[Samba] samba as pdc in Ubuntu dapper, fails on ps$ join?
Lachlan Simpson
lachlan.simpson at wilderness.org.au
Thu Jul 20 07:59:35 GMT 2006
ok, this time with attachment, sorry :)
L.
> Hola,
>
> I've done everything as correct as I can see in smb.conf under fresh ubuntu 6.06 fully
> updated install to have it run as a PDC on hostname florentine, domain DAVEYST.
>
> There are no testparm errors.
>
> I've added users with useradd and smbpasswd -a
> I've added machines with useradd and smbpasswd -a -m
>
> I can see the server in my network neighbourhood and access/browse folders on the samba
> server using a linux account login within the network neighbourhood.
>
> However, when I try to go to My computer properties ---> computer name ---> Change.., and
> then put in my domain name and computer name and when prompted use root account and
> password (or any account and password) I get an Access Denied error.
>
> I've attached a log level = 10 tar.gz of the /var/log/samba/smbd.log of everything that
> happens when I do this process on the workstation (hostname = robin, ie robin$) - it's
> quite long, but it also seems to be successful - see below for abridged listing.
>
> I've been on the ubuntu forums where they suggested I should install quota - but I don't
> think that installing quota would solve my problems.
>
> Has anyone seen anything like this before, or know why despite my smb-log having the like
> of:
>
> [2006/07/15 15:57:41, 3] auth/auth.c:check_ntlm_password(219)
> check_ntlm_password: Checking password for unmapped user [DAVEYST]\[root]@[ROBIN] with
> the new password interface
> [2006/07/15 15:57:41, 3] auth/auth.c:check_ntlm_password(222)
> check_ntlm_password: mapped user is: [DAVEYST]\[root]@[ROBIN]
> ....
> ....
> [2006/07/15 15:57:41, 3] passdb/lookup_sid.c:fetch_sid_from_gid_cache(267)
> fetch sid from gid cache 0 -> S-1-5-21-3923429160-1838912494-2447857936-512
> ....
> ....
> [2006/07/15 15:57:41, 3] auth/auth.c:check_ntlm_password(268)
> check_ntlm_password: sam authentication for user [root] succeeded
> ...
> ...
> [2006/07/15 15:57:41, 2] auth/auth.c:check_ntlm_password(307)
> check_ntlm_password: authentication for user [root] -> [root] -> [root] succeeded
> ....
> ....
> [2006/07/15 15:59:43, 3] auth/auth.c:check_ntlm_password(219)
> check_ntlm_password: Checking password for unmapped user []\[]@[] with the new
> password interface
> [2006/07/15 15:59:43, 3] auth/auth.c:check_ntlm_password(222)
> check_ntlm_password: mapped user is: []\[]@[]
> ....
> ....
> [2006/07/15 15:59:43, 3] smbd/service.c:make_connection_snum(488)
> Connect path is '/tmp' for service [IPC$]
> [2006/07/15 15:59:43, 3] lib/util_seaccess.c:se_access_check(250)
> [2006/07/15 15:59:43, 3] lib/util_seaccess.c:se_access_check(251)
> se_access_check: user sid is S-1-5-21-3923429160-1838912494-2447857936-501
> se_access_check: also S-1-5-21-3923429160-1838912494-2447857936-514
> se_access_check: also S-1-1-0
> se_access_check: also S-1-5-2
> se_access_check: also S-1-5-32-546
> ....
> ....
> [2006/07/15 15:59:43, 3] smbd/process.c:timeout_processing(1447)
> timeout_processing: End of file from client (client has disconnected).
> [2006/07/15 15:59:43, 3] smbd/sec_ctx.c:set_sec_ctx(288)
> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2006/07/15 15:59:43, 2] smbd/server.c:exit_server(614)
> Closing connections
> [2006/07/15 15:59:43, 3] smbd/connection.c:yield_connection(69)
> Yielding connection to
> [2006/07/15 15:59:43, 3] smbd/server.c:exit_server(655)
> Server exit (normal exit)
>
>
> any ideas?
