[Samba] security=domain problems

Peter T Greening peteman at math.unm.edu
Wed Jul 30 23:11:08 GMT 2003


Hi all,
We are having some problems getting a solaris 9(sparc) file server 
running samba 2.2.2 to authenticate aginst a windows NT 4 PDC.  Let me 
say first that this was all working at one time, then we had some data 
corrumption on our NFS mounted /usr/local, and had to restore from tape. 
  Due to some issues with solaris ufsdump and ufsrestore, stuff was not 
quite put back properly.  We do have the original working smb.conf, and 
binaries.

Our file server's netbios name is sporadics.  Our NT domain has a PDC 
named zeus and a BDC named zeus2.  Our test client running linux redhat 
is named dali.

After the restore from tape, we went to the PDC, server manager, and 
deleted sporadics.  We then went to sporadics and issued the following 
command:

 > smbpasswd -j olympus -r zeus -U administrator
Password:
Joined domain OLYMPUS.
 >

all looks good so far.

this causes the creation of 
/usr/local/pkg/samba/samba-2.2.2/private/secrets.tdb.

Our smb.conf file's global section is as follows:
[global]
workgroup = OLYMPUS
hosts allow = 64.106.38. 10.0.0.0/23
netbios name = sporadics
security = domain
password server = ZEUS ZEUS2
encrypt passwords = yes
log file = /math/log/rahab/samba/log.%m
max log size = 500
#socket options = TCP_NODELAY
local master = no

Which I am almost poisitive is fine.  This config file was running 
before the data loss.

Now, when we try to do a smbclient -L sporadics from our test machine, 
we get the following failure:
peteman at dali:/math/system2/solaris-sparc/local/bin
 >smbclient -L sporadics
added interface ip=64.106.38.78 bcast=64.106.38.255 nmask=255.255.255.0
Got a positive name query response from 64.106.38.15 ( 64.106.38.15 )
Password:
session setup failed: NT_STATUS_LOGON_FAILURE
peteman at dali:/math/system2/solaris-sparc/local/bin
 >

A quick look at log.dali shows us that sporadics can not authenticate 
itself with the pdc:
[2003/07/30 16:48:14, 0] rpc_client/cli_netlogon.c:cli_net_auth2(160)
   cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
[2003/07/30 16:48:14, 0] rpc_client/cli_login.c:cli_nt_setup_creds(72)
   cli_nt_setup_creds: auth2 challenge failed
[2003/07/30 16:48:14, 0] 
smbd/password.c:connect_to_domain_password_server(1372)
   connect_to_domain_password_server: unable to setup the PDC 
credentials to machine ZEUS. Error was : NT_STATUS_ACCESS_DENIED.
[2003/07/30 16:48:14, 0] rpc_client/cli_netlogon.c:cli_net_auth2(160)
   cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
[2003/07/30 16:48:14, 0] rpc_client/cli_login.c:cli_nt_setup_creds(72)
   cli_nt_setup_creds: auth2 challenge failed
[2003/07/30 16:48:14, 0] 
smbd/password.c:connect_to_domain_password_server(1372)
   connect_to_domain_password_server: unable to setup the PDC 
credentials to machine ZEUS2. Error was : NT_STATUS_ACCESS_DENIED.
[2003/07/30 16:48:14, 0] smbd/password.c:domain_client_validate(1591)
   domain_client_validate: Domain password server not available.
[2003/07/30 16:48:14, 0] passdb/pdb_smbpasswd.c:startsmbfilepwent(171)
   startsmbfilepwent_internal: unable to open file 
/export/system/solaris-sparc/pkg/samba/samba-2.2.2/private/smbpasswd. 
Error was No such file or directory
[2003/07/30 16:48:14, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1368)
   unable to open passdb database.
[2003/07/30 16:48:14, 1] smbd/password.c:pass_check_smb(546)
   Couldn't find user 'peteman' in passdb.
[2003/07/30 16:48:14, 2] smbd/reply.c:reply_sesssetup_and_X(970)
   NT Password did not match for user 'peteman'!
[2003/07/30 16:48:14, 2] smbd/reply.c:reply_sesssetup_and_X(980)
   Defaulting to Lanman password for peteman
[2003/07/30 16:48:14, 0] passdb/pdb_smbpasswd.c:startsmbfilepwent(171)
   startsmbfilepwent_internal: unable to open file 
/export/system/solaris-sparc/pkg/samba/samba-2.2.2/private/smbpasswd. 
Error was No such file or directory
[2003/07/30 16:48:14, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1368)
   unable to open passdb database.
[2003/07/30 16:48:14, 1] smbd/password.c:pass_check_smb(546)
   Couldn't find user 'peteman' in passdb.
[2003/07/30 16:48:14, 1] smbd/reply.c:reply_sesssetup_and_X(995)
   Rejecting user 'peteman': authentication failed
[2003/07/30 16:48:14, 2] smbd/server.c:exit_server(458)
   Closing connections

the PDC zeus lists the following error message:
The session setup from the computer SPORADICS failed to authenticate. 
The name of the account referenced in the security database is 
SPORADICS$.  The following error occurred:
Access is denied.

Which implies that the smbpasswd -j olympus never worked right.
Does anyone have any idea whats going on here? any help would be greatly 
apreciated.  Thanks in advance, the entire UNM math department.





More information about the samba mailing list