[Samba] Re: W2K3 Domain - Can't Connect to Share?
Nolan Garrett
nolan at massivegeek.com
Sat Jul 29 04:26:12 GMT 2006
This is definitely a problem with 3.0.23 - a second system (that
functioned fine yesterday) is now exhibiting the same behavior after a
yum upgrade last night. Once again, I can connect to homes and
printers, but no other shares. I am pretty sure this is related to the
problem Anton is having, in the thread "Problems with access to share
after upgrading to 3.0.23(a)".
Here is the level 10 debug output, when trying to connect. I am 100%
sure my password is correct.
[root at mgprisvr ~]# smbclient //mggryphont.massivegeek.local/MP3s -U
MASSIVEGEEK\\mgwinxpvm1vpn -d 10
INFO: Current debug levels:
all: True/10
tdb: False/0
printdrivers: False/0
lanman: False/0
smb: False/0
rpc_parse: False/0
rpc_srv: False/0
rpc_cli: False/0
passdb: False/0
sam: False/0
auth: False/0
winbind: False/0
vfs: False/0
idmap: False/0
quota: False/0
acls: False/0
locking: False/0
msdfs: False/0
dmapi: False/0
lp_load: refreshing parameters
Initialising global parameters
params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf"
Processing section "[global]"
doing parameter workgroup = MASSIVEGEEK
doing parameter server string = Samba Server
doing parameter interfaces = 192.168.0.0/255.255.255.0
192.168.2.0/255.255.255.0 127.0.0.1
doing parameter bind interfaces only = Yes
doing parameter printcap name = /etc/printcap
doing parameter load printers = yes
doing parameter printer admin = @"MASSIVEGEEK+Domain Admins"
WARNING: The "printer admin" option is deprecated
doing parameter cups options = raw
doing parameter log file = /var/log/samba/%m.log
doing parameter max log size = 50
doing parameter security = ADS
doing parameter realm = MASSIVEGEEK.LOCAL
doing parameter socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
doing parameter idmap uid = 16777216-33554431
doing parameter idmap gid = 16777216-33554431
doing parameter template shell = /bin/bash
doing parameter winbind use default domain = yes
doing parameter username map = /etc/samba/smbusers
doing parameter winbind separator = +
doing parameter winbind enum users = yes
doing parameter winbind enum groups = yes
doing parameter template homedir = /home/winnt/%D/%U
doing parameter admin users = @"MASSIVEGEEK+Domain Admins"
pm_process() returned Yes
lp_servicenumber: couldn't find homes
set_server_role: role = ROLE_DOMAIN_MEMBER
Attempting to register new charset UCS-2LE
Registered charset UCS-2LE
Attempting to register new charset UTF-16LE
Registered charset UTF-16LE
Attempting to register new charset UCS-2BE
Registered charset UCS-2BE
Attempting to register new charset UTF-16BE
Registered charset UTF-16BE
Attempting to register new charset UTF8
Registered charset UTF8
Attempting to register new charset UTF-8
Registered charset UTF-8
Attempting to register new charset ASCII
Registered charset ASCII
Attempting to register new charset 646
Registered charset 646
Attempting to register new charset ISO-8859-1
Registered charset ISO-8859-1
Attempting to register new charset UCS2-HEX
Registered charset UCS2-HEX
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
Substituting charset 'UTF-8' for LOCALE
added interface ip=192.168.0.1 bcast=192.168.0.255 nmask=255.255.255.0
Can't determine ip for broadcast address 192.168.2.0/255.255.255.0
added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0
Netbios name list:-
my_netbios_names[0]="MGPRISVR"
Client started (version 3.0.23a-1.fc5.1).
internal_resolve_name: looking up mggryphont.massivegeek.local#20
Opening cache file at /var/cache/samba/gencache.tdb
Returning expired cache entry: key =
NBT/MGGRYPHONT.MASSIVEGEEK.LOCAL#20, value = 192.168.0.100:0, timeout =
Fri Jul 28 21:22:15 2006
no entry for mggryphont.massivegeek.local#20 found.