>
> smb.conf follows:
>
> #======================= Global Settings =======================
>
> [global]
> workgroup = DAVEYST
> netbios name = florentine
> server string = %h server (Samba, Ubuntu)
> wins support = yes
> dns proxy = no
> name resolve order = wins bcast hosts
> security = user
> encrypt passwords = true
> username map = /etc/samba/smbusers
> unix password sync = yes
> ; passdb backend = tdbsam
> obey pam restrictions = yes
> ; guest account = nobody
> invalid users = root
> log file = /var/log/samba/smdb.log
> log level = 3
> max log size = 10000
> time server = Yes
> passwd program = /usr/bin/passwd %u
> passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n
> *password\supdated\ssuccessfully* .
> veto oplock files = \*.prm\*.mdb\*.mda pam password change = yes
> domain logons = yes
> # domain admin group = root @admin administrator
> preferred master = yes
> local master = yes
> os level = 65
>
> # Useradd scripts
> add user script = /usr/sbin/useradd -m %u
> delete user script = /usr/sbin/userdel -r %u
> add group script = /usr/sbin/groupadd %g
> delete group script = /usr/sbin/groupdel %g
> add user to group script = /usr/sbin/usermod -G %g %u
> add machine script = /usr/sbin/useradd -s /bin/false/ -d /var/lib/nobody %u
>
>
> logon path = \\%N\%U\profile
>
> logon drive = H:
> logon home = \\%N\%U
>
> logon script = startnet.bat
>
> socket options = TCP_NODELAY SO_RCVBUF=8191 SO_SNDBUF=8192
>
> domain master = yes
>
> idmap uid = 10000-20000
> idmap gid = 10000-20000
> template shell = /bin/bash
>
> #======================= Share Definitions =======================
>
> [homes]
> comment = Home Directories
> browseable = no
> valid users = %S
> read only = no
> force user = %U
> force group = %G
> browsable = no
>
>
> [netlogon]
> comment = Network Logon Service
> path = /home/samba/netlogon
> guest ok = yes
> writable = no
> share modes = no
> browsable = no
>
> [profiles]
> comment = Users profiles
> path = /home/samba/profiles
> guest ok = no
> browseable = no
> create mask = 0600
> directory mask = 0700
>
>
> [admindocs]
> path = /home/admindocs
> valid users = @admin
> force group = admin
> read only = no
>
> [apps]
> path = /home/apps
> read only = no
> force group = admin
>
> [twsdocs]
> path = /home/twsdocs
> read only = no
> valid users = @staff, at admin
> force group = staff
>
> [twspics]
> path = /home/twspics
> read only = no
> valid users = @staff, at admin
> force group = staff
>
> [shared]
> path = /home/shared
> read only= no
> create mask = 0666
> directory mask = 0777
> writable = yes
> valid users = @users
> force group = users
>
>
>
>
>
>
> cheers
>
> L.
> ---
> Lachlan Simpson, National Database & IT Support Officer
> National Office
> The Wilderness Society
> 57E Brisbane Street, Hobart TAS 7000, AUSTRALIA
> lachlan.simpson at wilderness.org.au
> Ph (03) 6270 1798
> http://www.wilderness.org.au
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/listinfo/samba
>
---
Lachlan Simpson, National Database & IT Support Officer
National Office
The Wilderness Society
57E Brisbane Street, Hobart TAS 7000, AUSTRALIA
lachlan.simpson at wilderness.org.au
Ph (03) 6270 1798
http://www.wilderness.org.au
-------------- Enclosure number 1 ----------------
* This message contains the file 'smdb.log.when.trying.to.join.txt.tar.gz', which has been
* uuencoded. If you are using Pegasus Mail, then you can use
* the browser's eXtract function to lift the original contents
* out to a file, otherwise you will have to extract the message
* and uudecode it manually.
