[Samba] Re: NTLM Problems

[Ian Barnes]

Okay, ill remove the realm line if its not in use. I only fill it in if im
using Kerberos? Or should it be filled in at all times?

Any idea as to why I could be "falling out" of the domain? Its strange and
only seems to be our unit that is doing this. All other machines that log
onto the domain don't have this problem.

Thanks a lot,
Ian

-----Original Message-----
From: Andrew Bartlett [mailto:abartlet at samba.org] 
Sent: 02 November 2005 02:56 AM
To: Ian Barnes
Cc: 'samba'; samba at lists.samba.org
Subject: RE: [Samba] Re: NTLM Problems

On Tue, 2005-11-01 at 13:24 +0200, Ian Barnes wrote:
> Hi,
> 
> This is an example of the config. The workgroup is different at the
client.
> 
> [global]
> winbind separator = +
> winbind cache time = 10
> workgroup = MASTERMIND
> security = domain
> winbind uid = 10000-20000
> winbind gid = 10000-20000
> winbind use default domain = yes
> realm =  

Why is this not specified?  Either put it in, or leave it out
completely.

> client ntlmv2 auth = yes
> 
> 
> Thanks for the help
> Cheers
> Ian
> 
> 
> -----Original Message-----
> From: samba-bounces+ian=opteqint.net at lists.samba.org
> [mailto:samba-bounces+ian=opteqint.net at lists.samba.org] On Behalf Of samba
> Sent: 01 November 2005 12:38 PM
> To: samba at lists.samba.org
> Subject: [Samba] Re: NTLM Problems
> 
> Please, post your smb.conf
> 
> 
> 
> "Ian Barnes" <ian at opteqint.net> ha scritto nel messaggio 
> news:20051031194912.84207162C52 at lists.samba.org...
> > Hi,

> >
> > If I run a wbinfo -a Proxy2%Password_1 (A valid user and password), I
get
> > this:
> > [root at cont] ~ # wbinfo -a Proxy2%Password_1
> > plaintext password authentication failed
> > error code was NT_STATUS_ACCESS_DENIED (0xc0000022)
> > error messsage was: Access denied
> > Could not authenticate user Proxy2%Password_1 with plaintext password
> > challenge/response password authentication failed
> > error code was NT_STATUS_ACCESS_DENIED (0xc0000022)
> > error messsage was: Access denied
> > Could not authenticate user Proxy2 with challenge/response
> > [root at cont] ~ #

It looks to me like you have not joined the domain, or have somehow
'fallen out' of the domain.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Samba Developer, SuSE Labs, Novell Inc.        http://suse.de
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net