Samba 2.0.3 in Domain

Armstrong, Scott armstron at nvl.army.mil
Fri Apr 23 14:31:12 GMT 1999


We're encountering sporadic difficulties with Samba 2.0.3 on Sun SPARC
Solaris 2.5.1 and 2.7 running in "security = DOMAIN" mode. The PDC logs an
error 5722, with text 
"The session setup from the computer MERCURY failed to authenticate. The
name of the account referenced in the security database is MERCURY$.  The
following error occurred: 
Access is denied.". 
The smb log shows the following:
[1999/04/21 14:22:30, 0] rpc_client/cli_netlogon.c:(149)
  cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
[1999/04/21 14:22:30, 0] rpc_client/cli_login.c:(71)
  cli_nt_setup_creds: auth2 challenge failed
[1999/04/21 14:22:30, 0] smbd/password.c:(1347)
  domain_client_validate: unable to setup the PDC credentials to machine
MANTIS. Error was : NT_STATUS_ACCESS_DENIED.

This is a sporadic problem we're having exclusively with Windows 95 clients.
The Samba configuration file, less the hosts allow line, is as follows:

[global]
        workgroup = NVESD
        server string = Samba %v
        security = DOMAIN
        encrypt passwords = yes
        password server = mantis flea wasp scorpion
        time server = Yes
        deadtime = 5
        keepalive = 60
        socket options = TCP_NODELAY
        client code page = 437
        local master = no
        wins server = 140.183.5.55
        homedir map = auto.home
        nis homedir = true
        invalid users = adm audit bin daemon listen lp news noaccess nuucp
root smtp sundiag sync sys sysdiag uucp
        browseable = no
        log level = 5
        log file = /var/log.samba.%m

I've deleted the machine account from the domain, recreated it, and rejoined
the domain, but the problem continues.
We've had no equivalent difficulties using 1.9.18p8 which was the revision
we upgraded from.
Any assistance would be greatly appreciated. We can increase the log level
to whatever is desired and send it along.

Scott

==========================================================
 
Scott Armstrong, MCSE        In the days before volcanoes
Department of the Army       were invented, lava had to be
Night Vision and Electronic  hand carried down from the
Sensors                      mountain and poured on the
AMSEL-RD-NV-OPS-NS           sleeping villagers.
10221 Burbeck Road           This took a great deal of
Ft. Belvoir, VA 22060-5806   time.
armstron at NVL.ARMY.MIL
Voice (703) 704-1764
Fax   (703) 704-1953

 <<Armstrong, Scott.vcf>> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Armstrong, Scott.vcf
Type: application/octet-stream
Size: 571 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba/attachments/19990423/72292265/ArmstrongScott.obj


More information about the samba mailing list