begin 660 smdb.log.when.trying.to.join.txt.tar.gz
M'XL("+2%N$0``V9R+C8Y-3,N,"YS;61B+FQO9RYW:&5N+G1R>6EN9RYT;RYJ
M;VEN+G1X="YT87(`[1UK;]M(KE_O?L7@<$`4(`^]_<"ZN#3Q=H--G%R<;G?1
M+01%FMBZZ.&5Y";97W^<D6Q+M:VW_$AE%+4T<L at 9#LGAD-30L_2'$],9G3R/
ML7WBNZ^&/3KQG9/_.0;<OOCO*OBP\)%%D7QS+8F-?L.5+/`<_XYC14GF6%YD
MN7?P5)#E=XBM`GG:9^KYJHO0.VOJ&9JEVNM^E_9\3S^]LI]_?N%A=D_9UBDG
M(4[J2JVNT#E"PE?D60_ZZ<1U-.QY)UI7&V/M27&QZ:@ZPXE\^_"?"-VZANUK
MZ at 1I*CQ'OF%AA%\FAHOUD_60)^2O@%%/)_"G`)I\*13"'#[7(N"#._AE\"=S
M1&5`\[RP`(V`>_RIUT7.TYOI+ITW9V(ZVA-`-&S#5X([CVFW.`+,F6`[;%.,
MB=9%Y$>&:AI_D[Y;,-_J"'L)$QA!H9B&/7T!1/1;H>B>L&MC<XZ5ESH$ZQ7Y
M`0J>H?`9PK;Z8&(],Q>&5PHT`]4[(@%\[ZJVIVJ^X=B(1<XC,K$]\L>HQ:\!
MRX=@73PQ7P$H_5:\"=:`"(S880E4&_L/AN,AS;%MK/E=9*L6YGH_7]W<]0?W
MEX,^HA_2RO?N;CY<#M#\4Q!O:R5>()1J]AY-Q\6$5S#P at N7XN.<Z#X9]1#N`
M_-<)1CW$5D9'+D)'3FAEANL]&[XV5D(>8CH=RKU!ZXRST/#Z at XU'\$<^8B:&
MCF2Y(QW2`2/V)6T,'M84S2<<YV%?">\8ODWU$301<8)O#4$S8M at CQ!ZB8Q3^
M3@$!`IZU]9<,U`K[.)^H\)X1VS+!=8?_FF+/QSHBK8[FF.C+[3D:].\_W]S]
MBF[O;C[>G5TC[H3]6CVBJ[/!]=F@'MB?#5MWGCWTZ+CHL^,^C5QG.O&0<,*I
M=8SDFCOA?V=9OC8J\2=<#;`']^CJ&K$G7/Z.^QPC2%38P2@!;AW>#OH?;PIV
M46I1[3K$)FB+:`\7':Q,*_`1K0"F7N5:P8-+$.'IY/>=5 at SS;BYT^*Q%46U=
M^9UI\SS!^JSY/8Y'C^:([[$O6IM=ITCY%9`#>#9^5KYI%`',`--J\>%PEIYU
MT0`_H]_.40]&<(2,1^``\>0%R&=-5-^`918]PS]G:NI(,QT/(]6$A1CN7.PY
M4U=+7_)3!PZ+&?"EP\@"G>$+A]*<MJ&PFT'?*T,D4R8=P`"_X9MA;ZZ\`#P/
M0N%^,S2,;F%N at 7EYF66_AK^]4NUKU?[N]Q)H"F+36JK[>N%8J@$_2)/N%5VE
M72,"ZH!5Y6-&XB72R8^PWMU<7L#:*B`9_A?)%<>1CB&N`,\MHVG/T`!7/YC.
M`Q%7S_@;HR19-8T'P'!J^Z;E>02\CA^F(R6\5QY-=>3!A,Y`#^ZOKH?#6[!3
M1L$SX&S,L^TVW\EN)J0I&B&B:`11;A1-HVA^9$6S)*(SX?0`+W85=>J/H8?\
M3$:GT-[[XCJ._Q7I(?B+L]_Z?PSOO\+$N$]D'PDDZGVA&Y>O1-2X'B^2;QZ^
M,PO`9.J-%Q(@46,IUA9P?W<E]W,I:*:&/D-!))/"$P*)CC=2#+.[G`)6E2BG
M#29",V<RQR0$]F6DJ;#"(#QP2OZ;^VH(DR at 3U?- at QG6&YZB=N.)1%Z%STDH=
M%V$;-?ZGMJ5.)F!3$GY"<P[Z,^"L_\R8![3K&/EC#$O"\P*`8?O8?52U!.]'
