[Samba] Which tree should I be barking up?

Fri Nov 1 20:58:29 GMT 2002

Ooops here too, looks like that gives:

[root at William home]# wbinfo -a taskla%*******
plaintext password authentication failed
error code was NT_STATUS_INVALID_PARAMETER (0xc000000d)
Could not authenticate user taskla%******* with plaintext password

So I don't have winbind working ok...

-----Original Message-----
From: Noel Kelly [mailto:nkelly at citrusnetworks.net]
Sent: Friday, November 01, 2002 2:12 PM
To: Noel Kelly; 'steven at 9d8.com'; samba at lists.samba.org
Subject: RE: [Samba] Which tree should I be barking up?

Oopps - that should have been wbinfo:

wbinfo -a user%password

Noel

-----Original Message-----
From: Noel Kelly
Sent: 01 November 2002 19:53
To: 'steven at 9d8.com'; samba at lists.samba.org
Subject: RE: [Samba] Which tree should I be barking up?

Steve,

Have you tried authenticating using winbind?

winbind -a user%password

This should tell you if the actual authentication is working.  If it is then
I would check your directory permissions.

Noel

-----Original Message-----
From: Steven S. Macfarlane [mailto:aussm at cableone.net]
Sent: 01 November 2002 15:30
To: samba at lists.samba.org
Subject: RE: [Samba] Which tree should I be barking up?

getent passwd give list of user e.g.

GPSC+______:x:10011:10001:_____________:/home/win/GPSC/________:/bin/false

getent group lists all groups on RH box and all domain groups w/members e.g.

sshd:x:74:
GPSC+Administrative:x:10007:GPSC+_____a,GPSC+___t__,GPSC+t_____,GPSC+____l_,
GPSC+______y,GPSC+___n__

NOW, I am guessing that "map to guest = Bad User" is a good thing to use
with my final setup but for now I've #ed it out.  So the stuff in my log
about not being able to has disappeared but I think I need to figure out why
my userid is not being recognized.

How do I troubleshoot this?

-----Original Message-----
From: Noel Kelly [mailto:nkelly at citrusnetworks.net]
Sent: Thursday, October 31, 2002 2:55 PM
To: 'steven at 9d8.com'; samba at lists.samba.org
Subject: RE: [Samba] Which tree should I be barking up?

You are being treated as a guest user because "map to guest = Bad User"

Bad User - Means  user  logins  with  an  invalid
                password  are  rejected, unless the username does
                not exist, in which case it is treated as a guest
                login and mapped into the  guest account.

This means that your login name or password is not being recognised and you
are being treated as the guest user - default is 'nobody'.  If nobody does
not exist in your domain then you need to create a user called this.

However, that will only get you as far as guest shares - and I suppose you
need to address the actual matter of not being recognised yourself.  Are the
permissions on directory /home/apps 770 with group GPSC+"domain users" or
something similar?

If so then see what you get if you do a 'getent passwd' or 'getent group'.

HTH a bit,
Noel

looks like I am being recognized as a 'guest user' which is a problem but
for testing purposes I have changed smb.conf for this share to allow guest
access, which it does not seem to.

I am also attempting to achieve a successful integration with winbind as I
don't want to manage users on two platforms.

wbinfo -u gives a list of domain users
wbinfo -g gives a list of domain groups
wbinfo -t gives 'secret is good'

Here is my smb.conf:

# Samba config file created using SWAT
# from UNKNOWN (127.0.0.1)
# Date: 2002/10/23 15:08:25

# Global parameters
[global]
        workgroup = GPSC
        netbios name = WILLIAM
        server string = GPSC Application Samba Server
        interfaces = lo eth0
        bind interfaces only = Yes
        security = DOMAIN
        encrypt passwords = Yes
        map to guest = Bad User
        password server = *
        log level = 3
        log file = /var/log/samba.%m
        max log size = 50
        keepalive = 30
        os level = 2
        local master = No
        dns proxy = No
        wins server = 192.168.1.2
        kernel oplocks = No
        winbind uid = 10000-20000
        winbind gid = 10000-20000
        template homedir = /home/win/%D/%U
        winbind separator = +
        invalid users = root
        printer admin = @DOM+PRINTADMIN
        hosts allow = 127. 192.168.
        print command =
        lpq command =
        lprm command =

[homes]
        comment = Home Directories
        read only = No
        create mask = 0750
        browseable = No

[Apps]
        comment = Where network apps are loaded
        path = /home/apps
        guest ok = Yes

Kind regards,

Steven S. Macfarlane

tel 712.204.8875

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.404 / Virus Database: 228 - Release Date: 15/10/2002