WG: [Samba] Re: sambaAcctFlags automatically DUX when logon

Marian Chowanetz mchowanetz at emmixx.de
Wed Jul 14 08:53:34 GMT 2004



-----Ursprungliche Nachricht-----
Von: Marian Chowanetz [mailto:mchowanetz at emmixx.de]
Gesendet: Mittwoch, 14. Juli 2004 10:24
An: 'Jim C.'
Betreff: AW: [Samba] Re: sambaAcctFlags automatically DUX when logon


thanks for your help, jim.

I'd already tried the re-joining with my test-machine. It didn't help.

I found out that the idxldapaccounts-tool does not correctly change the
UX/DUX flag.
the smbldap-tool solved this problem (but not all problems). When I changed
the flag with
	"# smbldap-usermod -J <username>"
I could logon successfully.

The other problem that new users cannot logon I couldn't solve. Well, at
least I have new messages from the w2k system. I created a user as follows:
# smbldap-useradd -a -m nutzer14
# smbldap-passwd nutzer14
# smbldap-usershow nutzer14
Everything seems okay. I have UX, I have no "0" in sambaPwdLastSet.
But when I try to logon at the w2k I get this strange message (I can't find
the exact english massage):
	you cannot logged on because of the following: an attached device doesn't
work properly

(exactly in german: Sie konnen aufgrund folgendes Fehlers nicht angemeldet
werden: Ein an das System angeschlossenes Gerat funktioniert nicht...)
The flag is still UX but no way in for the user.

The reason for this could be that I changed the samba-SID to solve the
former problem. If a user has an old samba-SID and an old PrimaryGroupSID,
like the "old" users, the user can login. If the user has a new samba-SID
and an old promaryGroupSID then he gets this strange message.
I'm confused.

any help would be appriciated

marian



-----Ursprungliche Nachricht-----
Von: samba-bounces+mchowanetz=emmixx.de at lists.samba.org
[mailto:samba-bounces+mchowanetz=emmixx.de at lists.samba.org]Im Auftrag
von Jim C.
Gesendet: Freitag, 9. Juli 2004 20:40
An: samba at lists.samba.org
Betreff: [Samba] Re: sambaAcctFlags automatically DUX when logon


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Problem is on one machine or all machines?
Tried leaveing domain, deleteing machine account, resetting flags and
then re-joinging?

| as I wrote yesterday I've set up a samba3.0.3 as pdc for my w2k-domain
with
| ldapsam-backend
| (cyrus-sasl, heimdal) on suse9.0.
| everything worked fine. but yesterday the /dev/sda1 (/homes; xfs file
| system) crashed, when I created a new user with smbldap-useradd. I could
| repair the xfs file system and everything seemed fine.
|
| to test the system I've created a new user. but the new user cannot logon.
| 	"error: The system could not log you on..."
|
| I found that the new created user get now by default a sambaAcctFlags DUX
| not UX. when I change the flag to UX and try to logon the flag
automatically
| switches to DUX. so I cannot logon.
|
| How can I solve this problem? only old users can logon.
|
| thanks
| marian
|


- --

- -----------------------------------------------------------------
| I can be reached on the following Instant Messenger services: |
|---------------------------------------------------------------|
| MSN: j_c_llings at hotmail.com  AIM: WyteLi0n  ICQ: 123291844 	|
|---------------------------------------------------------------|
| Y!: j_c_llings               Jabber: jcllings at njs.netlab.cz	|
- -----------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3-nr1 (Windows XP)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFA7uaY57L0B7uXm9oRAjeqAJ9AzvFuh67h3mXUcnV1zDFu9c9JdwCfcP4J
jllPbrUTYehG3Mwfdnzn4ko=
=9w8j
-----END PGP SIGNATURE-----

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba




More information about the samba mailing list