[Samba] problem logging on to samba domain (pdc) from a win x
pworkstation
Jim Wharton
jwharton at acpafl.org
Thu Apr 10 13:16:34 GMT 2003
If I'm not mistaken, the sign or seal hack from samba2.2.3 is broken. Use
the newer hack or manually modify your registry.
Jim
> -----Original Message-----
> From: samba-bounces+creole3=bellsouth.net at lists.samba.org
> [mailto:samba-bounces+creole3=bellsouth.net at lists.samba.org]On
> Behalf Of
> dominik
> Sent: Thursday, April 10, 2003 9:05 AM
> To: samba at lists.samba.org
> Cc: desaster at freenet.de
> Subject: [Samba] problem logging on to samba domain (pdc) from a win
> xpworkstation
>
>
> Dear list,
>
> I've got a problem logging on to my samba domain from a win xp ws. The
> problem now persists for several months and I've no more ideas what to
> try next.
>
> Can somebody help me pls? I have been reading the list
> casually but did
> nit find an answer.
>
> Problem: I finally managed to join my samba domain "do1" from
> my client
> ws. After rebooting the client, when trying log on to the domain, a
> window pops up telling me that either the domain controller is not
> available or the client machine account is not found.
>
> log.smbd says:
> [2003/04/10 14:04:09, 0] smbd/password.c:authorise_login(872)
> authorise_login: rejected invalid user nobody
>
> However it is possible to reach a samba share via the net use -u
> command.
>
> Included:
> - smb.conf
> - lmhosts
> - log.nmbd
> - log.smbd
>
> Thanks a lot!
>
> Cheers,
>
> Dominik
>
> --------------------------------------------------------------------
>
> OS - Server
> - Samba PDC on SuSE 8.0
> - Samba 2.2.3a (I will upgrade later...)
>
> OS Client Win XP without SP1. Require Sign or Seal hack is applied.
>
> Accounts on linux
> - smb_cl$ , /bin/false, no login allowed, groups: samba,users
> - smb_usr , /bin/sh, normal password, groups: samba,users
>
> Accounts on Samba
> - smb_cl$ , normal user, workstation trust account, normal password
> - smb_usr , normal user, normal password
>
>
> --------------------------------------------------------------------
> smb.conf
>
> # Samba config file created using SWAT
> # from 192.168.0.15 (192.168.0.15)
> # Date: 2003/04/10 11:24:27
>
> # Global parameters
> [global]
> workgroup = DO1
> netbios name = P4LIN
> server string = p4lin
> encrypt passwords = Yes
> update encrypted = Yes
> map to guest = Bad User
> name resolve order = lmhosts bcast host wins
> socket options = SO_KEEPALIVE TCP_NODELAY IPTOS_LOWDELAY
> character set = ISO8859-15
> domain admin group = dom root admin
> domain logons = Yes
> os level = 64
> lm announce = False
> preferred master = True
> domain master = True
> valid users = dom root smb_usr
> admin users = dom root
> hosts allow = 192.168.0.14 192.168.0.15
> printing = cups
> veto files = /*.eml/*.nws/riched20.dll/*.{*}/
>
> [homes]
> comment = Home Directories
> read only = No
> create mask = 0640
> directory mask = 0750
> browseable = No
>
> [printers]
> comment = All Printers
> path = /var/tmp
> create mask = 0600
> printable = Yes
> browseable = No
>
> [pub]
> path = /pub
> guest ok = Yes
>
> [profiles]
> path = /var/lib/samba/profiles
>
> [lp]
> path = /dev/lp0
> read only = No
> create mask = 0600
> guest ok = Yes
> printable = Yes
> printer name = lp
> oplocks = No
>
> [netlogon]
> path = /var/lib/samba/netlogon
> read only = No
>
>
> --------------------------------------------------------------------
> lmhosts
>
> # This file provides the same function that the lmhosts file does for
> # Windows. It's another way to map netbios names to ip addresses.
> #
> # Cf. section 'name resolve order' in the manual page of smb.conf for
> # more information.
>
> 127.0.0.1 localhost
> 192.168.0.14 p4lin
> 192.168.0.15 smbcl
>
>
> 192.168.0.14 p4lin #PRE #DOM:do1
>
>
> --------------------------------------------------------------------
> log.nmbd
>
>
> [2003/04/10 13:27:43, 0] nmbd/nmbd.c:main(783)
> Netbios nameserver version 2.2.3a started.
