RES: RES: [Samba] Re: Winbind broken after 2.2.8 upgrade

FRANCO facatena at surson.com.br
Thu Mar 27 22:46:49 GMT 2003


I did it more then 12 times...

I have a lot of problems with winbind and NEVER I did receive a answer...
Sorry if I have a poore english:

I hve 3 installations with problems... I never saw this I think that Im not
a god SAMBA Administrator but I did read all the doc.... I dont have any
troubles with other soft, but with samba ehehehehehe

I did send e-mails to the lis in :

11/3. 12/3, 16/3, 18/3, 19, 20, 25, 27 with the same questions.... If you
want, please check it and will see if Im joking... Im 42 years old.



FIRST INSTALATION:

Can yoiu help m?

[root at firewall /etc]# smbpasswd -j surson -r cleo -U Administrator
Password:
Joined domain SURSON.
[root at firewall /etc]#


[root at firewall /etc]# smbclient //firewall/PUBLICO -UAdministrator added
interface ip=192.168.1.1 bcast=192.168.1.255 nmask=255.255.255.0 Got a
positive name query response from 192.168.1.2 ( 192.168.1.1 )
Password:
session setup failed: NT_STATUS_LOGON_FAILURE

When I try \\firewall\PUBLICO in the NT I receive a BOX to type USER and
PASSWD

Joe log.cleo

[2003/03/25 04:38:27, 0]
smbd/password.c:connect_to_domain_password_server(1307)
  connect_to_domain_password_server: machine CLEO rejected the tconX on the
IPC$ share. Error was : NT_STATUS_ACCESS_DENIED. [2003/03/25 04:38:27, 0]
smbd/password.c:domain_client_validate(1554)
  domain_client_validate: Domain password server not available. [2003/03/25
04:38:27, 1] smbd/password.c:pass_check_smb(555)
  Couldn't find user 'surson+administrator' in passdb. [2003/03/25 04:38:27,
1] smbd/password.c:pass_check_smb(555)
  Couldn't find user 'surson+administrator' in passdb. [2003/03/25 04:38:27,
1] smbd/reply.c:reply_sesssetup_and_X(988)
  Rejecting user 'surson+administrator': authentication failed [2003/03/25
04:38:27, 0] smbd/password.c:connect_to_domain_password_server(1307)
  connect_to_domain_password_server: machine CLEO rejected the tconX on the
IPC$ share. Error was : NT_STATUS_ACCESS_DENIED. [2003/03/25 04:38:27, 0]
smbd/password.c:domain_client_validate(1554)
  domain_client_validate: Domain password server not available.


Joe.firewall

    IW   log.firewall
Row 1    Col 1    4:57    F1 for help
[2003/03/25 04:37:32, 0]
smbd/password.c:connect_to_domain_password_server(1307)
  connect_to_domain_password_server: machine CLEO rejected the tconX on the
IPC$ share. Error was : NT_STATUS_ACCESS_DENIED. [2003/03/25 04:37:32, 0]
smbd/password.c:domain_client_validate(1554)
  domain_client_validate: Domain password server not available. [2003/03/25
04:37:32, 1] smbd/password.c:pass_check_smb(555)
  Couldn't find user 'surson+administrator' in passdb. [2003/03/25 04:37:32,
1] smbd/password.c:pass_check_smb(555)
  Couldn't find user 'surson+administrator' in passdb. [2003/03/25 04:37:32,
1] smbd/reply.c:reply_sesssetup_and_X(988)
  Rejecting user 'surson+administrator': authentication failed

Etc/smbusers

# Unix_name = SMB_name1 SMB_name2 ...
root = administrator admin
nobody = guest pcguest smbguest

Etc/smbpasswd

root:0:CHANGED BY MEeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee:[UX
]:LCT-3E7AEA06:
Administrator:1CHANGED BY
MEeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee:[UX
]:LCT-3E7FED90:
catena:500:CHANGED BY
MEeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeeee:[UX         ]:LCT-3



Etc/passwd

Administrator:x:10032:10033::/home/Administrator:/dev/null
danilo:x:10033:10033::/home/danilo:/dev/null

Etc/pwdb.conf

#
# This is the configuration file for the pwdb library
#

user:
        unix+shadow
        nis+unix+shadow

group:
        unix+shadow
        nis+unix+shadow



etc/Pam.d/samba 

auth   required        /lib/security/pam_unix.so nullok shadow
account        required        /lib/security/pam_unix.so

