session setup rejected by PDC and BDCs (NT4 SP5)

[Martin Emmerich]

Hi,

I´ve setup a Samba 2.0.5a on a SuSe 6.2 based Linux 2.2.10. I´m trying to
integrate the server into our NT domain SF-DOM as described in
samba/textdocs/DOMAIN_MEMBER.txt . The described procedures work, but
access as domain user is impossible. In the logfile I get:

[1999/09/14 11:18:31, 2] smbd/server.c:main(716)
  Changed root to /
[1999/09/14 11:18:31, 2] smbd/reply.c:reply_special(96)
  netbios connect: name1=SFM-LINUX1       name2=PLAN9
[1999/09/14 11:18:31, 0] smbd/password.c:domain_client_validate(1276)
  domain_client_validate: machine 10.1.0.10 rejected the session setup.
Error was : code 131.
[1999/09/14 11:18:31, 0] smbd/password.c:domain_client_validate(1276)
  domain_client_validate: machine 10.1.10.2 rejected the session setup.
Error was : code 131.
[1999/09/14 11:18:32, 0] smbd/password.c:domain_client_validate(1276)
  domain_client_validate: machine 10.1.10.5 rejected the session setup.
Error was : code 131.
[1999/09/14 11:18:32, 0] smbd/password.c:domain_client_validate(1330)
  domain_client_validate: Domain password server not available.
[1999/09/14 11:18:32, 1] smbd/password.c:pass_check_smb(504)
  Couldn't find user 'memmerich' in smb_passwd file.
[1999/09/14 11:18:32, 2] smbd/reply.c:reply_sesssetup_and_X(830)
  NT Password did not match for user 'memmerich' ! Defaulting to Lanman
[1999/09/14 11:18:32, 1] smbd/password.c:pass_check_smb(504)
  Couldn't find user 'memmerich' in smb_passwd file.
[1999/09/14 11:18:32, 2] smbd/server.c:exit_server(406)
  Closing connections

The IP addresses of PDC and BDCs, server (SFM-LINUX1), workstation (PLAN)
and user name (memmerich) are correct.

The samba config file is:

# Global parameters
[global]
        workgroup = SF-DOM
        server string = Linux 2.2.10 (SuSe 6.2) Fileserver
        security = domain
        encrypt passwords = yes
        map to guest = Bad User
        password server = 10.1.0.10, 10.1.10.2, 10.1.10.5
        log level = 2
        syslog = 2
        keepalive = 30
        local master = no
        wins server = 10.1.0.10
        remote announce = 10.1.255.255
        printing = bsd
        load printers = yes
        character set = iso8859-1

[share1]
        comment = Share 1
        path = /usr/share1
        read only = no
        browseable = yes
#       guest ok = yes
#       force user = nobody
#       force group = nogroup
#       create mask = 0777
#       directory mask = 0777

[share2]
        comment = Share 2
        path = /usr2/share2
        read only = no
        browseable = yes
#       guest ok = yes
#       force user = nobody
#       force group = nogroup
#       create mask = 0777
#       directory mask = 0777

If I uncomment the guest logins and set security to server, I can
anonymously browse the shares and create files there.
What´s wrong in the security=domain mode?


Regards,

Martin Emmerich


 Mummert + Partner Unternehmensberatung AG
 Herzog-Rudolf-Straße 3
 80539 München
 fon: 089/212 37-642
 fax: 089/212 37-689