[Samba] Trying to debug a WinXP - Win2000 ADSproblem..HELP!

Ladner, Eric (Eric.Ladner) Eric.Ladner at ChevronTexaco.com
Wed Jul 31 12:28:02 GMT 2002


I added the samba machine to the NT domain and changed the security type
to domain per the DOMIAIN* documents.  The net rpc join worked fine.

I still have the same problem though.. I can map and unmap all day long
but this other computer can't.. It takes several reboots before the machine
will automatically map the drive.

Eric

-----Original Message-----
From: Dan Vande More [mailto:dvm at gwtr.com]
Sent: Wednesday, July 31, 2002 9:08 AM
To: Ladner, Eric (Eric.Ladner); samba at lists.samba.org
Subject: RE: [Samba] Trying to debug a WinXP - Win2000 ADSproblem..HELP!


Now I could be way of base here, but I run 2 samba web servers with approx 8
people working with them.
So my exp is limited. When I got here the boxes were set up with server
level security and I had tons of problems with them.
When I reformatted the units, I actually joined the samba boxes to the
domain and set the security to "domain"
I found these steps in an old version of Linux-Mag, if you need a link to
that article, or something similar let me know and I will try to find it.
Right now I _believe_ that with server security, you are telling the samba
server to authenticate locally, where as domain tells the samba server to
check the requestors credentials against a pdc/bdc.

Thanks

Dan


-----Original Message-----
From: Ladner, Eric (Eric.Ladner) [mailto:Eric.Ladner at ChevronTexaco.com]
Sent: Wednesday, July 31, 2002 7:56 AM
To: Dan Vande More; samba at lists.samba.org
Subject: RE: [Samba] Trying to debug a WinXP - Win2000 ADSproblem..HELP!



The symptoms seem to be limited to a few machines, not so much 
a specific operating system.  I have both a win2000 machine and 
a winxp system and I can map and unmap it all day.  

Here's the global portion of the smb.conf

[global]
   oplocks   	= no
   log level 	= 5
   workgroup 	= CT
   server string 	= WWW Samba Server
   load printers 	= yes
   guest account 	= smbnull
   log file 	= /var/opt/samba/log.%m
   max log size	= 150
   security 	= server
   password server = pasmsntad1.pasms.chevrontexaco.net
   username map 	= /opt/samba/lib/users.map
   encrypt passwords = yes
   socket options = TCP_NODELAY
   local master 	= no
   dns proxy 	= no

-----Original Message-----
From: Dan Vande More [mailto:dvm at gwtr.com]
Sent: Wednesday, July 31, 2002 8:50 AM
To: Ladner, Eric (Eric.Ladner); samba at lists.samba.org
Subject: RE: [Samba] Trying to debug a WinXP - Win2000 ADS
problem..HELP!


Do you know if the same symptoms appear with Windows 2000?
In your conf file, what is the autentication set to?
Share, Domain etc?

Dan

-----Original Message-----
From: Ladner, Eric (Eric.Ladner) [mailto:Eric.Ladner at ChevronTexaco.com]
Sent: Wednesday, July 31, 2002 7:44 AM
To: samba at lists.samba.org
Subject: RE: [Samba] Trying to debug a WinXP - Win2000 ADS
problem..HELP!


I can't believe nobody out there even has an opinion on this.. 

Anybody?  This is causing some major grief for a couple of our 
high profile users..

Thanks,

Eric

-----Original Message-----
From: Ladner, Eric (Eric.Ladner) 
Sent: Tuesday, July 30, 2002 1:12 PM
To: samba at lists.samba.org
Subject: [Samba] Trying to debug a WinXP - Win2000 ADS problem.. HELP!


Sorry for the log log file dump, but while looking at some problems
mapping drives, I've run across some stuff.

Below is a chunk of my log when I successfully map a network drive
from a WinXP client to a Samba 3.0-alpha18 server.  The thing that 
bothers me is that it looks like my DOMAIN\USERNAME combination isn't
being honored and I'm getting in based on a check to the locally 
mapped user (I have a username map in place).

The troubling things are the lines saying basically that CT\CLAD was
rejected.  

The really troubling thing is that I have another user on site that
has almost the exact same log and he can't map the drive, but I can
every time.  We're running the exact same type of client (installed
from the same image even).

Does this provide any insight into my problem?  I'll be more than 
happy to supply more info!