Deleting cache entry (key = NBT/MGGRYPHONT.MASSIVEGEEK.LOCAL#20)
resolve_lmhosts: Attempting lmhosts lookup for name
mggryphont.massivegeek.local<0x20>
getlmhostsent: lmhost entry: 127.0.0.1 localhost
resolve_wins: Attempting wins lookup for name
mggryphont.massivegeek.local<0x20>
resolve_wins: WINS server resolution selected and no WINS servers listed.
resolve_hosts: Attempting host lookup for name
mggryphont.massivegeek.local<0x20>
remove_duplicate_addrs2: looking for duplicate address/port pairs
namecache_store: storing 1 address for mggryphont.massivegeek.local#20:
192.168.0.100:0
Adding cache entry with key = NBT/MGGRYPHONT.MASSIVEGEEK.LOCAL#20; value
= 192.168.0.100:0 and timeout = Fri Jul 28 21:34:39 2006
(660 seconds ahead)
internal_resolve_name: returning 1 addresses: 192.168.0.100:0
Connecting to 192.168.0.100 at port 445
socket option SO_KEEPALIVE = 0
socket option SO_REUSEADDR = 0
socket option SO_BROADCAST = 0
socket option TCP_NODELAY = 1
socket option TCP_KEEPCNT = 9
socket option TCP_KEEPIDLE = 7200
socket option TCP_KEEPINTVL = 75
socket option IPTOS_LOWDELAY = 0
socket option IPTOS_THROUGHPUT = 0
socket option SO_SNDBUF = 16384
socket option SO_RCVBUF = 16384
socket option SO_SNDLOWAT = 1
socket option SO_RCVLOWAT = 1
socket option SO_SNDTIMEO = 0
socket option SO_RCVTIMEO = 0
session request ok
write_socket(5,183)
write_socket(5,183) wrote 183
got smb length of 189
size=189
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=0
smb_pid=9062
smb_uid=0
smb_mid=1
smt_wct=17
smb_vwv[ 0]= 7 (0x7)
smb_vwv[ 1]=12803 (0x3203)
smb_vwv[ 2]= 256 (0x100)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]= 65 (0x41)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 256 (0x100)
smb_vwv[ 7]=25600 (0x6400)
smb_vwv[ 8]= 60 (0x3C)
smb_vwv[ 9]=64768 (0xFD00)
smb_vwv[10]=33011 (0x80F3)
smb_vwv[11]=32896 (0x8080)
smb_vwv[12]=59818 (0xE9AA)
smb_vwv[13]=50882 (0xC6C2)
smb_vwv[14]=50866 (0xC6B2)
smb_vwv[15]=41985 (0xA401)
smb_vwv[16]=30721 (0x7801)
smb_bcc=120
[000] 6D 67 67 72 79 70 68 6F 6E 00 00 00 00 00 00 00 mggrypho n.......
[010] 60 66 06 06 2B 06 01 05 05 02 A0 5C 30 5A A0 24 `f..+... ...\0Z.$
[020] 30 22 06 09 2A 86 48 86 F7 12 01 02 02 06 09 2A 0"..*.H. .......*
[030] 86 48 82 F7 12 01 02 02 06 0A 2B 06 01 04 01 82 .H...... ..+.....
[040] 37 02 02 0A A3 32 30 30 A0 2E 1B 2C 63 69 66 73 7....200 ...,cifs
[050] 2F 6C 6F 63 61 6C 68 6F 73 74 2E 6C 6F 63 61 6C /localho st.local
[060] 64 6F 6D 61 69 6E 40 4D 41 53 53 49 56 45 47 45 domain at M ASSIVEGE
[070] 45 4B 2E 4C 4F 43 41 4C EK.LOCAL
size=189
smb_com=0x72
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=0
smb_pid=9062
smb_uid=0
smb_mid=1
smt_wct=17
smb_vwv[ 0]= 7 (0x7)
smb_vwv[ 1]=12803 (0x3203)
smb_vwv[ 2]= 256 (0x100)
smb_vwv[ 3]= 1024 (0x400)
smb_vwv[ 4]= 65 (0x41)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 256 (0x100)
smb_vwv[ 7]=25600 (0x6400)
smb_vwv[ 8]= 60 (0x3C)
smb_vwv[ 9]=64768 (0xFD00)
smb_vwv[10]=33011 (0x80F3)
smb_vwv[11]=32896 (0x8080)
smb_vwv[12]=59818 (0xE9AA)
smb_vwv[13]=50882 (0xC6C2)
smb_vwv[14]=50866 (0xC6B2)
smb_vwv[15]=41985 (0xA401)
smb_vwv[16]=30721 (0x7801)
smb_bcc=120
[000] 6D 67 67 72 79 70 68 6F 6E 00 00 00 00 00 00 00 mggrypho n.......
[010] 60 66 06 06 2B 06 01 05 05 02 A0 5C 30 5A A0 24 `f..+... ...\0Z.$
[020] 30 22 06 09 2A 86 48 86 F7 12 01 02 02 06 09 2A 0"..*.H. .......*
[030] 86 48 82 F7 12 01 02 02 06 0A 2B 06 01 04 01 82 .H...... ..+.....
