[Samba] win bind authentication

[Tod B. Schmidt]

Yes, I can do kinit and then log into my win2k machines with smbclient fine,
but cannot log into my samba accounts from my win2k box.

I think the fact that winbind -t fails is significant, but I can join the
domain fine, so I am not sure what is happening here.

[root at maildev etc]# net join
[2003/06/11 14:01:38, 0] libads/ldap.c:ads_join_realm(1352)
  Host account for maildev already exists - deleting old account
Joined 'MAILDEV' to realm 'TNCTEST.ORG'

[root at maildev etc]# wbinfo -t
checking the trust secret via RPC calls failed
error code was NT_STATUS_UNSUCCESSFUL (0xc0000001)
Could not check secret

Also, when I list wbinfo -u or getent passwd I get entries that start with
TNCTEST and not TNCTEST.ORG, not sure if that is important. Kerberos will
not authenticate against the realm TNCTEST so I think it has to be
TNCTEST.ORG

Thanks,
Tod Schmidt


-----Original Message-----
From: Brandon Lederer [mailto:brandonl at hms4emc.com]
Sent: Wednesday, June 11, 2003 1:41 PM
To: 'tschmidt at tnc.org'; samba at lists.samba.org
Subject: RE: [Samba] win bind authentication


You guys got the encryption on?

-----Original Message-----
From: Tod B. Schmidt [mailto:tschmidt at tnc.org]
Sent: Wednesday, June 11, 2003 12:38 PM
To: samba at lists.samba.org
Subject: Re: [Samba] winbind authentication




I am getting this same error when trying to authenticate. Very frustrating
because everything else works, wbinfo, getent. I can login to Win2K server
wth kerberos, but I always see NT_STATUS_NO_LOGON_SERVERS  when trying to
authenticate.

[root at maildev etc]# wbinfo -a user+password
plaintext password authentication failed
error code was NT_STATUS_NO_LOGON_SERVERS (0xc000005e)
error messsage was: No logon servers
Could not authenticate user user+password with plaintext password
challenge/response password authentication failed
error code was NT_STATUS_NO_LOGON_SERVERS (0xc000005e)
error messsage was: No logon servers
Could not authenticate user user+password with challenge/response

The only other thing that fails is wbinfo -t

[root at maildev etc]# wbinfo -t
checking the trust secret via RPC calls failed
error code was NT_STATUS_UNSUCCESSFUL (0xc0000001)
Could not check secret

I have joined the computer to the domain but am just beating my head against
this issue.

Any thoughts out there?

TIA,
T Schmidt

>>I am having the same issue. I am running Samba 3 Alpha 24 trying to
connect to a W2K3 Server with AD. If I getent or chown I can see all my
>>domain users, but sshd, login, etc (PAM apps) cant see the accounts. When
I try to login to the console as a AD user or SSH I get the following >>in
/var/log/messages Jun 2 20:38:58 gonzo pam_winbind[1900]: request failed: No
logon servers, PAM error was 4, NT error was
>>NT_STATUS_NO_LOGON_SERVERS The issue is when I do wbinfo I can see
everything.... My config is as follows: [global]