[Samba] Problem authenticating user from trusted domain

Masopust, Christian christian.masopust at siemens.com
Wed Dec 6 10:58:32 GMT 2006


Hi all,

i have a samba-server in domain named "WW300" and a user from domain "WW002"
tries to connect to one of my shares but fail. so i switched on logging and
looked what happens:

[2006/12/06 10:51:38, 5, pid=14054, effective(0, 0), real(0, 0)] auth/auth_util.c:make_user_info_map(225)
  make_user_info_map: Mapping user [WW002]\[E0420300] from workstation [E042017C]
[2006/12/06 10:51:38, 5, pid=14054, effective(0, 0), real(0, 0)] libsmb/trustdom_cache.c:trustdom_cache_fetch(184)
  no entry for trusted domain WW002 found.
[2006/12/06 10:51:38, 5, pid=14054, effective(0, 0), real(0, 0)] auth/auth_util.c:make_user_info(133)
  attempting to make a user_info for E0420300 (E0420300)
[2006/12/06 10:51:38, 5, pid=14054, effective(0, 0), real(0, 0)] auth/auth_util.c:make_user_info(143)
  making strings for E0420300's user_info struct
[2006/12/06 10:51:38, 5, pid=14054, effective(0, 0), real(0, 0)] auth/auth_util.c:make_user_info(185)
  making blobs for E0420300's user_info struct
[2006/12/06 10:51:38, 3, pid=14054, effective(0, 0), real(0, 0)] auth/auth.c:check_ntlm_password(219)
  check_ntlm_password:  Checking password for unmapped user [WW002]\[E0420300]@[E042017C] with the new password interface
[2006/12/06 10:51:38, 3, pid=14054, effective(0, 0), real(0, 0)] auth/auth.c:check_ntlm_password(222)
  check_ntlm_password:  mapped user is: [WW300]\[E0420300]@[E042017C]
[2006/12/06 10:51:38, 5, pid=14054, effective(0, 0), real(0, 0)] lib/util.c:dump_data(1977)
  [000] 29 FB 09 D0 A0 5C 97 40                           )....\.@
[2006/12/06 10:51:38, 8, pid=14054, effective(0, 0), real(0, 0)] lib/util.c:is_myname(1797)
  is_myname("WW300") returns 0
[2006/12/06 10:51:38, 6, pid=14054, effective(0, 0), real(0, 0)] auth/auth_sam.c:check_samstrict_security(358)
  check_samstrict_security: WW300 is not one of my local names (ROLE_DOMAIN_MEMBER)
[2006/12/06 10:51:38, 3, pid=14054, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2006/12/06 10:51:38, 3, pid=14054, effective(0, 0), real(0, 0)] smbd/uid.c:push_conn_ctx(365)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2006/12/06 10:51:38, 3, pid=14054, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2006/12/06 10:51:38, 5, pid=14054, effective(0, 0), real(0, 0)] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2006/12/06 10:51:38, 5, pid=14054, effective(0, 0), real(0, 0)] auth/auth_util.c:debug_unix_user_token(505)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2006/12/06 10:51:38, 3, pid=14054, effective(0, 0), real(0, 0)] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/12/06 10:51:38, 5, pid=14054, effective(0, 0), real(0, 0)] auth/auth.c:check_ntlm_password(271)
  check_ntlm_password: winbind authentication for user [E0420300] FAILED with error NT_STATUS_NO_SUCH_USER
[2006/12/06 10:51:38, 2, pid=14054, effective(0, 0), real(0, 0)] auth/auth.c:check_ntlm_password(312)
  check_ntlm_password:  Authentication for user [E0420300] -> [E0420300] FAILED with error NT_STATUS_NO_SUCH_USER
[2006/12/06 10:51:38, 5, pid=14054, effective(0, 0), real(0, 0)] auth/auth_util.c:free_user_info(1318)
  attempting to free (and zero) a user_info structure


anyone having an idea what's happening here? why is my user from ww002 mapped to
ww300?

thanks a lot,
christian

P.S.: samba is version 3.0.10 (i already tried it with 3.0.23c, same problem....)


More information about the samba mailing list