[040] 37 02 02 0A A3 32 30 30 A0 2E 1B 2C 63 69 66 73 7....200 ...,cifs
[050] 2F 6C 6F 63 61 6C 68 6F 73 74 2E 6C 6F 63 61 6C /localho st.local
[060] 64 6F 6D 61 69 6E 40 4D 41 53 53 49 56 45 47 45 domain at M ASSIVEGE
[070] 45 4B 2E 4C 4F 43 41 4C EK.LOCAL
Password:
Doing spnego session setup (blob length=120)
got OID=1 2 840 113554 1 2 2
got OID=1 2 840 48018 1 2 2
got OID=1 3 6 1 4 1 311 2 2 10
got principal=cifs/localhost.localdomain at MASSIVEGEEK.LOCAL
write_socket(5,170)
write_socket(5,170) wrote 170
got smb length of 282
size=282
smb_com=0x73
smb_rcls=22
smb_reh=0
smb_err=49152
smb_flg=136
smb_flg2=51201
smb_tid=0
smb_pid=9062
smb_uid=100
smb_mid=2
smt_wct=4
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 0 (0x0)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 161 (0xA1)
smb_bcc=239
[000] A1 81 9E 30 81 9B A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+
[010] 06 01 04 01 82 37 02 02 0A A2 81 85 04 81 82 4E .....7.. .......N
[020] 54 4C 4D 53 53 50 00 02 00 00 00 16 00 16 00 30 TLMSSP.. .......0
[030] 00 00 00 15 02 89 60 B7 EB CE F5 1D 0A D1 A4 00 ......`. ........
[040] 00 00 00 00 00 00 00 3C 00 3C 00 46 00 00 00 4D .......< .<.F...M
[050] 00 41 00 53 00 53 00 49 00 56 00 45 00 47 00 45 .A.S.S.I .V.E.G.E
[060] 00 45 00 4B 00 02 00 16 00 4D 00 41 00 53 00 53 .E.K.... .M.A.S.S
[070] 00 49 00 56 00 45 00 47 00 45 00 45 00 4B 00 01 .I.V.E.G .E.E.K..
[080] 00 12 00 4D 00 47 00 47 00 52 00 59 00 50 00 48 ...M.G.G .R.Y.P.H
[090] 00 4F 00 4E 00 04 00 00 00 03 00 00 00 00 00 00 .O.N.... ........
[0A0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m
[0B0] 00 62 00 61 00 20 00 33 00 2E 00 30 00 2E 00 32 .b.a. .3 ...0...2
[0C0] 00 33 00 61 00 2D 00 31 00 2E 00 66 00 63 00 35 .3.a.-.1 ...f.c.5
[0D0] 00 2E 00 31 00 00 00 4D 00 41 00 53 00 53 00 49 ...1...M .A.S.S.I
[0E0] 00 56 00 45 00 47 00 45 00 45 00 4B 00 00 00 .V.E.G.E .E.K...
size=282
smb_com=0x73
smb_rcls=22
smb_reh=0
smb_err=49152
smb_flg=136
smb_flg2=51201
smb_tid=0
smb_pid=9062
smb_uid=100
smb_mid=2
smt_wct=4
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 0 (0x0)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 161 (0xA1)
smb_bcc=239
[000] A1 81 9E 30 81 9B A0 03 0A 01 01 A1 0C 06 0A 2B ...0.... .......+
[010] 06 01 04 01 82 37 02 02 0A A2 81 85 04 81 82 4E .....7.. .......N
[020] 54 4C 4D 53 53 50 00 02 00 00 00 16 00 16 00 30 TLMSSP.. .......0
[030] 00 00 00 15 02 89 60 B7 EB CE F5 1D 0A D1 A4 00 ......`. ........
[040] 00 00 00 00 00 00 00 3C 00 3C 00 46 00 00 00 4D .......< .<.F...M
[050] 00 41 00 53 00 53 00 49 00 56 00 45 00 47 00 45 .A.S.S.I .V.E.G.E
[060] 00 45 00 4B 00 02 00 16 00 4D 00 41 00 53 00 53 .E.K.... .M.A.S.S
[070] 00 49 00 56 00 45 00 47 00 45 00 45 00 4B 00 01 .I.V.E.G .E.E.K..
[080] 00 12 00 4D 00 47 00 47 00 52 00 59 00 50 00 48 ...M.G.G .R.Y.P.H
[090] 00 4F 00 4E 00 04 00 00 00 03 00 00 00 00 00 00 .O.N.... ........
