Samba maps any user to nobody -> [Samba] problem logging on to
sambadomain (pdc) from a win xp workstation
Dominik J. Fischer
dominik at d-fischer.de
Mon Apr 14 12:12:51 GMT 2003
Dear Craig,
I just set up a redhat 7.3 machine (P3LIN) with only Samba running to
test systematically. I am using samba 2.2.8a.
I set up all necessary users and my smb.conf. However smbd and nmbd do
not run as samba user: I did not want to create even more problems. The
shares are owned by samba.
With user dom I can access all my shares!
Then I set up P3LIN as a pdc and the joined a samba domain PERNEX on
this machine with my xp workstation and a win 2k workstation.
I. PROBLEM
Domain logon still fails on both windows machines.
The "nt" box says that there is
no domain controller available or my machine account is not found.
II. log.smbd MESSAGES
[2003/04/14 14:13:34, 3] smbd/sec_ctx.c:get_current_groups(172)
get_current_groups: user is in 1 groups: 99
[2003/04/14 14:13:34, 3] smbd/password.c:register_vuid(336)
uid 99 registered to name nobody
This message is weird since I have a samba = default mapping in my
smbusers file. Thus, if the system fails to recognize the name, it
should at least map to user samba.
[2003/04/14 14:13:34, 3] smbd/password.c:register_vuid(338)
Clearing default real name
[2003/04/14 14:13:34, 3] smbd/password.c:register_vuid(340)
User name: nobody Real name: Nobody
[2003/04/14 14:13:34, 3] smbd/password.c:authorise_login(854)
authorise_login: ACCEPTED: guest account and guest ok (nobody)
[2003/04/14 14:13:34, 0] smbd/password.c:authorise_login(863)
authorise_login: rejected invalid user nobody
[2003/04/14 14:13:34, 2] smbd/service.c:make_connection(331)
=> Invalid username/password for ipc$ [nobody]
[2003/04/14 14:13:34, 3] smbd/error.c:error_packet(109)
error packet at smbd/reply.c(166) cmd=117 (SMBtconX)
=> NT_STATUS_WRONG_PASSWORD
[2003/04/14 14:13:34, 3] smbd/process.c:timeout_processing(1066)
end of file from client
What is it all about ipc$? There is no pc named ipc$.
III. WIN XP PRO EVENTMANAGER
- The Eventmanager on my XP says that the domain PERNEX is found but
authentification failed: The password for the workstation could be
wrong.
Ereignistyp (Type of event): Fehler
Ereignisquelle (source): NETLOGON
Ereigniskategorie (categorie): Keine (None)
Ereigniskennung (Event id): 3210
IV. UNIX ACCOUNTS
It becomes more and more clear to me that there is a problem with the
workstation account on unix:
- Could it be that all Computer Accounts have to have big caps?
- What is the password you have to set, e.g. for a workstation called
P4WS$?
- What the correct shell and which home dir?
V. JOINING THE DOMAIN
- When joining the domain on win xp pro, win 2k you only have to provide
the root account data? Or do you have to fill in the workstation
password somewhere?
VI. SAMBA CONFIGURATION
- Has the update encrypted option in smb.conf to be set to yes? What
role does the machine.sid file have in /etc/samba/?
- Would it perhaps help to install samba-3 alpha since they have a new
lanman auth?
- My smb.conf is included at the end of the e-mail.
VII. Win XP Configuration:
Do I have to install SP1 on my Win XP Pro. Will it make it worse?
