[Samba] Active Directory authentication fails

[Chip Burke]

Sorry, that would be helpful, wouldn't it. ;-)

#======================= Global Settings
=====================================
[global]


  workgroup = INNOVA
  realm = INNOVA.LOCAL

  winbind separator = +
  idmap uid = 10000-20000
  idmap gid = 10000-20000
  winbind enum users = yes
  winbind enum groups = yes


   server string = Backup Server


log file = /var/log/samba/%m.log
max log size = 50

security = ADS
password server = rome.innova.local
encrypt passwords = yes

socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
name resolve order = wins bcast
dns proxy = no 


#============================ Share Definitions
==============================
[london]
   comment = London backup
   path = /backups/london
   valid users = @INNOVA\cburke
   public = yes
   writable = yes
   create mask = 0765
   admin users = @INNOVA\cburke




________________________________________
Chip Burke
________________________________________
-----Original Message-----
From: Joseph Krueger [mailto:joseph_krueger at atscorporation.com] 
Sent: Thursday, January 05, 2006 8:20 AM
To: cburke at innova-partners.com
Subject: Re: [Samba] Active Directory authentication fails

Please include smb.conf

Chip Burke wrote:

I am trying to get Samba to authenticate to a Win2k DC. The error I
consistently get is "Failed to verify incoming ticket" Using wbinfo I can
pull the user and groups from the DC. Using krb5 I can get a good ticket
from the DC. I have the winbind options in my smb.conf exactly as listed in
the docs. The Linux box did a "net join ads" no sweat. After sitting a
while, I no longer get the same error on the Linux box, but the Windows
clients get "There are currently no logon servers available to service the
logon request." I imagine something isn't happy with how the Samba box is
getting SIDs or something like that from the Windows DC. How do I begin to
troubleshoot?



________________________________________
Chip Burke

________________________________________



-- 
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba