[Samba] security=domain problem: "could not fetch trust account password for domain"

Reedick, Andrew JAReedick at Z-TEL.com
Thu Oct 23 17:41:05 GMT 2003


When configuring a SunOS 5.9 box running Samba 2.2.8a with security=domain,
as per
http://us2.samba.org/samba/docs/using_samba/ch04.html#samba2-CHP-4-SECT-7 I
get the following error "could not fetch trust account password for domain"
when trying to connect to a share via 'net use * \\server\share
/user:domain\username'

However, 'security=user' works correctly.  'security=domain' will fall back
onto the user's smbpasswd successfully.  I'm configuring the box to be a
domain member, not a PDC.  We do not have WINS setup on the box.


A sample error log entry is:
[2003/10/23 12:22:07, 0] smbd/password.c:domain_client_validate(1558)
  domain_client_validate: could not fetch trust account password for domain
TESTINSTALL.COM


smb.conf is:

[global]
      server string         = Samba %v on %h
      log level             = 2
      log file              = /usr/local/samba/var/log.%m.%U
      max log size          = 1024
      browsable             = yes
      getwd cache           = yes
      workgroup             = TESTINSTALL.COM
      netbios name          = MYSERVER
      encrypt passwords     = yes
      os level              = 0
      domain master         = no
      local master          = no
      preferred master      = no
      security              = domain
      username map          = /usr/local/samba/lib/username.map
      password server       = dc dc.testinstall.com
      oplocks               = false
      level2 oplocks        = false
      kernel oplocks        = false
#      socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE
SO_RCVBUF=8192 SO_SNDBUF=8192

[vobs]
 path = /vobs
 writable = true
 case sensitive = false
 preserve case = true
 force group = vobuser
 comment = ClearCase VOB(s)
 browsable = yes
 public = yes
 create mask = 0775
 directory mask = 0775






More information about the samba mailing list