[Samba] WinXP/2k can't connect to Linux ADS member

[Fernando Ruza]

Hi all,

Regarding the problem I described in the mail attached bellow, I've
found that when I'm trying to access a share in my linux box from Win2k
or WinXP using the IP address of my linux box it works great, however
using the netbios name it doesn't work:

===========================
C:\>net use * \\HSERINT1\fruza
The password or name of the user it's not valid for \\HSERINT1\fruza.

Write the password for \\HSERINT1\fruza:
Sytem error 5.

Access denyed.

C:\>net use * \\10.36.192.17\fruza
The unit F: is connected to \\10.36.192.17\fruza.

The command has completed succesfully.

C:\>
===========================

In the samba log file I have the following error when I try to connect
using the netbios name:

[2003/11/18 14:01:49, 1] smbd/sesssetup.c:reply_spnego_kerberos(172)
  Failed to verify incoming ticket!

Winbind, getent, wbinfo, joining ads, kinit, klist everything works. My
smb.conf file is:

# Global parameters
[global]
	workgroup = HGUV
	realm = HGUV.LOCAL
	server string = %h server (Samba %v)
	security = ADS
	password server = 10.36.192.24
	log file = /var/log/samba/%m.log
	max log size = 0
	socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
	dns proxy = No
	idmap uid = 10000-20000
	idmap gid = 10000-20000
	winbind separator = +
	printing = lprng

[homes]
	comment = Home Directories
	path = /home/%U
	valid users = %D+%U
	read only = No
	create mask = 0664
	directory mask = 0775
	browseable = No

[printers]
	comment = All Printers
	path = /var/spool/samba
	printable = Yes
	browseable = No

[tmp]
	comment = Temporary file space
	path = /tmp
	force user = inform
	force group = inform
	read only = No
	guest ok = Yes

[Intranet]
	comment = DocumentRoot del servidor web de la intranet del HGUV
	path = /var/www
	force user = inform
	force group = inform
	read only = No
	create mask = 0777
	directory mask = 0777
	guest ok = Yes


Thanks in advance for any reply. Regards,

Fernando.


El lun, 27 de 10 de 2003 a las 12:53, Fernando Ruza escribió:
> Hi,
>
> I have a linux box configured with samba-3.0.1pre1-1 joined to my Win2k
> ADS domain.  I can succesfully use kinit and smbclient -k without
> entering a user/pass to connect to things on my network. Winbind,
> getent, wbinfo, ... everything works great however, from WinXP and Win2k
> client  hosts I cannot connect to my linux shares. From Win95/98 clients
> works great.
>
> Always that I connect from WinXP and Win2k hosts to the Linux shares it
> asks me for username/password authentication and none works. The error I
> get from WinXP, Win2k hosts is ALWAYS:
>
> [2003/09/29 11:09:57, 1] smbd/sesssetup.c:reply_spnego_kerberos(218)
>    Username <host.I'm.connecting.from>$ is invalid on this system
>
> No other errors.  I've tried setting client use spnego = no with no
> luck.
>
> This is very strange. I don't know what to do and where to see know. Any
> suggestions will be very apprecicate?
>
> Thanks in advance,
>
> Fernando.
>
>
> --
> Yo uso software libre, ¿Y tu?
> ¿Qué es el software libre? consulta: http://www.gnu.org/philosophy/free-sw.es.html
>
> Fernando Ruza
> e-mail: feruza at terra.es
> web: http://guada24.guadawireless.net
> Tlf: 661123845
> Yahoo! Messenger id: fruza
> Linux user: #273644 (http://counter.li.org)
> Debian Sid (Kernel 2.4.20 & ext3)
>
> "In an internet without fences ... who needs 'gates'"
--
Yo uso software libre, ¿Y tu?
¿Qué es el software libre? consulta: http://www.gnu.org/philosophy/free-sw.es.html

Fernando Ruza
e-mail: feruza at terra.es
web: http://guada24.guadawireless.net
Tlf: 661123845
Yahoo! Messenger id: fruza
Linux user: #273644 (http://counter.li.org)
Debian Sid (Kernel 2.4.20 & ext3)

"In an internet without fences ... who needs 'gates'"