[Samba] Difficulties with samba and ADS

[Chris]

This is worse than I thought...

It isn't happening once every month or so, it is now happening like once every 
90 seconds!

Not only is it giving me a problem with smbmount and smbclient, but with DAVE 
mounts on the mac machines!

I am not getting any errors in the log files... I am getting desperate here.

Can someone please help?


Chris

On Tuesday 06 July 2004 12:30 pm, Chris wrote:
> Hello.
>
> I thought I had this fixed 3 times now... but it keeps coming up.  I have 2
> smbservers that are part of an ADS domain (windows 2003 server).
>
> I have my samba servers set up, and it works great for a month or so, then
> it starts giving smbmount and smbclient a hard time.  This is very bad news
> because I rely upon smbmount heavily.
>
> When I try to view the shares my main server, and use the correct password
> for user chris:
>
>  # smbclient -L smbserver -U chris -W domainname
> Password:
> session setup failed: NT_STATUS_NO_LOGON_SERVERS
>
> When I try to view the shares on my main server with no password for user
> chris:
> # smbclient -L smbserver -U chris -W domainname
> Password:
> Anonymous login successful
> Domain=[DOMAINNAME] OS=[Unix] Server=[Samba 3.0.4]
>
>         Sharename      Type      Comment
>         ---------      ----      -------
>         print$         Disk      Windows Printer Drivers
>         accthp8150     Printer
>         genadmhp4si    Printer
>         DOMAINNAME_tmp       Disk
>         IPC$           IPC       IPC Service (SMBSERVER)
>         ADMIN$         IPC       IPC Service (SMBSERVER)
> Anonymous login successful
> Domain=[DOMAINNAME] OS=[Unix] Server=[Samba 3.0.4]
>
>         Server               Comment
>         ---------            -------
>         SMBSERVER     SMBSERVER
>         DOMAINSERVER
>
>         Workgroup            Master
>         ---------            -------
>         DOMAINNAME      DOMAINSERVER
>
>
> When I try an smbmount with correct password:
>
> # smbmount //smbserver/chris /mnt/misc -o
> username=chris,workgroup=domainname Password:
> 23598: session setup failed: ERRDOS - 2215
> SMB connection failed
>
> When I try a smbmount with no passwd:
>
> # smbmount //smbserver/chris /mnt/misc -o
> username=chris,workgroup=domainname Password:
> Anonymous login successful
> 23599: tree connect failed: ERRDOS - ERRnoaccess (Access denied.)
> SMB connection failed
>
> Smbmount works just fine on windows machines on the domain, and my old
> 2.0.7 samba servers on the old NT domain (which I am trying to migrate
> from).
>
> I have read the documents, scoured the internet and bought a book on the
> subject, and I just can't see what I am doing wrong here!  Can someone
> please give me a hand?  I am thinking it is a kerberos thing... but I
> cannot be certain.
>
> I include my smb.conf at the bottom of this post.
>
> Thank you very much!
>
>
> Chris
>
>
> ============smb.conf===================================
> [global]
>         netbios name = SMBSERVER
>         socket options = TCP_NODELAY SO_RCVBUF=16384 SO_SNDBUF=16384
>         dns proxy = no
>         realm = DOMAINNAME.INT
>         workgroup = DOMAINNAME
>         netbios aliases = SMBSERVER
>         server string = SMBSERVER
>         security = ADS
>         wins proxy = no
>         map to guest = Bad User
>         password server = domainserver.domainname.int
>         name resolve order = lmhosts wins bcast
>         time server = Yes
>         os level = 0
>         preferred master = No
>         local master = No
>         domain master = No
>         wins server = 208.226.104.10
>         hosts allow = 127.0.0.1, 208.226.104.
>         oplocks = No
>         follow symlinks = No
>         printing = cups
>         printcap name = CUPS
>         load printers = yes
>
> [print$]
>         comment = Windows Printer Drivers
>         path = /var/lib/samba/printers
>         browseable = yes
>         read only = yes
>         guest ok = yes
>         write list = @ntadmin,root,administrator
>
> [homes]
>         path = %H/sam
>         valid users = +%U, %U
>         write list = +%U
>         force user = %U
>         force group = %U
>         read only = No
>         create mask = 0660
>         directory mask = 0770
>         browseable = No
>
> [DOMAINNAME_tmp]
>         path = /DOMAINNAME_tmp
>         admin users = chrisd, kurtk, administrator
>         force user = %U
>         force group = %G
>         read only = No
>         create mask = 0666
>         directory mask = 0777
>         guest ok = Yes