[Samba] Re: 0xc0000022 error / winbind

[leopardb]

Gerald (Jerry) Carter wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> leopardb wrote:
>
> | I run linux mandrake 9.2 on a NT2K domain with a
> | win2k server (in native  mode) I've installed samba 2.2.8 on
> | the linux box with winbind. I've followed
> | the samba howtos (joined the domain etc...) and
> | everything's running  fine except that :
> |
> | wbinfo -t
> | Secret is good
> |
> | wbinfo -u
> | 0xc0000022
> |
> | wbinfo -g
> | 0xc0000022
>
> ~From include/nterr.h:
>
> ~  #define NT_STATUS_ACCESS_DENIED NT_STATUS(0xC0000000 | 0x0022)
>
> You need to use --set-auth-user option to wbinfo (or -A in 2.2).
>
>
>
>
> - --
> cheers, jerry
> - ----------------------------------------------------------------------
> Hewlett-Packard            ------------------------- http://www.hp.com
> SAMBA Team                 ---------------------- http://www.samba.org
> GnuPG Key                  ---- http://www.plainjoe.org/gpg_public.asc
> "If we're adding to the noise, turn off this song" --Switchfoot (2003)
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.1 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iD8DBQE/vNvOIR7qMdg1EfYRArz6AKClkTMLGlqhGBqCg/fnMJ0hebWgyACeLfkP
> kplMOoXA6cAlpGf65ly9Ahw=
> =u2He
> -----END PGP SIGNATURE-----
>
Hello !

Thanks a lot for your help : i used the -A option and now wbinfo -u and 
-g work beautifully !

But when i try to connect to the /home share on my linux box from the 
win2k machine named mc-coy,
1) the file /var/log/samba/log.mc-coy is incremented with :
passdb/pampass.c:smb_pam_error_handler(71)
smb_pam_error_handler: PAM: session setup failed : Permission denied
2) a box asking for password appears and each time i enter a good 
password, 1) re-occurs

Is there something to change in /etc/pam.d/* ? /etc/samba/smb.conf ? of 
course if any file might help you to help me, i'd be glad and thankful 
to provide it. (i just don't want to fill this post with lots of file 
dumps without a good reason to)

Btw, even when i cannot get the authentication right, the home folder 
has been automatically created for the user i tried. So it works to an 
extent.

Again, thanks for your help !