[Samba] Oddities with DFS

dpk dpk at egr.msu.edu
Thu Sep 15 15:35:57 GMT 2005


General information about our Samba server configuration:

- Server is a domain member and passes authentication to a domain that 
also has trust relationships

- UNIX passwd/group lookups are performed via NIS

- Running Debian Sarge, Samba 3.0.14a

The problem scenario is this:

- If I map a share, i.e. \\samba\home, then map the dfs root 
\\samba\dfs, I get "Access Denied" to all shares mapping back to the 
Samba server, including a DFS pointer to \\samba\home.

Samba logs:

[2005/09/15 11:25:56, 0] auth/auth_domain.c:domain_client_validate(199)
   domain_client_validate: unable to validate password for user [my 
user] in domain [my domain] to Domain controller \\[my server]. Error 
was NT_STATUS_WRONG_PASSWORD.

On the domain controller side, the following event is logged:

09/15 11:25:56 [LOGON] SamLogon: Transitive Network logon of [my 
domain]\[my user] from \\[my client] (via [my server]) Entered
09/15 11:25:56 [LOGON] SamLogon: Transitive Network logon of [my 
domain]\[my user] from \\[my client] (via [my server]) Returns 0xC000006A

However, if I map \\samba\dfs first OR if I use 
\\samba.fully-qualified.domain.name\dfs in either order, I don't 
received the error.  Any explanation for this behavior and possible 
remedies to fix it other than the other scenarios?

Thanks,
Dennis




More information about the samba mailing list