[Samba] problem logging on to samba domain (pdc) from a win xp workstation

dominik dominik at connexia.de
Thu Apr 10 13:05:24 GMT 2003


Dear list,

I've got a problem logging on to my samba domain from a win xp ws. The
problem now persists for several months and I've no more ideas what to
try next.

Can somebody help me pls? I have been reading the list casually but did
nit find an answer.

Problem: I finally managed to join my samba domain "do1" from my client
ws. After rebooting the client, when trying log on to the domain, a
window pops up telling me that either the domain controller is not
available or the client machine account is not found.

log.smbd says:
[2003/04/10 14:04:09, 0] smbd/password.c:authorise_login(872)
  authorise_login: rejected invalid user nobody 

However it is possible to reach a samba share via the net use -u
command.

Included:
- smb.conf
- lmhosts
- log.nmbd
- log.smbd

Thanks a lot!

Cheers,

Dominik

--------------------------------------------------------------------

OS - Server
- Samba PDC on SuSE 8.0
- Samba 2.2.3a (I will upgrade later...)

OS Client Win XP without SP1. Require Sign or Seal hack is applied.

Accounts on linux
- smb_cl$ , /bin/false, no login allowed, groups: samba,users
- smb_usr , /bin/sh, normal password, groups: samba,users

Accounts on Samba
- smb_cl$ , normal user, workstation trust account, normal password
- smb_usr , normal user, normal password


--------------------------------------------------------------------
smb.conf

# Samba config file created using SWAT
# from 192.168.0.15 (192.168.0.15)
# Date: 2003/04/10 11:24:27

# Global parameters
[global]
	workgroup = DO1
	netbios name = P4LIN
	server string = p4lin
	encrypt passwords = Yes
	update encrypted = Yes
	map to guest = Bad User
	name resolve order = lmhosts bcast host wins
	socket options = SO_KEEPALIVE TCP_NODELAY IPTOS_LOWDELAY
	character set = ISO8859-15
	domain admin group = dom root admin
	domain logons = Yes
	os level = 64
	lm announce = False
	preferred master = True
	domain master = True
	valid users = dom root smb_usr
	admin users = dom root
	hosts allow = 192.168.0.14 192.168.0.15
	printing = cups
	veto files = /*.eml/*.nws/riched20.dll/*.{*}/

[homes]
	comment = Home Directories
	read only = No
	create mask = 0640
	directory mask = 0750
	browseable = No

[printers]
	comment = All Printers
	path = /var/tmp
	create mask = 0600
	printable = Yes
	browseable = No

[pub]
	path = /pub
	guest ok = Yes

[profiles]
	path = /var/lib/samba/profiles

[lp]
	path = /dev/lp0
	read only = No
	create mask = 0600
	guest ok = Yes
	printable = Yes
	printer name = lp
	oplocks = No

[netlogon]
	path = /var/lib/samba/netlogon
	read only = No


--------------------------------------------------------------------
lmhosts

# This file provides the same function that the lmhosts file does for
# Windows. It's another way to map netbios names to ip addresses.
#
# Cf. section 'name resolve order' in the manual page of smb.conf for
# more information.