M:I<#Y;:ZR]&N&5YW;?<:7JZ3E\O0+&U?4@'-LH^D+,W2!E.-_&]=RS0RT\C,
MVY$9LISH#Z>FXSR!O>=1VCUBLH.`:^71=2QE!!?4(<_P,G79T.>PJX(E$IXC
M>!X&/UAT_!X-C[ECZ9CGCH4.+XA\AY/98ZXMM#L<+W;$8UX46VVIU1'D8RG5
M+].PS`ZR3#,S^S(S6S*SY?9:F]53+?KW)(ZCT0U88&93ZSK8K7E33<-83XV(
M-4OPKO$&G\X;`MM:OY])80Q86Y:N,C!+W',`R]K(CKH/X):&;!E!H/2>.?>&
M\.!TB%43B'`9!H=IJ(+N]:C;KUNK1U%FB4=1D-(\?R']J/=F9'BPY52^`=."
M(%!2?R(4)!'2+B(D^\<=&=+BOC#T%N693X/+WQ'<P])O>.$=04A`'R'5UH%<
MIHD>,")_A3 at VC4/7(A18ZD$^TVEVP=BQL(>\T.<TYY0#@O<@C"F1WR#=<+'F
M.^YK%QV<TJ=)MI"K6J<DRP"N+!+0GRBJKBL$$)!3I/14%QTX@!Z,51?/F/'[
M;JA^.LZ<7F$QXA7N5!]]\D%_[:8_>.&UI5,.F"SU"2MAB@"01O'LJ<4(?!A4
M7,P"0XW4F$?T$-D@=!/L6H9/`H:^@U2-D`KY8V,VJ<SE[?F_#U,&CEW7<:$S
M]!MTF?:$?883J6S0-A2T$5Z()CXP,BR22+/T'L>U$#,C_2%H`F5X?W;_::B<
MG9_WAT/EHC^X[%]4QD!2A(%$H7(&FIK.R'E\W$T>FF&*)Y_,NLS`1H7.VWP,
M1._T,JBL.95(\I<S]96P!3H,O!"HC>5'7=0']0BS\6B8.-A)::8!ZQ]BPN^Q
MZH'^\D(>Q_IA>LQ at DV*(*>._&'[H at V=DCK+;N>E0_;N032^EWXM?`L17`YMZ
M1+`9F7IM_R#-<;!$;E,ILJJ?DA3D"Y`[1)X at QG9<"Q9&<I,F\TUB69-8MD^)
M9?(.JN`FL:Q)+&L2R[:<6+:+BJ')]VCR/9K$LDTEEO%K[;A&T32*YH=0-,42
MRQ9)90G99%R03-;D$NQ;(&,CN61?__RRPPED&9+'RL0!1\3F7Q_P:0([N0([
MMO/@Z*_1T$[04E5P1Y8D08P'>`($Q4(\NQGMV$TC)3':(08HSX-FT!M`)YBE
M at U/?FAQ0<9I%R+Z08$;R*G at Z]0T31A-$0NC at E.!:H2(,?,<FN$:S0>`"$L6:
MNP%'D7PBZ'R.]"'@M!7`5--S<B4AB8E0N&,V#4O*<X$_EE)?X/CV2`@&_P=N
M7AT_JE/3AV6&2F),3X7/$/P8C1WG*<&[WDSKEJ<UGZJ@>O8H4+<UJ0PY4(;4
MP8T8CCWA3]B33NMPYA,G,969TB`Z8Q:_,%^1ZD55/V)(="SL\6AV>1A1ISNC
M1>,Q`:+UPQU>BZ7(@G4@''6/CKJ6>"O'IKU64L#9[VLN5GV\:AUK"]HC)[=W
MCD5MWR<4HL::0 at -F$V."&2%0(]&V+OK5=IYM1*Z1Z:GN1*,1-G+$2V53)$>G
MJ`;/Z[-K%)P?&&ZX#3WUW&^4(H!7G1CT4@$1UA47_\5P4A"Y7GK217_>7M[V
M_PQ)=_Q^<>\E+!NK\0:&_!QI1XKL@&:MU.B(XDRC)H#VYJ))^T[)%0HH'Z2+
M!10\!LE$$U!BO1;W^(!LTNICNY?#AY7&"JT(*\C59T>`I.K%!74%K0C`&:DD
