[Samba] Random "access denied" failures
ml.samba at gmail.com
Wed Sep 28 18:20:25 GMT 2005
I'm at my wits end. I'm running FreeBSD 5.4-STABLE and Samba 3.0.20 on
my fileserver. It authenticates from Active Directory which is most likely
running on Windows 2000 Server. I do NOT have domain admin
priviledges--only admin privs of my OU.
My problems began when I upgraded from 3.0.14a to 3.0.20:
It started with one user suddenly getting denied access to his home
directory on the fileserver on only one machine. He could get access from
any other machine in the building. Then there was another with what
appeared to be the same problem but on a different computer. Now I've had
this problem show up for five or six different users, each one on just one
computer (a couple of them on the same computer) but everything was fine
on the other computers.
For all but one user (so far), simply renewing my Kerberos ticket on the
command line with kinit like I did when I initially joined the domain solved the
On one occasion, renamaing the user's logon name and then renaming it
back solved the problem.
Things I've tried to do to resolve this problem:
+ Rejoin the client computer to the domain
+ Change the client's logon name
+ Rejoin the fileserver to the domain
+ Remove the fileserver's machine account and recreate it in the domain
+ Verified settings in the configuration file
+ Verified permissions and passwords are correct
+ Verified filename case matches on the domain, on the fileserver, and at
+ Recompiling Samba
+ Recompiling Samba and all it's dependencies
I haven't yet tried to delete the user accounts and recreate them, as it would
be somewhat burdensome to get the district office to relink the Exchange
accounts with the new user SIDs.
I just don't know what to do! I tried going back to 3.0.14a, but when
I did that
I started getting log messages that Samba couldn't authenticate with the KDC.
On top of that, when I tried to rejoin the domain, the 'net' program
Any help would be appreciated. If it weren't for these random instances
popping up (and not going away), everything would be working fine. Things
worked great under 3.0.14a.
More information about the samba