[Samba] Samba 3 PDC with ldapsam and login problem

[John H Terpstra]

On Sunday 01 May 2005 11:08, Marian Steinbach wrote:
> Meanwhile I tried the same as described in my original post, but with
> higher log level.
>
> The only negative message (I don't really know what to look for) is this
> one: "user 'root' (from session setup) not permitted to access this
> share (IPC$)".
>
> I also added a group "root" which represents the posixGroup with
> gidNumber=0 and root as a member. This doesn't help, obviously.
>
> Still glad for any help,
>
> Marian
>
>
> [2005/05/01 19:01:12, 3] smbd/password.c:register_vuid(222)
>    User name: root       Real name: root
> [2005/05/01 19:01:12, 3] smbd/password.c:register_vuid(241)
>    UNIX uid 0 is UNIX user root, and will be vuid 100
> [2005/05/01 19:01:12, 3] smbd/password.c:register_vuid(270)
>    Adding homes service for user 'root' using home directory: '/root'
> [2005/05/01 19:01:12, 3] param/loadparm.c:lp_add_home(2368)
>    adding home's share [root] for user 'root' at '/root'
> [2005/05/01 19:01:12, 3] smbd/process.c:process_smb(1091)
>    Transaction 3 of length 88
> [2005/05/01 19:01:12, 5] lib/util.c:show_msg(464)
> [2005/05/01 19:01:12, 5] lib/util.c:show_msg(474)
>    size=84
>    smb_com=0x75
>    smb_rcls=0
>    smb_reh=0
>    smb_err=0
>    smb_flg=8
>    smb_flg2=51201
>    smb_tid=0
>    smb_pid=7988
>    smb_uid=100
>    smb_mid=4
>    smt_wct=4
>    smb_vwv[ 0]=  255 (0xFF)
>    smb_vwv[ 1]=    0 (0x0)
>    smb_vwv[ 2]=    0 (0x0)
>    smb_vwv[ 3]=    1 (0x1)
>    smb_bcc=41
> [2005/05/01 19:01:12, 3] smbd/process.c:switch_message(886)
>    switch message SMBtconX (pid 7989) conn 0x0
> [2005/05/01 19:01:12, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>    setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2005/05/01 19:01:12, 5] auth/auth_util.c:debug_nt_user_token(485)
>    NT user token: (NULL)
> [2005/05/01 19:01:12, 5] auth/auth_util.c:debug_unix_user_token(506)
>    UNIX token of user 0
>    Primary group is 0 and contains 0 supplementary groups
> [2005/05/01 19:01:12, 5] smbd/uid.c:change_to_root_user(296)
>    change_to_root_user: now uid=(0,0) gid=(0,0)
> [2005/05/01 19:01:12, 4] smbd/reply.c:reply_tcon_and_X(407)
>    Client requested device type [?????] for share [IPC$]
> [2005/05/01 19:01:12, 5] smbd/service.c:make_connection(807)
>    making a connection to 'normal' service ipc$
> [2005/05/01 19:01:12, 2] smbd/service.c:make_connection_snum(321)
>    user 'root' (from session setup) not permitted to access this share
> (IPC$)

Marian,

It looks like you are blocking the 'root' account in your smb.conf file. If 
not, please send us your smb.conf file so we can help you.

- John T.


-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
Other books in production.