127.0.0.1	localhost
192.168.0.14	p4lin
192.168.0.15	smbcl


192.168.0.14 p4lin #PRE #DOM:do1


--------------------------------------------------------------------
log.nmbd


[2003/04/10 13:27:43, 0] nmbd/nmbd.c:main(783)
  Netbios nameserver version 2.2.3a started.
  Copyright Andrew Tridgell and the Samba Team 1994-2002
[2003/04/10 13:27:44, 0] libsmb/namequery.c:getlmhostsent(514)
  getlmhostsent: too many columns in lmhosts file (obsolete syntax)
[2003/04/10 13:27:44, 0] nmbd/nmbd_logonnames.c:add_logon_names(156)
  add_domain_logon_names:
  Attempting to become logon server for workgroup DO1 on subnet
192.168.0.14
[2003/04/10 13:27:44, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(291)
  become_domain_master_browser_bcast:
  Attempting to become domain master browser on workgroup DO1 on subnet
192.168.0.14
[2003/04/10 13:27:44, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(305)
  become_domain_master_browser_bcast: querying subnet 192.168.0.14 for
domain master browser on workgroup DO1
[2003/04/10 13:27:48, 0]
nmbd/nmbd_logonnames.c:become_logon_server_success(115)
  become_logon_server_success: Samba is now a logon server for workgroup
DO1 on subnet 192.168.0.14
[2003/04/10 13:27:48, 0]
nmbd/nmbd_responserecordsdb.c:find_response_record(237)
  find_response_record: response packet id 21106 received with no
matching record.
[2003/04/10 13:27:48, 0]
nmbd/nmbd_responserecordsdb.c:find_response_record(237)
  find_response_record: response packet id 21107 received with no
matching record.
[2003/04/10 13:27:53, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_stage2(115)
  *****
  
  Samba server P4LIN is now a domain master browser for workgroup DO1 on
subnet 192.168.0.14
  
  *****
[2003/04/10 13:28:08, 0]
nmbd/nmbd_become_lmb.c:become_local_master_stage2(404)
  *****
  
  Samba name server P4LIN is now a local master browser for workgroup
DO1 on subnet 192.168.0.14
  
  *****

--------------------------------------------------------------------
log.smbd

lib/access.c:check_access(325)
  Denied connection from  (192.168.0.13)
[2003/04/10 13:24:09, 0] smbd/password.c:authorise_login(872)
  authorise_login: rejected invalid user nobody
[2003/04/10 13:24:09, 0] smbd/password.c:authorise_login(872)
  authorise_login: rejected invalid user nobody
[2003/04/10 13:27:44, 0] smbd/server.c:main(698)
  smbd version 2.2.3a started.
  Copyright Andrew Tridgell and the Samba Team 1992-2002
[2003/04/10 13:29:09, 0] smbd/password.c:authorise_login(872)
  authorise_login: rejected invalid user nobody
[2003/04/10 13:29:09, 0] smbd/password.c:authorise_login(872)
  authorise_login: rejected invalid user nobody
[2003/04/10 13:34:09, 0] smbd/password.c:authorise_login(872)
  authorise_login: rejected invalid user nobody
[2003/04/10 13:34:09, 0] smbd/password.c:authorise_login(872)
  authorise_login: rejected invalid user nobody
[2003/04/10 13:39:09, 0] smbd/password.c:authorise_login(872)
  authorise_login: rejected invalid user nobody
[2003/04/10 13:39:09, 0] smbd/password.c:authorise_login(872)
  authorise_login: rejected invalid user nobody
[2003/04/10 13:44:09, 0] smbd/password.c:authorise_login(872)
  authorise_login: rejected invalid user nobody
[2003/04/10 13:44:09, 0] smbd/password.c:authorise_login(872)
  authorise_login: rejected invalid user nobody
[2003/04/10 13:49:09, 0] smbd/password.c:authorise_login(872)
  authorise_login: rejected invalid user nobody
[2003/04/10 13:49:09, 0] smbd/password.c:authorise_login(872)
  authorise_login: rejected invalid user nobody
[2003/04/10 13:54:09, 0] smbd/password.c:authorise_login(872)
  authorise_login: rejected invalid user nobody
[2003/04/10 13:54:09, 0] smbd/password.c:authorise_login(872)
  authorise_login: rejected invalid user nobody
[2003/04/10 13:57:02, 0] smbd/password.c:authorise_login(872)
  authorise_login: rejected invalid user nobody
[2003/04/10 13:57:02, 0] smbd/password.c:authorise_login(872)
  authorise_login: rejected invalid user nobody
[2003/04/10 13:59:09, 0] smbd/password.c:authorise_login(872)
  authorise_login: rejected invalid user nobody
[2003/04/10 13:59:09, 0] smbd/password.c:authorise_login(872)
  authorise_login: rejected invalid user nobody
[2003/04/10 14:04:09, 0] smbd/password.c:authorise_login(872)
  authorise_login: rejected invalid user nobody
[2003/04/10 14:04:09, 0]



More information about the samba mailing list