[Samba] ADS and Winbind ... Can't access with Samba host name ...

[Fernando Ruza]

I'd like to have a copy of your smb.conf and krb5.conf files. I have had
the same problem like you for weeks and still without success.

Thanks C.Lee.

Fernando.


On Fri, 2003-12-19 at 10:41, C.Lee Taylor wrote:
> Greetings ...
>
> > please file a bug for me and we'll work on
>
>     Still waiting for an account ... sorry, I don't have time to wait
> around, I have to fix this problem chop chop ... ;-}
>
> > getting this resolved.  This is the 3rd report
> > of the same symptoms.   Thanks.
>
>     Okay, first I throught that maybe this a problem with Samba3, but I
> know that I have been able to use this, so I tried on both Samba 3.0.0
> (FC1 rpms ) and Samba 3.0.1 ( compiled on FC1 by myself rpms ) ...
>
>     At first I had no joy with either, so I throught that maybe I had
> done something wrong ( blush! ) ... So, I went back to basics ... I
> found that if I removed all the funky options in /etc/krb5.conf and used
> Samba 3.0.0, all seems to work fine ( expect for know bugs in 3.0.0,
> understandable ) ... I think upgraded to Samba 3.0.1, and I could not
> access the Samba server again using is hostname ...
>
>     So now I have two servers for test, both with FC1 and all the
> updates, one with Samba 3.0.0 ( FC1 rpms ) and the other with Samba
> 3.0.1 ( self maybe rpms ).
>
>     If anybody wants a copy of my smb.conf and krb5.conf, let me know.
>
> Thanks
> Mailed
> Lee
>
> > |    I have a Win2K3 ADS domain, I have two FedoraCore systems, one with
> > | Samba 3.0.0 and the other with Samba 3.0.1.  Both give me the same
> > problem.
> > |
> > |    If I try access the Samba shares from Win2K3 using the host
> > number, I
> > | get prompted for a username and password, and no matter what I type in,
> > | I can't get in.
> > |
> > |    If I use the Samba server IP address, I am able to get into shares
> > | without been prompted for user details, but Point'nPrint don't work, it
> > | too requests user details.
> > |
> > |    I do seem to be getting two errors in my logs ... First in smbd.log
> > |
> > | [2003/12/18 13:50:19, 0] lib/util_sock.c:get_peer_addr(948)
> > |  getpeername failed. Error was Transport endpoint is not connected
> > | [2003/12/18 16:18:07, 0] lib/util_sock.c:get_peer_addr(948)
> > |  getpeername failed. Error was Transport endpoint is not connected
> > |
> > |    And the other in the machine log with the IP address eg ...
> > |        10.1.1.20.log
> > | [2003/12/18 14:51:23, 1] smbd/sesssetup.c:reply_spnego_kerberos(172)
> > |  Failed to verify incoming ticket!
> > | [2003/12/18 14:51:23, 1] smbd/sesssetup.c:reply_spnego_kerberos(172)
> > |  Failed to verify incoming ticket!
> > |
> > |    But in the machine log with the hostname, I am getting normal
> > | messages ...
> > |
> > |    I have tried to make changes in /etc/krb5.conf, but I don't get any
> > | further ...
> > |
> > |    I have tried a few status checks with net, all hosts work fine ...
> > |
> > | [root at fd1-test-01 samba]# net lookup ldap
> > | 10.1.1.16:389
> > | 10.1.1.17:389
> > |
> > | [root at fd1-test-01 samba]# net lookup dc
> > | 10.1.1.16
> > | 10.1.1.17
> > |
> > |    But net lookup kdc, master domain don't return any thing, so I don't
> > | know what else to look for ...
>
>