT_STATUS_INVALID_HANDLE (0xc0000008)
error messsage was: Invalid handle
Could not authenticate user clorenzo%myrealpassword with plaintext password
challenge/response password authentication failed
error code was NT_STATUS_ACCESS_DENIED (0xc0000022)
error messsage was: winbind client not authorized to use
winbindd_pam_auth_crap. Ensure permissions
on /var/lib/samba/winbindd_privileged are set correctly.
Could not authenticate user clorenzo with challenge/response
wbinfo -u and wbinfo -g gets right the list of users and groups from the NT
domain
Thanks
--
Un saludo.
Carlos Lorenzo Matés.
clmates AT mundo-r DOT com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 194 bytes
Desc: This is a digitally signed message part.
Url : http://lists.samba.org/archive/samba/attachments/20080128/11aac48c/attachment.bin
More information about the samba
mailing list