> Copyright Andrew Tridgell and the Samba Team 1994-2002
> [2003/04/10 13:27:44, 0] libsmb/namequery.c:getlmhostsent(514)
> getlmhostsent: too many columns in lmhosts file (obsolete syntax)
> [2003/04/10 13:27:44, 0] nmbd/nmbd_logonnames.c:add_logon_names(156)
> add_domain_logon_names:
> Attempting to become logon server for workgroup DO1 on subnet
> 192.168.0.14
> [2003/04/10 13:27:44, 0]
> nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(291)
> become_domain_master_browser_bcast:
> Attempting to become domain master browser on workgroup DO1
> on subnet
> 192.168.0.14
> [2003/04/10 13:27:44, 0]
> nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(305)
> become_domain_master_browser_bcast: querying subnet 192.168.0.14 for
> domain master browser on workgroup DO1
> [2003/04/10 13:27:48, 0]
> nmbd/nmbd_logonnames.c:become_logon_server_success(115)
> become_logon_server_success: Samba is now a logon server
> for workgroup
> DO1 on subnet 192.168.0.14
> [2003/04/10 13:27:48, 0]
> nmbd/nmbd_responserecordsdb.c:find_response_record(237)
> find_response_record: response packet id 21106 received with no
> matching record.
> [2003/04/10 13:27:48, 0]
> nmbd/nmbd_responserecordsdb.c:find_response_record(237)
> find_response_record: response packet id 21107 received with no
> matching record.
> [2003/04/10 13:27:53, 0]
> nmbd/nmbd_become_dmb.c:become_domain_master_stage2(115)
> *****
>
> Samba server P4LIN is now a domain master browser for
> workgroup DO1 on
> subnet 192.168.0.14
>
> *****
> [2003/04/10 13:28:08, 0]
> nmbd/nmbd_become_lmb.c:become_local_master_stage2(404)
> *****
>
> Samba name server P4LIN is now a local master browser for workgroup
> DO1 on subnet 192.168.0.14
>
> *****
>
> --------------------------------------------------------------------
> log.smbd
>
> lib/access.c:check_access(325)
> Denied connection from (192.168.0.13)
> [2003/04/10 13:24:09, 0] smbd/password.c:authorise_login(872)
> authorise_login: rejected invalid user nobody
> [2003/04/10 13:24:09, 0] smbd/password.c:authorise_login(872)
> authorise_login: rejected invalid user nobody
> [2003/04/10 13:27:44, 0] smbd/server.c:main(698)
> smbd version 2.2.3a started.
> Copyright Andrew Tridgell and the Samba Team 1992-2002
> [2003/04/10 13:29:09, 0] smbd/password.c:authorise_login(872)
> authorise_login: rejected invalid user nobody
> [2003/04/10 13:29:09, 0] smbd/password.c:authorise_login(872)
> authorise_login: rejected invalid user nobody
> [2003/04/10 13:34:09, 0] smbd/password.c:authorise_login(872)
> authorise_login: rejected invalid user nobody
> [2003/04/10 13:34:09, 0] smbd/password.c:authorise_login(872)
> authorise_login: rejected invalid user nobody
> [2003/04/10 13:39:09, 0] smbd/password.c:authorise_login(872)
> authorise_login: rejected invalid user nobody
> [2003/04/10 13:39:09, 0] smbd/password.c:authorise_login(872)
> authorise_login: rejected invalid user nobody
> [2003/04/10 13:44:09, 0] smbd/password.c:authorise_login(872)
> authorise_login: rejected invalid user nobody
> [2003/04/10 13:44:09, 0] smbd/password.c:authorise_login(872)
> authorise_login: rejected invalid user nobody
> [2003/04/10 13:49:09, 0] smbd/password.c:authorise_login(872)
> authorise_login: rejected invalid user nobody
> [2003/04/10 13:49:09, 0] smbd/password.c:authorise_login(872)
> authorise_login: rejected invalid user nobody
> [2003/04/10 13:54:09, 0] smbd/password.c:authorise_login(872)
> authorise_login: rejected invalid user nobody
> [2003/04/10 13:54:09, 0] smbd/password.c:authorise_login(872)
> authorise_login: rejected invalid user nobody
> [2003/04/10 13:57:02, 0] smbd/password.c:authorise_login(872)
> authorise_login: rejected invalid user nobody
> [2003/04/10 13:57:02, 0] smbd/password.c:authorise_login(872)
> authorise_login: rejected invalid user nobody
> [2003/04/10 13:59:09, 0] smbd/password.c:authorise_login(872)
> authorise_login: rejected invalid user nobody
> [2003/04/10 13:59:09, 0] smbd/password.c:authorise_login(872)
> authorise_login: rejected invalid user nobody
> [2003/04/10 14:04:09, 0] smbd/password.c:authorise_login(872)
> authorise_login: rejected invalid user nobody
> [2003/04/10 14:04:09, 0]
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: http://lists.samba.org/mailman/listinfo/samba
>
OutBound Mail Scanned by Mcafee Web Appliance.
More information about the samba
mailing list