#auth    required        /lib/security/pam_securetty.so
#auth    required        /lib/security/pam_nologin.so
#auth    sufficient      /lib/security/pam_winbind.so
#auth    required        /lib/security/pam_pwdb.so use_first_pass shadow
#account required        /lib/security/pam_winbind.so





SMB.conf
[global]
        workgroup = SURSON
        server string = Server FIREWALL usando  Samba
        interfaces = 192.168.1.1/24
        bind interfaces only = Yes
        security = DOMAIN
        encrypt passwords = Yes
        password server = cleo
        password level = 8
        username level = 8
        log level = 1
        log file = /var/log/samba/log.%m
        max log size = 50
        name resolve order = wins hosts lmhosts bcast
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        os level = 0
        preferred master = False
        local master = No
        domain master = False
        wins server = 192.168.1.2
        winbind uid = 10000-20000
        winbind gid = 10000-20000
        template homedir = /home/winnt/%D/%U
        template shell = /bin/bash
        winbind separator = +
        winbind cache time = 10
        hosts allow = 192.168.1. 192.168.2. 127.
        printing = lprng

[homes]
        comment = Home Directories
        valid users = %S
        admin users = root,Administrator,catena
        read only = No
        create mask = 0664
        directory mask = 0775
        strict allocate = Yes
        strict locking = Yes
[printers]
        comment = All Printers
        path = /var/spool/samba
        guest ok = Yes
        printable = Yes
        browseable = No

[netlogon]
        comment = Network Logon Service
        path = /var/spool/samba/netlogon
        write list = root

[Profiles]
        path = /var/spool/samba/profiles
        read only = No

[PUBLICO]
        comment = Diretorio Publico
        path = /home/samba
        guest ok = Yes

[pchome]
        comment = PC Directories
        path = /usr/pc/%u
        read only = No


SECOND Instalation:
Why this conf dont work?

A WIN95 machine list the shares but 98/win2k not


[root at linus init.d]# smbclient -L //linus U%
added interface ip=200.168.58.231 bcast=200.168.58.255 nmask=255.255.255.192
added interface ip=192.168.4.1 bcast=192.168.4.255 nmask=255.255.255.0
wins_srv_died(): Could not mark WINS server 127.0.0.1 down. Address not
found in server list. session request to LINUS failed (Not listening for
calling name)
wins_srv_died(): Could not mark WINS server 127.0.0.1 down. Address not
found in server list. session request to *SMBSERVER failed (Not listening
for calling name) [root at linus init.d]#




# Global parameters
[global]
    workgroup = ADVOCACIA
    netbios name = LINUS
    server string = Samba Server
    security = share
    encrypt passwords = yes
    log file = /var/log/samba/log.%m
    max log size = 50
    name resolve order = wins hosts
    socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
    logon path = \\%N\profiles\%u
    logon home = \\LINUS\%u
    os level = 64
    preferred master = yes
    local master = No
    domain master = no
    dns proxy = No
    wins support = yes
    printing = lprng
    unix password sync = no
    map to guest = never
    password level = 0
    null passwords = no
    dead time = 0
    debug level = 0
    load printers = yes
    domain logons = no
    allow hosts = 192.168.4.0/ 255.255.255.0, 127.0.0.1

[netlogon]
    path = /usr/local/samba/lib/netlogon
    browseable = No
    available = yes

[homes]
    comment = Home Directories
    read only = No
    browseable = no
    available = yes
    public = no
    writable = no
    only user = no

[printers]
    comment = All Printers
    path = /var/spool/samba
    printable = Yes
    browseable = No

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.465 / Virus Database: 263 - Release Date: 25/3/2003
 

Franco Catena
http://www.surson.com.br
tel 011-44374040
cel:78535362
NEXTEL: 55*26006*1
MSN: facdavilla at hotmail.com
ICQ: 24755602



-----Mensagem original-----
De: Andrew Bartlett [mailto:abartlet at samba.org] 
Enviada em: quinta-feira, 27 de março de 2003 18:37
Para: FRANCO
Cc: 'Andrew Bartlett'
Assunto: Re: RES: [Samba] Re: Winbind broken after 2.2.8 upgrade


On Thu, 2003-03-27 at 22:21, FRANCO wrote:
> Hi,
> 
> 
> I did send to you many e-mails where a show you manuy problems without 
> any response from you
> 
> WHY?

You should send such e-mails to the list.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.465 / Virus Database: 263 - Release Date: 25/3/2003
 



More information about the samba mailing list