[Samba] Query on Authentication with ADS

[Venkatesh Subramaniam]

Hi,

I am using Samba 3.0.5 version on Debian. Here is my requirement.

User authentication should happen from my win2k ADS server.  I configured 
as per help but I am not successful during authentication.
I am able to get wbinfo -u , wbinfo -g & wbinfo -t commands successfully.

Here is my configuration.

[global]
        workgroup = SOLUTIAINVENT
        server string = %L
        security = DOMAIN
        obey pam restrictions = Yes
        password server = prasaddr
        passdb backend = tdbsam, guest
        passwd program = /usr/bin/passwd %u
        passwd chat = *Enter\snew\sUNIX\spassword:* %n\n 
*Retype\snew\sUNIX\spassword:* %n\n .
        log level = 4
        syslog = 0
        log file = /var/log/samba/log.%m
        max log size = 1000
        name resolve order = bcast lmhosts host wins
        hostname lookups = Yes
        dns proxy = No
        panic action = /usr/share/samba/panic-action %d
        idmap uid = 15000-20000
        idmap gid = 15000-20000
        template shell = /bin/bash
        winbind cache time = 5
        invalid users = root

[homes]
        comment = Home Directories
        read only = No
        create mask = 0700
        directory mask = 0700
        browseable = No

Error Mesage:

push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2004/09/09 11:36:34, 3] smbd/uid.c:push_conn_ctx(351)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2004/09/09 11:36:34, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2004/09/09 11:36:34, 4] auth/pampass.c:smb_pam_start(459)
  smb_pam_start: PAM: Init user: SOLUTIAINVENT\Administrator
[2004/09/09 11:36:34, 1] lib/util_sock.c:get_peer_name(937)
  Gethostbyaddr failed for 192.168.2.221
[2004/09/09 11:36:34, 4] auth/pampass.c:smb_pam_start(476)
  smb_pam_start: PAM: setting rhost to: 192.168.2.221
[2004/09/09 11:36:34, 4] auth/pampass.c:smb_pam_start(485)
  smb_pam_start: PAM: setting tty
[2004/09/09 11:36:34, 4] auth/pampass.c:smb_pam_start(493)
  smb_pam_start: PAM: Init passed for user: SOLUTIAINVENT\Administrator
[2004/09/09 11:36:34, 4] auth/pampass.c:smb_pam_account(551)
  smb_pam_account: PAM: Account Management for User: 
SOLUTIAINVENT\Administrator
[2004/09/09 11:36:34, 0] auth/pampass.c:smb_pam_account(573)
  smb_pam_account: PAM: UNKNOWN PAM ERROR (9) during Account Management 
for User: SOLUTIAINVENT\Administrator
[2004/09/09 11:36:34, 2] auth/pampass.c:smb_pam_error_handler(73)
  smb_pam_error_handler: PAM: Account Check Failed : Authentication 
service cannot retrieve authentication info.
[2004/09/09 11:36:34, 0] auth/pampass.c:smb_pam_accountcheck(781)
  smb_pam_accountcheck: PAM: Account Validation Failed - Rejecting User 
SOLUTIAINVENT\Administrator!
[2004/09/09 11:36:34, 4] auth/pampass.c:smb_pam_end(440)
  smb_pam_end: PAM: PAM_END OK.
[2004/09/09 11:36:34, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/09/09 11:36:34, 3] auth/auth.c:check_ntlm_password(295)
  check_ntlm_password:  PAM Account for user [SOLUTIAINVENT\Administrator] 
FAILED with error NT_STATUS_LOGON_FAILURE
[2004/09/09 11:36:34, 2] auth/auth.c:check_ntlm_password(312)
  check_ntlm_password:  Authentication for user [Administrator] -> 
[Administrator] FAILED with error NT_STATUS_LOGON_FAILURE
[2004/09/09 11:36:34, 3] smbd/process.c:timeout_processing(1104)
  timeout_processing: End of file from client (client has disconnected).
[2004/09/09 11:36:34, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2004/09/09 11:36:34, 2] smbd/server.c:exit_server(568)

Any help is highly appreciated.

--
Venkat
+65 9855 1209