[Samba] Winbind problem - 3.0.20a and NT4 domain

[bdehn at oreillyauto.com]

Jerry,

Thank you for taking the time to respond and for everything you do for 
Samba!

After "banging my head on the wall" for several days I wiped out the Linux 
system and started over. I setup the system like I had before and 
continued to have the same problem. After looking at the logs from the 
first attempt again (and again and again....) there was a clue about PAM 
being the problem. I have to admit that I didn't fully understand how PAM 
interacted with winbind and how CRUCIAL it's configuration was in the 
authentication process (even for enumerating shares). I poured over The 
Official Samba-3 HOWTO and Reference Guide (again) and followed it's lead 
to PAM configuration. I thought that I had done the same with the original 
configuration but apparently not. After my changes to PAM, miraculously 
things are working :O). 

Bob Dehn


"Gerald (Jerry) Carter" <jerry at samba.org> wrote on 10/13/2005 08:49:15 AM:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> bdehn at oreillyauto.com wrote:
> 
> | We are using 3.0.20a on SLES 9 and are trying to configure
> | a member server for our NT4 domain. The wbinfo commands
> | (-u and -g) show correct  information. The getent
> | commands (passwd and group) work fine also. If Samba is
> | running without winbind, I can see the shares in the
> | config file (net view \\xxxxxxxx) from a PC. With winbind
> | running I get an error message about the computer name
> | being in an invalid format.  Below is a portion of
> | the log.winbind during the "net view \\xxxxxxx":
> |
> ...
> | check_ntlm_password:  Authentication for user [bdehn]
> |  -> [bdehn] FAILED with error NT_STATUS_INVALID_COMPUTER_NAME
> |
> | Any help would be greatly appreciated!!!!
> 
> That error is being returned from the DC as far as I
> can tell. The error log you posted from from smbd.  Have
> you looked at log.winbindd?
> 
> 
> 
> 
> 
> 
> 
> cheers, jerry
> =====================================================================
> Alleviating the pain of Windows(tm)      ------- http://www.samba.org
> GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
> "There's an anonymous coward in all of us."               --anonymous
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.0 (GNU/Linux)
> Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
> 
> iD8DBQFDTmXbIR7qMdg1EfYRAm3MAKC0/LlKfcDjeXv49+tGqeUYw9QWRACcDay5
> grOtQ/a7orpUFXaovEH8rCU=
> =6Vpr
> -----END PGP SIGNATURE-----