[Samba] Access Denied when trying to login to samba PDC

[Don Zajic]

One of the main things you need to remember when joining a system to the
domain is, when prompted for a username and password, always use "root"
as the user.  

Don Zajic


-----Original Message-----
From: samba-bounces+donald.zajic=verizon.net at lists.samba.org
[mailto:samba-bounces+donald.zajic=verizon.net at lists.samba.org] On
Behalf Of Thomas Graham
Sent: Sunday, February 16, 2003 6:45 AM
To: samba at lists.samba.org
Subject: [Samba] Access Denied when trying to login to samba PDC


While trying to set up samba as a PDC, I followed O'Reillys Using Samba.
This resulted in the following smb.conf:

[global]
workgroup = GRAHAM
encrypt passwords = true
log level = 1
max log size = 1000
hosts allow = 192.168.0/24 192.168.1/24
hosts deny = 1.1.1.1/0.0.0.0
domain logons = yes

security = user
os level = 34
local master = yes
preferred master = yes
domain master = yes

[temp]
comment = shared temporary directory
path = /usr/tmp
readonly = no
guest ok = yes

[homes]
comment = Home Directories
browseable = no
writable = yes
valid users = %S
create mode = 0664
directory mode = 0775
map to guest = bad user

If I try to join the domain "GRAHAM" from any of the WinXP(NT5.1)
machines, by changing from workgroup GRAHAM to Domain GRAHAM, then click
OK, I am prompted to "Enter the name and password of an account with
permission to join the domain."

If I enter a valid username and password (that allows access to the
shared drives) I get the
response:
	"The following error occurred attempting to access the domain
"GRAHAM": ACCESS IS DENIED."

[2003/02/16 11:30:47, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1416)
  unable to open passdb database.

If I enter a bad username/pass I get the response:
	"The following error occurred attempting to access the domain
"GRAHAM": Logon failure: Unknown username/bad password"

[2003/02/16 11:29:17, 1] smbd/password.c:pass_check_smb(561)
  Account for user 'tg-1998' was disabled.
[2003/02/16 11:29:17, 1] smbd/password.c:pass_check_smb(561)
  Account for user 'tg-1998' was disabled.
[2003/02/16 11:29:17, 1] smbd/reply.c:reply_sesssetup_and_X(988)
  Rejecting user 'tg-1998': authentication failed
[2003/02/16 11:29:18, 1] smbd/password.c:pass_check_smb(561)
  Account for user 'tg-1998' was disabled.
[2003/02/16 11:29:18, 1] smbd/password.c:pass_check_smb(561)
  Account for user 'tg-1998' was disabled.
[2003/02/16 11:29:18, 1] smbd/reply.c:reply_sesssetup_and_X(988)
  Rejecting user 'tg-1998': authentication failed


nmbd.log:
[2003/02/16 11:45:15, 0] nmbd/nmbd_logonnames.c:add_logon_names(156)
  add_domain_logon_names:
  Attempting to become logon server for workgroup GRAHAM on subnet
192.168.0.108 [2003/02/16 11:45:15, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(291)
  become_domain_master_browser_bcast:
  Attempting to become domain master browser on workgroup GRAHAM on
subnet 192.168.0.108 [2003/02/16 11:45:15, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(305)
  become_domain_master_browser_bcast: querying subnet 192.168.0.108 for
domain master browser on workgroup GRAHAM [2003/02/16 11:45:19, 0]
nmbd/nmbd_logonnames.c:become_logon_server_success(115)
  become_logon_server_success: Samba is now a logon server for workgroup
GRAHAM on subnet 192.168.0.108 [2003/02/16 11:45:19, 0]
nmbd/nmbd_responserecordsdb.c:find_response_record(237)
  find_response_record: response packet id 30328 received with no
matching record. [2003/02/16 11:45:19, 0]
nmbd/nmbd_responserecordsdb.c:find_response_record(237)
  find_response_record: response packet id 30329 received with no
matching record. [2003/02/16 11:45:24, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_stage2(115)
  *****

  Samba server SUN is now a domain master browser for workgroup GRAHAM
on subnet 192.168.0.108

  *****
[2003/02/16 11:45:38, 0]
nmbd/nmbd_become_lmb.c:become_local_master_stage2(404)
  *****

  Samba name server SUN is now a local master browser for workgroup
GRAHAM on subnet 192.168.0.108

  *****
[2003/02/16 11:46:34, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16
11:46:34, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16
11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16
11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16
11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16
11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16
11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x7
	
I am running samba 2.2.3a-12 on a Sun Sparc64 running Debian GNU/Linux
3.0 "woody". All the client machines will be running windows XP pro/home
edition.

Thomas Graham.

--
But be not afraid of greatness:
   some men are born great, some achieve greatness,
   and some have greatness thrust upon them.
--


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba