[Samba] win bind authentication

[Tod B. Schmidt]

I can ping the winbindd and I have tried both with and without the password
server set.

-Tod

-----Original Message-----
From: Chere Zhou [mailto:qzhou at isilon.com]
Sent: Wednesday, June 11, 2003 2:42 PM
To: tschmidt at tnc.org; samba at lists.samba.org
Subject: Re: [Samba] win bind authentication


Is "wbinfo -p" fine? if not, restart winbindd.  If still not, try put
"password server = pdc-name" into your smb.conf and restart again.

On Wednesday 11 June 2003 11:09 am, Tod B. Schmidt wrote:
> Yes, I can do kinit and then log into my win2k machines with smbclient
> fine, but cannot log into my samba accounts from my win2k box.
>
> I think the fact that winbind -t fails is significant, but I can join the
> domain fine, so I am not sure what is happening here.
>
> [root at maildev etc]# net join
> [2003/06/11 14:01:38, 0] libads/ldap.c:ads_join_realm(1352)
>   Host account for maildev already exists - deleting old account
> Joined 'MAILDEV' to realm 'TNCTEST.ORG'
>
> [root at maildev etc]# wbinfo -t
> checking the trust secret via RPC calls failed
> error code was NT_STATUS_UNSUCCESSFUL (0xc0000001)
> Could not check secret
>
> Also, when I list wbinfo -u or getent passwd I get entries that start with
> TNCTEST and not TNCTEST.ORG, not sure if that is important. Kerberos will
> not authenticate against the realm TNCTEST so I think it has to be
> TNCTEST.ORG
>
> Thanks,
> Tod Schmidt
>
>
> -----Original Message-----
> From: Brandon Lederer [mailto:brandonl at hms4emc.com]
> Sent: Wednesday, June 11, 2003 1:41 PM
> To: 'tschmidt at tnc.org'; samba at lists.samba.org
> Subject: RE: [Samba] win bind authentication
>
>
> You guys got the encryption on?
>
> -----Original Message-----
> From: Tod B. Schmidt [mailto:tschmidt at tnc.org]
> Sent: Wednesday, June 11, 2003 12:38 PM
> To: samba at lists.samba.org
> Subject: Re: [Samba] winbind authentication
>
>
>
>
> I am getting this same error when trying to authenticate. Very frustrating
> because everything else works, wbinfo, getent. I can login to Win2K server
> wth kerberos, but I always see NT_STATUS_NO_LOGON_SERVERS  when trying to
> authenticate.
>
> [root at maildev etc]# wbinfo -a user+password
> plaintext password authentication failed
> error code was NT_STATUS_NO_LOGON_SERVERS (0xc000005e)
> error messsage was: No logon servers
> Could not authenticate user user+password with plaintext password
> challenge/response password authentication failed
> error code was NT_STATUS_NO_LOGON_SERVERS (0xc000005e)
> error messsage was: No logon servers
> Could not authenticate user user+password with challenge/response
>
> The only other thing that fails is wbinfo -t
>
> [root at maildev etc]# wbinfo -t
> checking the trust secret via RPC calls failed
> error code was NT_STATUS_UNSUCCESSFUL (0xc0000001)
> Could not check secret
>
> I have joined the computer to the domain but am just beating my head
> against this issue.
>
> Any thoughts out there?
>
> TIA,
> T Schmidt
>
> >>I am having the same issue. I am running Samba 3 Alpha 24 trying to
>
> connect to a W2K3 Server with AD. If I getent or chown I can see all my
>
> >>domain users, but sshd, login, etc (PAM apps) cant see the accounts.
When
>
> I try to login to the console as a AD user or SSH I get the following >>in
> /var/log/messages Jun 2 20:38:58 gonzo pam_winbind[1900]: request failed:
> No logon servers, PAM error was 4, NT error was
>
> >>NT_STATUS_NO_LOGON_SERVERS The issue is when I do wbinfo I can see
>
> everything.... My config is as follows: [global]