[Samba] Trying to debug a WinXP - Win2000 ADSproblem..HELP!
Ladner, Eric (Eric.Ladner)
Eric.Ladner at ChevronTexaco.com
Thu Aug 1 07:18:02 GMT 2002
Oops.. ignore that getpwname thing below.. I read the "did find user"
as "didn't find user".
I'm scrambling for a solution.. Sorry.
Eric
-----Original Message-----
From: Ladner, Eric (Eric.Ladner)
Sent: Thursday, August 01, 2002 8:57 AM
To: Ladner, Eric (Eric.Ladner); samba at lists.samba.org
Subject: RE: [Samba] Trying to debug a WinXP - Win2000 ADSproblem..HELP!
Here's another interesting thing I saw in the logs..
[2002/08/01 07:14:03, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2002/08/01 07:14:03, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(503)
getsmbfilepwent: end of file reached.
[2002/08/01 07:14:03, 7] passdb/pdb_smbpasswd.c:endsmbfilepwent(277)
endsmbfilepwent_internal: closed password file.
[2002/08/01 07:14:03, 5] lib/username.c:Get_Pwnam(309)
Finding user rsc
[2002/08/01 07:14:03, 5] lib/username.c:Get_Pwnam_internals(223)
Trying _Get_Pwnam(), username as lowercase is rsc
[2002/08/01 07:14:03, 5] lib/username.c:Get_Pwnam_internals(251)
Get_Pwnam_internals did find user [rsc]!
I wrote a test program that does basically the same thing that
Get_Pwnam_internals does (eventually it calls getpwnam) for that
user and it works flawlessly. Any idea on why Get_Pwnam_internals
is not returning somebody that has a valid entry in /etc/passwd?
Remember this is the user name that users are getting mapped to
via the username map.
Eric
-----Original Message-----
From: Ladner, Eric (Eric.Ladner)
Sent: Thursday, August 01, 2002 8:41 AM
To: samba at lists.samba.org
Subject: RE: [Samba] Trying to debug a WinXP - Win2000 ADSproblem..HELP!
Any thoughts on the null conn->connectpath when connecting? (below)
-----Original Message-----
From: Ladner, Eric (Eric.Ladner)
Sent: Wednesday, July 31, 2002 2:19 PM
To: 'Dan Vande More'; samba at lists.samba.org
Subject: RE: [Samba] Trying to debug a WinXP - Win2000 ADSproblem..HELP!
One thing I did notice.. In a failed mapping attempt from the computer
in question, this message pops up in the computers log:
[2002/07/31 10:42:16, 0] smbd/service.c:make_connection_snum(648)
is not a directory
I found this in smbd/service.c. Here's the code snippet
/* the alternative is just to check the directory exists */
if (stat(conn->connectpath, &st) != 0 || !S_ISDIR(st.st_mode)) {
DEBUG(0,("%s is not a directory\n", conn->connectpath));
change_to_root_user();
yield_connection(conn, lp_servicename(SNUM(conn)));
conn_free(conn);
*status = NT_STATUS_BAD_NETWORK_NAME;
return NULL;
}
The users are trying to map to \\computer\homes. Why would
conn->connectpath
be null in this case?
-----Original Message-----
From: Dan Vande More [mailto:dvm at gwtr.com]
Sent: Wednesday, July 31, 2002 9:08 AM
To: Ladner, Eric (Eric.Ladner); samba at lists.samba.org
Subject: RE: [Samba] Trying to debug a WinXP - Win2000 ADSproblem..HELP!
Now I could be way of base here, but I run 2 samba web servers with approx 8
people working with them.
So my exp is limited. When I got here the boxes were set up with server
level security and I had tons of problems with them.
When I reformatted the units, I actually joined the samba boxes to the
domain and set the security to "domain"
I found these steps in an old version of Linux-Mag, if you need a link to
that article, or something similar let me know and I will try to find it.
Right now I _believe_ that with server security, you are telling the samba
server to authenticate locally, where as domain tells the samba server to
check the requestors credentials against a pdc/bdc.
Thanks
Dan
-----Original Message-----
From: Ladner, Eric (Eric.Ladner) [mailto:Eric.Ladner at ChevronTexaco.com]
Sent: Wednesday, July 31, 2002 7:56 AM
To: Dan Vande More; samba at lists.samba.org
Subject: RE: [Samba] Trying to debug a WinXP - Win2000 ADSproblem..HELP!
The symptoms seem to be limited to a few machines, not so much
a specific operating system. I have both a win2000 machine and
a winxp system and I can map and unmap it all day.
Here's the global portion of the smb.conf
[global]
oplocks = no
log level = 5
workgroup = CT
server string = WWW Samba Server
load printers = yes
guest account = smbnull
log file = /var/opt/samba/log.%m
max log size = 150
security = server
password server = pasmsntad1.pasms.chevrontexaco.net
username map = /opt/samba/lib/users.map
encrypt passwords = yes
socket options = TCP_NODELAY
local master = no
dns proxy = no
-----Original Message-----
From: Dan Vande More [mailto:dvm at gwtr.com]
Sent: Wednesday, July 31, 2002 8:50 AM
To: Ladner, Eric (Eric.Ladner); samba at lists.samba.org
Subject: RE: [Samba] Trying to debug a WinXP - Win2000 ADS
problem..HELP!
Do you know if the same symptoms appear with Windows 2000?
In your conf file, what is the autentication set to?
Share, Domain etc?
