[Samba] ADS authentication.. almost works

Razvan Cosma razvan.cosma at telemach.com
Mon Jul 28 14:58:32 GMT 2003


   Hello,

  Beta 3, ./configure --with-ads & krb5, slackware system (no PAM). 
Things seem to be correctly configured, done the net join part without 
errors, I can use e.g. smbclient -L or wbinfo -u, but users cannot acces 
  shares on the Samba machine. Snip from the log (trying to connect from 
the domain controller on which I'm logged as administrator):

[2003/07/28 14:52:27, 3] auth/auth.c:check_ntlm_password(216)
   check_ntlm_password:  Checking password for unmapped user 
[DOMAIN]\[Administrator]@[DOMAINCTL] with the new password interface
[2003/07/28 14:52:27, 3] auth/auth.c:check_ntlm_password(219)
   check_ntlm_password:  mapped user is: 
[SAMBAMACHINE]\[Administrator]@[DOMAINCTL]
[2003/07/28 14:52:27, 3] smbd/sec_ctx.c:push_sec_ctx(256)
   push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2003/07/28 14:52:27, 3] smbd/uid.c:push_conn_ctx(287)
   push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2003/07/28 14:52:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2003/07/28 14:52:27, 0] passdb/pdb_smbpasswd.c:startsmbfilepwent(182)
   startsmbfilepwent_internal: unable to open file 
/usr/local/samba/private/smbpasswd. Error was No such file or directory
[2003/07/28 14:52:27, 0] passdb/pdb_smbpasswd.c:smbpasswd_getsampwnam(1284)
   Unable to open passdb database.
[2003/07/28 14:52:27, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
   pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/07/28 14:52:27, 3] auth/auth_sam.c:check_sam_security(439)
   Couldn't find user 'Administrator' in passdb file.
[2003/07/28 14:52:27, 2] auth/auth.c:check_ntlm_password(309)
   check_ntlm_password:  Authentication for user [Administrator] -> 
[Administrator] FAILED with error NT_STATUS_NO_SUCH_USER
[2003/07/28 14:52:27, 3] smbd/process.c:process_smb(878)
   Transaction 3 of length 214
[2003/07/28 14:52:27, 3] smbd/process.c:switch_message(673)
   switch message SMBsesssetupX (pid 14296)
[2003/07/28 14:52:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/07/28 14:52:27, 3] smbd/sesssetup.c:reply_sesssetup_and_X(551)
   wct=12 flg2=0xc807
[2003/07/28 14:52:27, 2] smbd/sesssetup.c:setup_new_vc_session(507)
   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
[2003/07/28 14:52:27, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(448)
   Doing spnego session setup
[2003/07/28 14:52:27, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(472)
   NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0]
[2003/07/28 14:52:27, 3] smbd/sesssetup.c:reply_spnego_negotiate(353)
   Got OID 1 3 6 1 4 1 311 2 2 10
[2003/07/28 14:52:27, 3] smbd/sesssetup.c:reply_spnego_negotiate(360)
   Got secblob of size 44
[2003/07/28 14:52:27, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(33)
   Got NTLMSSP neg_flags=0xe008b297
[2003/07/28 14:52:27, 3] smbd/process.c:process_smb(878)
   Transaction 4 of length 310
[2003/07/28 14:52:27, 3] smbd/process.c:switch_message(673)
   switch message SMBsesssetupX (pid 14296)
[2003/07/28 14:52:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/07/28 14:52:27, 3] smbd/sesssetup.c:reply_sesssetup_and_X(551)
   wct=12 flg2=0xc807
[2003/07/28 14:52:27, 2] smbd/sesssetup.c:setup_new_vc_session(507)
   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
[2003/07/28 14:52:27, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(448)
   Doing spnego session setup
[2003/07/28 14:52:27, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(472)
   NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0]
[2003/07/28 14:52:27, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(283)
   Got user=[Administrator] domain=[DOMAIN] workstation=[DOMAINCTL] 
len1=24 len2=24
[2003/07/28 14:52:27, 3] auth/auth.c:check_ntlm_password(216)
   check_ntlm_password:  Checking password for unmapped user 
[DOMAIN]\[Administrator]@[DOMAINCTL] with the new password interface
[2003/07/28 14:52:27, 3] auth/auth.c:check_ntlm_password(219)
   check_ntlm_password:  mapped user is: 
[SAMBAMACHINE]\[Administrator]@[DOMAINCTL]
[2003/07/28 14:52:27, 3] smbd/sec_ctx.c:push_sec_ctx(256)
   push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2003/07/28 14:52:27, 3] smbd/uid.c:push_conn_ctx(287)
   push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2003/07/28 14:52:27, 3] smbd/sec_ctx.c:set_sec_ctx(288)
   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2003/07/28 14:52:27, 0] passdb/pdb_smbpasswd.c:startsmbfilepwent(182)
   startsmbfilepwent_internal: unable to open file 
/usr/local/samba/private/smbpasswd. Error was No such file or directory
[2003/07/28 14:52:27, 0] passdb/pdb_smbpasswd.c:smbpasswd_getsampwnam(1284)
   Unable to open passdb database.
[2003/07/28 14:52:27, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
   pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/07/28 14:52:27, 3] auth/auth_sam.c:check_sam_security(439)
   Couldn't find user 'Administrator' in passdb file.
[2003/07/28 14:52:27, 2] auth/auth.c:check_ntlm_password(309)
   check_ntlm_password:  Authentication for user [Administrator] -> 
[Administrator] FAILED with error NT_STATUS_NO_SUCH_USER
[2003/07/28 14:52:29, 3] smbd/process.c:timeout_processing(1087)
   end of file from client
[2003/07/28 14:52:29, 3] smbd/sec_ctx.c:set_sec_ctx(288)
   setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/07/28 14:52:29, 2] smbd/server.c:exit_server(558)
   Closing connections
[2003/07/28 14:52:29, 3] smbd/connection.c:yield_connection(69)
   Yielding connection to
[2003/07/28 14:52:29, 3] smbd/connection.c:yield_connection(76)
   yield_connection: tdb_delete for name  failed with error Record does 
not exist.
[2003/07/28 14:52:29, 3] smbd/server.c:exit_server(601)
   Server exit (normal exit)

  Can you give any hints on what goes wrong? Thank you.




More information about the samba mailing list