Debian/Samba Password Problems :-(

[Luke Kenneth Casson Leighton]

On Wed, 12 Nov 1997, Daniel Robbins wrote:

> Hello, I am trying to get Samba (1.9.17p4) running under Debian 1.3.  
> What I would like to do is use Samba for sharing all of the user files 
> for our 70+ seat NT Workstation network. (It's on an NT server right now, 
> but we've had problems with the SAM corruption, so we're looking for an 
> alternative).
> 
> Here's the problem: I am getting a bad password message on the NT 
> machines and when using SMBClient, indentical to what others have posted.
> In the smb.log file, this is what shows up:
> 
> >Allowed connection from bldg235-0052.unm.edu (129.24.234.99) to tmp
> >Scanning username map /usr/local/samba/lib/obgyn.map
> >SMB Password - pwlen = 24, challenge_done = 1
> >Checking SMB password for user drobbins (l=24)
> >get_smbpwname: returning passwd entry for user drobbins, uid 10169
> >Error : UNIX and SMB uids in password files do not match !

> ^^^This is when trying to connect to an SMB share that requires password 
> authentication.

you haven't sent in your smb.conf file.  i am assuming that you are using 
"security = user".

have a look at the unix uid.  have a look at your
/usr/local/samba/private/smbpasswd file.  for the specified user 
(drobbins), is the smbpasswd smb_uid the same as the unix uid?

the answer is no, by the way.

>  Connecting to "public" shares (using the guest account) 
> work flawlessly, from both NT workstation and from smbclient.
> 
> What is going on?  Did I compile Samba wrong?  Debian is using PAM and
> shadow passwords, should I enable *both* these options in the makefile or
> just PAM?

ah.

why?

where is the PAM module getting the unix uid from?  have you compiled 
samba with -DUSE_PAM?

etc etc.


>  But this problem was happening using the most recent Samba .deb
> package (which I tried before I got my hands on the source), which I
> assume was compiled with the correct options.

not that it matters, but do you happen to know what those pre-compiled
binaries' options were?  you need to check your smb and unix uids, 
basically.

lukes


<a href="mailto:lkcl at switchboard.net"  > Luke Kenneth Casson Leighton  </a>
<a href="http://mailhost.cb1.com/~lkcl"> Samba Consultancy and Support </a>