[Samba-it] Mannaggia: non funziona il cambio password e l'aggiunta di una macchinaal dominio

[giuseppe sportelli]

----- Original Message ----- 
From: "Michele Nicosia" <michele.nicosia at lastminutetour.com>
To: <samba-it at xsec.it>
Sent: Monday, July 10, 2006 11:35 AM
Subject: [Samba-it] Mannaggia: non funziona il cambio password e l'aggiunta 
di una macchinaal dominio


> [global]
> netbios name = GIOVE
> workgroup = LMT
> netbios aliases = SERVER
> security = user
> allow trusted domains = yes
> enable privileges = yes
> server string = %L - primary domain
> guest account = nobody
> preferred master = yes
> domain logons = yes
> time server = yes
> os level = 255
> domain master = yes
> local master = yes
> logon home = \\%L\%U
> logon drive = Z:
> logon script = %U.bat
> logon path = \\%L\profiles\%U
> add user script = /usr/sbin/useradd %u -g users -s /dev/null -p Samba
> add group script = /usr/local/samba/bin/creategroup.sh %g
> add machine script = /usr/sbin/useradd -c Machine -g 100 -d 
> /var/lib/nobody -s /bin/false %u
> delete user script = /usr/sbin/userdel %u
> announce as = NT PDC SERVER (SlackWare)

> announce version = 9.1 !

> wins support = yes
> wins proxy = yes

> encrypt passwords = yes qui sono cifrate !

> unix password sync = yes questo se le pwd sono in chiaro ?

> passwd program = /usr/bin/passwd %u
> passwd chat = *password* %n\n *Re-enter* %n\n *changed*
> log level = 1
> server schannel = auto
> server signing = auto
> update encrypted = yes
> passdb backend = tdbsam

> enable privileges = yes gia scritto prima !
> client NTLMv2 auth = no
> hide dot files = Yes
> passwd chat debug = yes
> [netlogon]
>        comment = Logon scripts and policies
>        path = /home/netlogon
>        browseable = no
>        create mask = 0755
>        directory mask = 0755
>        profile acls = no
>        write list = @edp, root , mike
> [profiles]
>        comment = Roaming profiles directory
>        path = /home/profiles
>        csc policy = disable
>        profile acls = yes
>        read only = no
>        browseable = no
>        create mask = 0600
>        nt acl support = no
>        directory mask = 0700
> .....
>
> Ecco i log che mi ritrovo:
>
> [2006/07/10 09:13:58, 1] auth/auth_sam.c:sam_account_ok(163)
>  sam_account_ok: Account for user 'vcarraro' password expired!.
> [2006/07/10 09:13:58, 1] auth/auth_sam.c:sam_account_ok(164)
>  sam_account_ok: Password expired at 'Sun, 09 Jul 2006 11:11:49 CEST' 
> (1152436309
> ) unix time.
> [2006/07/10 09:14:52, 0] lib/debug.c:reopen_logs(597)
>  Unable to open new log file /usr/local/samba/var/log.smbd: Permission 
> denied  <---  ha i diritti per farlo è root...
>
> [2006/07/10 09:14:52, 0] libsmb/ntlmssp_sign.c:ntlmssp_check_packet(217)
>  NTLMSSP NTLM1 packet check failed due to invalid signature!
> [2006/07/10 09:14:52, 0] 
> rpc_server/srv_pipe_hnd.c:process_request_pdu(577)
>  process_request_pdu: failed to do auth processing.
> [2006/07/10 09:14:52, 0] 
> rpc_server/srv_pipe_hnd.c:process_request_pdu(578)
>  process_request_pdu: error was NT_STATUS_ACCESS_DENIED.
> [2006/07/10 09:15:40, 1] smbd/service.c:close_cnum(885)
>

ma pdbedit -L -v vcarraro cosa dice ?
potrebbero essersi corrosi i files tdb in /var/lib/samba
capito spesso con shutdown anomali blackout , disco st....
ecc ...
ciao