MNM&C*+ZCE&78/7(P$>SW7H(+F_RLEXXQ,^':41EJ5Z_FJ,(H3#ECHBW4/X'$
M2`)EW@#L3P'#OD>ZZJN]CAPD at L%6+7!S]=+X*P!/-EYZJ,D$2B#:$N at NS;$L
MLE4"4OWTGC[(!),(]",1+. at YPP=D)]O*L]O+.4CVA9<)7(KG7X'4_0M(!=./
MR/0GK,,KY%P9V_05`!?CX!X([>,7GY%XJF*6'G3!'O5\UR'';B$?#`5'0Q/'
M,>?^\5:"1EVOX.#)_>"6G/W3FFFVH*E+_F at V^"ZZ&IXI-[?]P>W-U>7Y'PDS
MU9C"VS.%-\)G;3[[2_)IZJP32]'8:W4F-NJL4C;+I\TVBC]O'A+;<'G#Y55P
M>8$U^[^?^G=_7`Y^O at D6[BT/EZMNZ>"XG=_Q%]Q_/QNP;1A5O__F^+>_`0]I
M-]^`!_<U[\#3D)3;@6NU[,`YX0UNP;5-;,&Y:+2,2SW!9J>7<V&OE_-`[B++
MN;;MY;S>/?A=_R/=@RN__'IU75VR2]S57'/2"\=R;RKMI:2?OO&6O'%OB92:
M%9MCY9%J3BG=X,K#M<5FZ=F;G>1\Y>D/[N\2-I&-.GOCZDS.X;Y*56?1@#`O
M5'_TZB;5F=ANU-E>J3/J&%-^.[OZU-_R4'-D7*:*5"OF:MYK"T%L#(3]DJCS
MJYMA=EDR/34<(WV_1IDXIJ&]DB8&(-!T6](.\T8?["[Q\HIHNQ'11D0;$=UE
M$8VF)8BI[X_DEM#@A<(\$BJR1<;!QP+/;';`]8;(HC at +AL@&_?NKFX\W at Z0@
M64&:<:E!LG(T*Q`D"Q%6%B2;4R\U3S41<\XHV0QK&D6+QLGTE#A907[@T^)D
MY=@A?YPLA5A9XF1ZOCA90<H)L5S5ZK5/?D,GBB_?]IYELU at ZR_#+6SK+,/-;
M.C/1B]@Z^BI;9[VXUQ`J2R!@>6,'1JS<]?][_LO9U9;'*50H46*:75).H#9F
METB-79*;9NEOSS1VR4[:);@>NR3U%9H]M$OP1NR2J`.&7YF1N#]V"9\I[+!'
M=@E^^W;)V:?[7[8\2*E"193J+-D/HT1 at 4_VR>Z,6LOEE=U4K9,O2WZ2X)%A;
MU63IK_/+KD92WB^[(\3+*Z+<&U$U49_2RL/ARXUCZ7#XY"-WHLCJ/2PBBJF"
MP^$+4C]6\;=3O9[7C>)J?G/TWR2FV4DI@;K2R/DH[>"$\A7GHP2J*W[Z?/2D
ME!1L)<ZXSP!]<U3;;K6#S8ZYNFH'%7%"!HZNHMJ!R"U at UE3M8!E%;=4.HJ at J
MK'9`P&ZCVD$6O+54.RA&Q_1J!ZOA%JUVT$FV*;B-Z8\(IEJK'91$E%CMH"3L
MG-4.RHXDJ=I!)51:4^V@).SD:@>)P#-7.\C2Q6+5#HIIA?1J!^6TPHI#R'=1
M,51["'ET9=C!0\AS#;S,(>3%$&WE$/*4KE95[2`WFGS5#D+P]58[**9H8IOJ
ME:^I-(JF430_C*(I5NT@*&\ZJW at P.R1^?>$#7 at PJ'ZP\A&"U`%1>^B"*IJ;2
M!_6(<MI at ZBM]$&*IO_3!HLP`Y:P251"R=KE@%818]QI>KI.7R]`L;5]2`<VR
MCZ0LS=(&4XW\;UW+-#+3R,S;D1FRG.@/IZ;C/$U)[1D:J\9D!P'7"@EW*".X
