[Samba] Share Connection Failure

[Eric Hines]

I'm at my wit's end on this, and I hope someone can help.

I'm running SUSE Pro 9.3 with Samba 3.0.13, and I can't get connected to my 
shares properly.  Valid users (e.g., for [accounts]) is set to %G, and I've 
confirmed that the users are members of the owning groups for the shares 
and that they are in the passwd and smbpasswd files with the same passwords 
as on the Win2k PC from which they're trying to gain access.  Network 
Neighborhood browsing shows up the shares, but access is denied.

The directory structure is:
/data (owned by root:root)
/data/accounts (owned by owner:group)

When I try to gain access to [accounts] as ehines (one of the users), all I 
get is a dialog box saying "incorrect password or unknown user name," and 
I'm invited to log in--which is then rejected, also.  There is a [homes] 
share to which I gain access easily and correctly.  I can gain access to 
[accounts] by logging in from the Win2k PC as root (yes, the UNIX root) and 
using the UNIX root password.  However, once I've done that,  no one else 
can ever gain access again--including to the [homes] share--until I reboot 
the PC.

I know I'm dong something basic and brain dead wrong, but I can't find 
it.  I've been through the TOSHARG2 and the Samba-3 documentation, but I'm 
not finding my error.

I set system log to level 2, and following are the relevant parts of the 
smbd and winbindd logs:

from log.smbd:

[2005/12/07 20:53:47, 2] auth/auth.c:check_ntlm_password(305)
   check_ntlm_password:  authentication for user [EHines] -> [EHines] -> 
[ehines] succeeded
[2005/12/07 20:53:49, 2] smbd/service.c:make_connection_snum(321)
   user 'ehines' (from session setup) not permitted to access this share 
(accounts)
[2005/12/07 20:53:49, 2] smbd/service.c:make_connection_snum(321)
   user 'ehines' (from session setup) not permitted to access this share 
(accounts)
[2005/12/07 20:53:49, 2] smbd/service.c:make_connection_snum(321)
   user 'ehines' (from session setup) not permitted to access this share 
(accounts)
[2005/12/07 20:53:49, 2] smbd/service.c:make_connection_snum(321)
   user 'ehines' (from session setup) not permitted to access this share 
(accounts)
[2005/12/07 20:53:49, 2] smbd/service.c:make_connection_snum(321)
   user 'ehines' (from session setup) not permitted to access this share 
(accounts)
[2005/12/07 20:53:49, 2] smbd/service.c:make_connection_snum(321)
   user 'ehines' (from session setup) not permitted to access this share 
(accounts)


from log.winbindd:

[2005/12/07 20:48:07, 0] nsswitch/winbindd_util.c:winbindd_param_init(555)
   winbindd: idmap uid range missing or invalid
[2005/12/07 20:48:07, 0] nsswitch/winbindd_util.c:winbindd_param_init(556)
   winbindd: cannot continue, exiting.
[2005/12/07 20:48:07, 1] nsswitch/winbindd.c:main(897)
   Could not init idmap -- netlogon proxy only

Thanks for your help.

Eric Hines

There is no nonsense so errant that it cannot be made the creed of the vast 
majority by adequate governmental action.
         --Bertrand Russell