Dan
-----Original Message-----
From: Ladner, Eric (Eric.Ladner) [mailto:Eric.Ladner at ChevronTexaco.com]
Sent: Wednesday, July 31, 2002 7:44 AM
To: samba at lists.samba.org
Subject: RE: [Samba] Trying to debug a WinXP - Win2000 ADS
problem..HELP!
I can't believe nobody out there even has an opinion on this..
Anybody? This is causing some major grief for a couple of our
high profile users..
Thanks,
Eric
-----Original Message-----
From: Ladner, Eric (Eric.Ladner)
Sent: Tuesday, July 30, 2002 1:12 PM
To: samba at lists.samba.org
Subject: [Samba] Trying to debug a WinXP - Win2000 ADS problem.. HELP!
Sorry for the log log file dump, but while looking at some problems
mapping drives, I've run across some stuff.
Below is a chunk of my log when I successfully map a network drive
from a WinXP client to a Samba 3.0-alpha18 server. The thing that
bothers me is that it looks like my DOMAIN\USERNAME combination isn't
being honored and I'm getting in based on a check to the locally
mapped user (I have a username map in place).
The troubling things are the lines saying basically that CT\CLAD was
rejected.
The really troubling thing is that I have another user on site that
has almost the exact same log and he can't map the drive, but I can
every time. We're running the exact same type of client (installed
from the same image even).
Does this provide any insight into my problem? I'll be more than
happy to supply more info!
Log below (log level set to 5)
Thanks,
Eric
[2002/07/30 12:59:45, 3] smbd/process.c:switch_message(679)
switch message SMBsesssetupX (pid 28868)
[2002/07/30 12:59:45, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2002/07/30 12:59:45, 5] smbd/uid.c:change_to_root_user(210)
change_to_root_user: now uid=(0,0) gid=(0,0)
[2002/07/30 12:59:45, 3] smbd/sesssetup.c:reply_sesssetup_and_X(615)
wct=12 flg2=0xc807
[2002/07/30 12:59:45, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(534)
Doing spnego session setup
[2002/07/30 12:59:45, 3] smbd/sesssetup.c:reply_spnego_auth(414)
Got user=[CLAD] workgroup=[CT] machine=[78BWCWF] len1=24 len2=24
[2002/07/30 12:59:45, 4] lib/username.c:map_username(132)
Scanning username map /opt/samba/lib/users.map
[2002/07/30 12:59:45, 3] lib/username.c:map_username(173)
Mapped user CLAD to www
[2002/07/30 12:59:45, 5] auth/auth_util.c:make_user_info_map(175)
make_user_info_map: Mapping user [CT]\[CLAD] from workstation [78BWCWF]
[2002/07/30 12:59:45, 5] auth/auth_util.c:make_user_info_map(205)
make_user_info_map: testing for user CT\CLAD
[2002/07/30 12:59:45, 5] lib/username.c:Get_Pwnam(309)
Finding user CT\CLAD
[2002/07/30 12:59:45, 5] lib/username.c:Get_Pwnam_internals(223)
Trying _Get_Pwnam(), username as lowercase is ct\clad
[2002/07/30 12:59:45, 5] lib/username.c:Get_Pwnam_internals(230)
Trying _Get_Pwnam(), username as given is CT\CLAD
[2002/07/30 12:59:45, 5] lib/username.c:Get_Pwnam_internals(247)
Checking combinations of 0 uppercase letters in ct\clad
[2002/07/30 12:59:45, 5] lib/username.c:Get_Pwnam_internals(251)
Get_Pwnam_internals didn't find user [CT\CLAD]!
[2002/07/30 12:59:45, 5] auth/auth_util.c:make_user_info_map(208)
make_user_info_map: test for user CT\CLAD failed
[2002/07/30 12:59:45, 5] auth/auth_util.c:make_user_info_map(211)
make_user_info_map: trusted domain CT doesn't appear to exist, using CT
[2002/07/30 12:59:45, 5] auth/auth_util.c:make_user_info(91)
attempting to make a user_info for www (CLAD)
[2002/07/30 12:59:45, 5] auth/auth_util.c:make_user_info(101)
making strings for www's user_info struct
[2002/07/30 12:59:45, 5] auth/auth_util.c:make_user_info(143)
making blobs for www's user_info struct
[2002/07/30 12:59:45, 3] auth/auth.c:check_ntlm_password(191)
check_password: Checking password for unmapped user [CT]\[CLAD]@[78BWCWF]
with the new password interface
[2002/07/30 12:59:45, 3] auth/auth.c:check_ntlm_password(194)
check_password: mapped user is: [CT]\[www]@[78BWCWF]
[2002/07/30 12:59:45, 5] lib/util.c:dump_data(1565)
[000] 53 85 6F 0A F1 07 14 56 S.o....V
[2002/07/30 12:59:45, 5] auth/auth.c:check_ntlm_password(226)
check_password: guest authentication for user [CLAD] FAILED with error
NT_STATUS_LOGON_FAILURE
[2002/07/30 12:59:45, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2002/07/30 12:59:45, 3] smbd/uid.c:push_conn_ctx(279)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2002/07/30 12:59:45, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2002/07/30 12:59:45, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(503)
getsmbfilepwent: end of file reached.
[2002/07/30 12:59:45, 5] lib/username.c:Get_Pwnam(309)
Finding user www
[2002/07/30 12:59:45, 5] lib/username.c:Get_Pwnam_internals(223)
Trying _Get_Pwnam(), username as lowercase is www
[2002/07/30 12:59:45, 5] lib/username.c:Get_Pwnam_internals(251)
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
More information about the samba
mailing list