MT%18 at AA>IBX;^IR>"T##(?`<T>>()8F&>5[QSS'\AF5VA66:F=F7F=F2F9U0
M/LM3K?7%LX+=6E(!K68)WF7>X--Y0PBRNE?O9U(8`]:6I:L,S++9:FO5>103
MJJW%/'_9JZT1DD5KK9'[PM"_J[3&QJNL$="9:ZQE0BBPU(-\IM/L at K%C86^>
MQ3+GE`."]R",*9'?(-UPL>8[[FL7'9S2ITFVD*M:8`JI.EQ9)*`_451=5P@@
M(&>0(:(N.G``/1BK+IXQX_?=4/UTG#F]PJF%Y<HYA>.%Y7;)'QS-:$FH$B7P
M85!Q,0L,-5)C'M%#9(/03;!KD==(=)*@$IP2A?RQ,9M4AF0OI2698-=U:-X*
M^09=ICUAG^%$*ANT#05MA!>BB0^,#(LDTBR]QW$MQ,Q(?PB:0!G>G]U_&BIG
MY^?]X5"YZ`\N^Q>5,9"4FBE9BH&6,B5WB8>JS)1<2:6M))9M30Q+)I9%^EUQ
M8EF,(E4DEG6ZHE!S8MDJ%#4EEL51%4LL at PU]9KC%$J):4E*2=1Q7G7P?QU1C
M0E1I1->7YW<WPYN?[V?XA at 21L!E,0BU#2LCQ*@][?=95:=@7-T.4D'E5&OY0
MM1Y69**EP,V8=)6M=XE)5W3HA/LJ4S[1;,S.LJ.EK.Y9RH;83?63+QM"B&1#
M+!LQ>2%W`K?./%8?S03X9!LOWT?[`QY-#_'G[D<[F,/YC-&W['IA6?K9BP_M
M/(@"=P0M[;YP57#"/)E`M1W[U7*F'G(#85P/N_X8=##._#'G[%W,%7,.NU,"
M78*[D$[)>K]0DO_G.XU00TWZK!A*U:2O3H-&,U=7'!Y45H-&70>[JCSKK4D_
MQU;XT.Z<$)I#N]?,=*4UZ9MIW95IS:<JBA42R:4RPIKT<YMC\=YEN^JZ]$2E
M[HPFK:(N?=%E+'8('E>]%R)ZJD1T'6L+&NZLR%'?-HMF.\<BV)&%IUG,C][C
M.N%I%MF09#[-8H9MY9D6<<BF"M8M<?O1XQSHF1:"+,]?%H@=:D&=I8YKH9\^
MNU=X_![]]($3/GS^^SUB?-W3;+_''OD3>L%UCBS=)5=`7%8\LB;TAAR`E"9&
MJWO46>18WPVP/R0A at C[H@#S`8G_(<+)`W[*,M:*1^@VC-@)SUS6P1T9,M`JB
MHT!\JQ5<I8VA6$!IQ;O[I:5I\>Y^W<)4SC3<O!&Z_.[^FG4D]_O[<8Q5O[^_
M+<IM,\RRZ3%7%6:IC!,R<'439JD^S++B_?TX at Q1Y?S_4+1R+HN_O?QZ"WDEX
M?S\;WJ3W]Q=XP]?WG[U..^WM_2K\Q9L(5K5VT.'1!*N:8%43K-I"L(K?>+!J
M%]5/$ZQ*"U:1!;")4S5QJB9.M<;!5WN<:C?U9A.G^C$"&DV<ZDU.ZZ[&J8BY
M46N(JM6$J+[WJ7-\#4M8+$35>M,A*C!!]BA$Q;'B=T&JB[]IF$K^\.%B59P*
M:+N(4PG2+$[5+AVD(D$EZG at M%*2:_R7L+D0*-=8:GJ@#4Q^>.(*F5_@;-GL<
M4&(*EKT.5[[C$Z=?95(E[;14-3S^X_&X$/)X=N]R&H_+&XS&UKMN['\T=ME:
B:@*Q32#V309BWS6?YM-\FD_S:3[-9T.?_P/ZWMV@`/```(S&
`
end
More information about the samba
mailing list