Log below (log level set to 5)

Thanks,

Eric

[2002/07/30 12:59:45, 3] smbd/process.c:switch_message(679)
  switch message SMBsesssetupX (pid 28868)
[2002/07/30 12:59:45, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2002/07/30 12:59:45, 5] smbd/uid.c:change_to_root_user(210)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2002/07/30 12:59:45, 3] smbd/sesssetup.c:reply_sesssetup_and_X(615)
  wct=12 flg2=0xc807
[2002/07/30 12:59:45, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(534)
  Doing spnego session setup
[2002/07/30 12:59:45, 3] smbd/sesssetup.c:reply_spnego_auth(414)
  Got user=[CLAD] workgroup=[CT] machine=[78BWCWF] len1=24 len2=24
[2002/07/30 12:59:45, 4] lib/username.c:map_username(132)
  Scanning username map /opt/samba/lib/users.map
[2002/07/30 12:59:45, 3] lib/username.c:map_username(173)
  Mapped user CLAD to www
[2002/07/30 12:59:45, 5] auth/auth_util.c:make_user_info_map(175)
  make_user_info_map: Mapping user [CT]\[CLAD] from workstation [78BWCWF]
[2002/07/30 12:59:45, 5] auth/auth_util.c:make_user_info_map(205)
  make_user_info_map: testing for user CT\CLAD
[2002/07/30 12:59:45, 5] lib/username.c:Get_Pwnam(309)
  Finding user CT\CLAD
[2002/07/30 12:59:45, 5] lib/username.c:Get_Pwnam_internals(223)
  Trying _Get_Pwnam(), username as lowercase is ct\clad
[2002/07/30 12:59:45, 5] lib/username.c:Get_Pwnam_internals(230)
  Trying _Get_Pwnam(), username as given is CT\CLAD
[2002/07/30 12:59:45, 5] lib/username.c:Get_Pwnam_internals(247)
  Checking combinations of 0 uppercase letters in ct\clad
[2002/07/30 12:59:45, 5] lib/username.c:Get_Pwnam_internals(251)
  Get_Pwnam_internals didn't find user [CT\CLAD]!
[2002/07/30 12:59:45, 5] auth/auth_util.c:make_user_info_map(208)
  make_user_info_map: test for user CT\CLAD failed
[2002/07/30 12:59:45, 5] auth/auth_util.c:make_user_info_map(211)
  make_user_info_map: trusted domain CT doesn't appear to exist, using CT
[2002/07/30 12:59:45, 5] auth/auth_util.c:make_user_info(91)
  attempting to make a user_info for www (CLAD)
[2002/07/30 12:59:45, 5] auth/auth_util.c:make_user_info(101)
  making strings for www's user_info struct
[2002/07/30 12:59:45, 5] auth/auth_util.c:make_user_info(143)
  making blobs for www's user_info struct
[2002/07/30 12:59:45, 3] auth/auth.c:check_ntlm_password(191)
  check_password:  Checking password for unmapped user [CT]\[CLAD]@[78BWCWF]
with the new password interface
[2002/07/30 12:59:45, 3] auth/auth.c:check_ntlm_password(194)
  check_password:  mapped user is: [CT]\[www]@[78BWCWF]
[2002/07/30 12:59:45, 5] lib/util.c:dump_data(1565)
  [000] 53 85 6F 0A F1 07 14 56                           S.o....V
[2002/07/30 12:59:45, 5] auth/auth.c:check_ntlm_password(226)
  check_password: guest authentication for user [CLAD] FAILED with error
NT_STATUS_LOGON_FAILURE
[2002/07/30 12:59:45, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2002/07/30 12:59:45, 3] smbd/uid.c:push_conn_ctx(279)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2002/07/30 12:59:45, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2002/07/30 12:59:45, 5] passdb/pdb_smbpasswd.c:getsmbfilepwent(503)
  getsmbfilepwent: end of file reached.
[2002/07/30 12:59:45, 5] lib/username.c:Get_Pwnam(309)
  Finding user www
[2002/07/30 12:59:45, 5] lib/username.c:Get_Pwnam_internals(223)
  Trying _Get_Pwnam(), username as lowercase is www
[2002/07/30 12:59:45, 5] lib/username.c:Get_Pwnam_internals(251)


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba






More information about the samba mailing list