samba 3.5.6 on debian 6.0.3 : netlogon credentials check failed

rgu remi.gutknecht at hotmail.fr
Sat Oct 29 06:03:34 MDT 2011


I started a new installation (previous one was working) of samba 3.5.6 as PDC
on debian 6.0.3.
I cannot authenticate from Windows 7 Pro login (DOMAIN\user).
But I can authenticate from windows explorer (with a local account), and see
netlogon and user home directories

Log tell me very few information :

[2011/10/29 12:54:56.412912,  2]
../libcli/auth/credentials.c:307(netlogon_creds_server_check_internal)
  credentials check failed
[2011/10/29 12:54:56.412999,  0]
rpc_server/srv_netlog_nt.c:714(_netr_ServerAuthenticate3)
  _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting
auth request from client ROUGE machine account ROUGE$
[2011/10/29 12:54:56.415645,  2]
../libcli/auth/credentials.c:307(netlogon_creds_server_check_internal)
  credentials check failed
[2011/10/29 12:54:56.415697,  0]
rpc_server/srv_netlog_nt.c:714(_netr_ServerAuthenticate3)
  _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting
auth request from client ROUGE machine account ROUGE$
[2011/10/29 12:55:11.107956,  0] lib/util_sock.c:474(read_fd_with_timeout)
[2011/10/29 12:55:11.108044,  0]
lib/util_sock.c:1441(get_peer_addr_internal)
  getpeername failed. Error was Transport endpoint is not connected
  read_fd_with_timeout: client 0.0.0.0 read error = Connection reset by
peer.


I've modified the two Windows 7 registry settings as indicated by
wiki.samba.org.
I've added user and machine accounts (pdbedit -L).
Here are the lines I've modified/uncommented from master smb.conf :

[global]
security = user
domain logons = yes
domain master = yes
local master = yes
preferred master = yes
os level = 64
logon path = \\%N\%U\profile
logon drive = H:
logon home = \\%N\%U

[homes]
read only = no

[netlogon]
comment = Network Logon Service
path = /var/lib/samba/netlogon
guest ok = yes
read only = yes

[profiles]
comment = Users profiles
path = /var/lib/samba/profiles
guest ok = no
browseable = no
create mask = 0600
directory mask = 0700


Could you please help me?

Rémi

--
View this message in context: http://samba.2283325.n4.nabble.com/samba-3-5-6-on-debian-6-0-3-netlogon-credentials-check-failed-tp3950672p3950672.html
Sent from the Samba - samba-technical mailing list archive at Nabble.com.


More information about the samba-technical mailing list