################################################################
smb.conf
# Global parameters
[global]
coding system =
client code page = 850
code page directory = /etc/codepages
workgroup = PERNEX
netbios name = P3LIN
netbios aliases =
netbios scope =
server string = p3lin
interfaces =
bind interfaces only = No
security = USER
encrypt passwords = Yes
update encrypted = Yes
allow trusted domains = Yes
hosts equiv =
min passwd length = 5
map to guest = Never
null passwords = No
obey pam restrictions = Yes
password server =
smb passwd file = /etc/samba/smbpasswd
root directory =
pam password change = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
passwd chat debug = No
username map =
password level = 0
username level = 0
unix password sync = Yes
restrict anonymous = No
lanman auth = Yes
use rhosts = No
admin log = No
log level = 3
syslog = 1
syslog only = No
log file = /var/log/samba/%m.log
max log size = 0
timestamp logs = Yes
debug hires timestamp = No
debug pid = No
debug uid = No
protocol = NT1
large readwrite = Yes
max protocol = NT1
min protocol = CORE
read bmpx = No
read raw = Yes
write raw = Yes
acl compatibility =
nt smb support = Yes
nt pipe support = Yes
nt status support = Yes
announce version = 4.9
announce as = NT
max mux = 50
max xmit = 16644
name resolve order = lmhosts host wins bcast
max ttl = 259200
max wins ttl = 518400
min wins ttl = 21600
time server = No
unix extensions = No
change notify timeout = 60
deadtime = 0
getwd cache = Yes
keepalive = 300
lpq cache time = 10
max smbd processes = 0
max disk size = 0
max open files = 10000
name cache timeout = 660
read size = 16384
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
stat cache size = 50
use mmap = Yes
total print jobs = 0
load printers = Yes
printcap name = /etc/printcap
disable spoolss = No
enumports command =
addprinter command =
deleteprinter command =
show add printer wizard = Yes
os2 driver map =
strip dot = No
mangling method = hash
character set =
mangled stack = 50
stat cache = Yes
domain admin group =
domain guest group =
machine password timeout = 604800
add user script =
delete user script =
logon script =
logon path = \\%N\%U\profile
logon drive =
logon home = \\%N\%U
domain logons = Yes
os level = 85
lm announce = Auto
lm interval = 60
preferred master = Auto
local master = Yes
domain master = Yes
browse list = Yes
enhanced browsing = Yes
dns proxy = Yes
wins proxy = No
wins server =
wins support = Yes
wins hook =
kernel oplocks = Yes
lock spin count = 3
lock spin time = 10
oplock break wait time = 0
add share command =
change share command =
delete share command =
config file =
preload =
lock dir = /var/cache/samba
pid directory = /var/run/samba
utmp directory =
wtmp directory =
utmp = No
default service =
message command =
dfree command =
valid chars =
remote announce =
remote browse sync =
socket address = 0.0.0.0
homedir map =
time offset = 0
NIS homedir = No
source environment =
panic action =
hide local users = No
host msdfs = No
winbind uid =
winbind gid =
template homedir = /home/%D/%U
template shell = /bin/false
winbind separator = \
winbind cache time = 15
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = No
comment =
path =
alternate permissions = No
username =
guest account = nobody
invalid users =
valid users = smb_usr, root, dom, samba
admin users = samba, root
read list = samba
write list = samba
printer admin =
force user =
force group =
read only = Yes
create mask = 0744
force create mode = 00
security mask = 0777
force security mode = 00
directory mask = 0755
force directory mode = 00
directory security mask = 0777
force directory security mode = 00
force unknown acl user = 00
inherit permissions = No
inherit acls = No
guest only = No
guest ok = No
only user = No
hosts allow =
hosts deny =
status = Yes
nt acl support = Yes
profile acls = No
block size = 1024
max connections = 0
min print space = 0
strict allocate = No
strict sync = No
sync always = No
write cache size = 0
max print jobs = 1000
printable = No
postscript = No
printing = cups
print command = lpr -r -P%p %s
lpq command = lpq -P%p
lprm command = lprm -P%p %j
lppause command =
lpresume command =
queuepause command =
queueresume command =
printer name =
use client driver = No
default devmode = No
printer driver =
printer driver file = /etc/samba/printers.def
printer driver location =
default case = lower
case sensitive = No
preserve case = Yes
short preserve case = Yes
mangle case = No
mangling char = ~
hide dot files = Yes
hide unreadable = No
delete veto files = No
veto files =
hide files =
veto oplock files =
map system = No
map hidden = No
map archive = Yes
mangled names = Yes
mangled map =
browseable = Yes
blocking locks = Yes
csc policy = manual
fake oplocks = No
locking = Yes
oplocks = Yes
level2 oplocks = Yes
oplock contention limit = 2
posix locking = Yes
strict locking = No
share modes = Yes
copy =
include =
exec =
preexec close = No
postexec =
root preexec =
root preexec close = No
root postexec =
available = Yes
volume =
fstype = NTFS
set directory = No
wide links = Yes
follow symlinks = Yes
dont descend =
magic script =
magic output =
delete readonly = No
dos filemode = No
dos filetimes = No
dos filetime resolution = No
fake directory create times = No
vfs object =
vfs options =
msdfs root = No
[homes]
comment = Home Directories
valid users = %S
admin users = samba, root, dom
read only = No
create mask = 0664
directory mask = 0775
browseable = No
[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No
[pub]
path = /samba/pub
################################################################
smbusers
# Unix_name = SMB_name1 SMB_name2 ...
root = administrator admin
nobody = guest pcguest smbguest
default = samba
p5ws = p5ws$ p5ws ipc$ ipc
samba = default
################################################################
Cheers
Dominik Fischer
-----Ursprüngliche Nachricht-----
Von: Coreix Systems - Unix - Linux Development & Internetworking
Engineers [mailto:lists at coreixsystems.com.au]
Gesendet: Samstag, 12. April 2003 15:26
An: dominik
Betreff: RE: Samba maps any user to nobody -> [Samba] problem logging on
to sambadomain (pdc) from a win xp workstation
More information about the samba
mailing list