[Samba] RE: Samba unable to validate usernames; winbind works

[John H Terpstra]

Tom,

Thanks for pointing this out - this info should go into the new HOWTO.

Cheers,
John T.

On Mon, 21 Apr 2003, Tom Dickson wrote:

> I discovered the problem, for future reference, this is the symptoms of
> RestrictAnonymous being set to 2.
>
> -Tom
>
> -----Original Message-----
> From: Tom Dickson [mailto:tdickson at inostor.com]
> Sent: Monday, April 21, 2003 9:26 AM
> To: samba mailing list
> Subject: Samba unable to validate usernames; winbind works
>
>
> Running the command:
>
> wbinfo -aDOMAINNAME+Administrator%password
>
> works, in fact, all of the wbinfo commands report data as they should.
>
> However, when I try to connect to a share on the SMB server, I get the
> following error message in the logs:
>
> [2003/04/21 08:28:59, 0]
> smbd/password.c:connect_to_domain_password_server(1328)
>   connect_to_domain_password_server: machine DWP rejected the tconX on the
> IPC$ share. Error was : NT_STATUS_ACCESS_DENIED.
>
> I've tried rejoining the domain, but that didn't help. (The smbpassword -j
> command returns "Joined domain").
>
> The wbinfo -A command has been run, and the secrets file is correct. Is
> there something I'm missing on the domain controller side of things? It's a
> Windows 2000 domain controller.
>
> Thanks,
>
> -Tom
>
>

-- 
John H Terpstra
Email: jht at samba.org