[Samba] security = ADS

[Rashaad S. Hyndman]

That seems to be an interesting concept but does work in this case for some
reason.  Here is what i did:


C:\Documents and Settings\rshyndman>net use * \\10.55.222.82\public\
System error 67 has occurred.

The network name cannot be found.


C:\Documents and Settings\rshyndman>ping 10.55.222.82

Pinging 10.55.222.82 with 32 bytes of data:

Reply from 10.55.222.82: bytes=32 time<10ms TTL=64
Reply from 10.55.222.82: bytes=32 time<10ms TTL=64

Interesting thing here is that is says name not found but i can ping both by
name and ip. You think mapping name to ip in the hosts file will help?  Hmmm
:-(

----- Original Message ----- 
From: "Tom Skeren" <tms3 at fskklaw.com>
To: "Rashaad S. Hyndman" <IslandBwoy at ToughGuy.net>
Cc: <samba at lists.samba.org>
Sent: Thursday, July 22, 2004 4:07 PM
Subject: Re: [Samba] security = ADS


> Yes I've seen this behavior a LOT.  I've replied to it.  For some
> reason, the Samba when joined to ads needs to contacted for shares by IP
> addy.  The XP shares then authenticate properly.
>
> Try \\ipaddy-samba-server\share-name.  If you connect, do a netstat -an
> on the samba server.  You'll see the XP box connected to port 445.  I
> suspect that in an ads environment, the XP boxes default to connecting
> to shares on 445.  I suspect smbd, or nmbd are mishandling this when
> netbios names are used.
>
> Rashaad S. Hyndman wrote:
>
> >Hi all,
> >
> >I've been fighting with joining my samba server (debian) to my active
directory domain for 4 days now.  The problem here is that users in my
active directory domain on windows machines are not able to browse my samba
shares without being prompted for authentication.
> >
> >I can:
> >- Join the domain from samba server using net ads
> >- View list of tickets when brownsing window shares with klist
> >- list window shares without being prompted with "smbclient -k -L
<windows_servername>
> >
> >I can NOT:
> >- use "net use * \\<smb_servername>\share" from window based machine.
> >(this resultes in "The password or user name is invalid for
\\delshare\public" (delshare being my samba server name)
> >
> >I have no clue what to do from here. I've looked over my smb.conf file 20
times likewise my krb5.conf file
> >
> >Any suggestions would be greatly appreciated. I've arn out of tests.
> >
> >R.
> >
> >
>
>
>