[Samba] NT_STATUS_ACCESS_DENIED after successfully joining domain

[Brian Whitehead]

Did you setup the initial smbpasswd file?  (the text file that holds the
accounts info with the same name as the binary executable, bad idea in my
opinion)  It's usually located in the same place as your smb.conf.  Just my
first thought.  Also, try setting the password server to a specific server
just until you're done troubleshooting.

--
Brian
----- Original Message -----
From: "Dale Peakall" <dale.peakall at bit-arts.com>
To: <samba at lists.samba.org>
Sent: Tuesday, March 26, 2002 5:13 AM
Subject: [Samba] NT_STATUS_ACCESS_DENIED after successfully joining domain


> I've successfully added my Solaris 2.8 samba (2.2.2) host to a
> 2K domain.
>
> The domain is MY_DOM, the PDC is MY_PDC (well they're not, but
> I've just done a global sub in this message :-)
>
> However, I get the following error in the log when a user tries
> to use a share (or browse the available shares).
>
> rpc_client/cli_netlogon.c:cli_net_auth2(160)
>   cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
> rpc_client/cli_login.c:cli_nt_setup_creds(72)
>   cli_nt_setup_creds: auth2 challenge failed
> smbd/password.c:connect_to_domain_password_server(1372)
>   connect_to_domain_password_server: unable to setup the PDC
>   credentials to machine MY_PDC.  Error was :
>   NT_STATUS_ACCESS_DENIED.
> smbd/password.c:domain_client_validate(1591)
>   domain_client_validate: Domain password server not available.
>
> Here's my config file:
>
> [global]
> workgroup = MY_DOM
> encrypt passwords = Yes
> security = DOMAIN
> password server = *
>
> [test]
> comment = test share
> path = /home/test
> read only = No
> guest ok = Yes
>
> The users I've tried to login with exist on both the 2K domain and
> the samba host.
>
> Other problems I've encountered (that may or may not be relevent):
>
> 1. Despite "guest ok" on the share, every time I try to connect
>    from my 2K/XP boxes, I get the login dialog.
> 2. Trying to run smbpasswd as a user asks for old password (which
>    there isn't) and always fails with "machine 127.0.0.1 rejected
>    the password change: Error was : The specified password is
>    invalid.  Failed to chnage password for my_user".
>
> Thanks.
>
> - Dale.
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>