[0A0] 00 55 00 6E 00 69 00 78 00 00 00 53 00 61 00 6D .U.n.i.x ...S.a.m
[0B0] 00 62 00 61 00 20 00 33 00 2E 00 30 00 2E 00 32 .b.a. .3 ...0...2
[0C0] 00 33 00 61 00 2D 00 31 00 2E 00 66 00 63 00 35 .3.a.-.1 ...f.c.5
[0D0] 00 2E 00 31 00 00 00 4D 00 41 00 53 00 53 00 49 ...1...M .A.S.S.I
[0E0] 00 56 00 45 00 47 00 45 00 45 00 4B 00 00 00 .V.E.G.E .E.K...
Got challenge flags:
Got NTLMSSP neg_flags=0x60890215
NTLMSSP_NEGOTIATE_UNICODE
NTLMSSP_REQUEST_TARGET
NTLMSSP_NEGOTIATE_SIGN
NTLMSSP_NEGOTIATE_NTLM
NTLMSSP_NEGOTIATE_NTLM2
NTLMSSP_CHAL_TARGET_INFO
NTLMSSP_NEGOTIATE_128
NTLMSSP_NEGOTIATE_KEY_EXCH
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x60080215
NTLMSSP_NEGOTIATE_UNICODE
NTLMSSP_REQUEST_TARGET
NTLMSSP_NEGOTIATE_SIGN
NTLMSSP_NEGOTIATE_NTLM
NTLMSSP_NEGOTIATE_NTLM2
NTLMSSP_NEGOTIATE_128
NTLMSSP_NEGOTIATE_KEY_EXCH
NTLMSSP challenge set by NTLM2
challenge is:
[000] 60 B9 10 A6 56 3D A4 68 `...V=.h
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x60080215
NTLMSSP_NEGOTIATE_UNICODE
NTLMSSP_REQUEST_TARGET
NTLMSSP_NEGOTIATE_SIGN
NTLMSSP_NEGOTIATE_NTLM
NTLMSSP_NEGOTIATE_NTLM2
NTLMSSP_NEGOTIATE_128
NTLMSSP_NEGOTIATE_KEY_EXCH
write_socket(5,290)
write_socket(5,290) wrote 290
got smb length of 130
size=130
smb_com=0x73
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=0
smb_pid=9062
smb_uid=101
smb_mid=3
smt_wct=4
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 0 (0x0)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 9 (0x9)
smb_bcc=87
[000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x
[010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3
[020] 00 2E 00 30 00 2E 00 32 00 33 00 61 00 2D 00 31 ...0...2 .3.a.-.1
[030] 00 2E 00 66 00 63 00 35 00 2E 00 31 00 00 00 4D ...f.c.5 ...1...M
[040] 00 41 00 53 00 53 00 49 00 56 00 45 00 47 00 45 .A.S.S.I .V.E.G.E
[050] 00 45 00 4B 00 00 00 .E.K...
size=130
smb_com=0x73
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=0
smb_pid=9062
smb_uid=101
smb_mid=3
smt_wct=4
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 0 (0x0)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 9 (0x9)
smb_bcc=87
[000] A1 07 30 05 A0 03 0A 01 00 55 00 6E 00 69 00 78 ..0..... .U.n.i.x
[010] 00 00 00 53 00 61 00 6D 00 62 00 61 00 20 00 33 ...S.a.m .b.a. .3
[020] 00 2E 00 30 00 2E 00 32 00 33 00 61 00 2D 00 31 ...0...2 .3.a.-.1
[030] 00 2E 00 66 00 63 00 35 00 2E 00 31 00 00 00 4D ...f.c.5 ...1...M
[040] 00 41 00 53 00 53 00 49 00 56 00 45 00 47 00 45 .A.S.S.I .V.E.G.E
[050] 00 45 00 4B 00 00 00 .E.K...
Domain=[MASSIVEGEEK] OS=[Unix] Server=[Samba 3.0.23a-1.fc5.1]
session setup ok
write_socket(5,124)
write_socket(5,124) wrote 124
got smb length of 48
size=48
smb_com=0x75
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=9062
smb_uid=101
smb_mid=4
smt_wct=3
smb_vwv[ 0]= 255 (0xFF)
smb_vwv[ 1]= 0 (0x0)
smb_vwv[ 2]= 3 (0x3)
smb_bcc=7
[000] 49 50 43 00 00 00 00 IPC....
size=140
smb_com=0x32
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=8
smb_flg2=55297
smb_tid=1
smb_pid=9062
smb_uid=101
smb_mid=5
smt_wct=15
smb_vwv[ 0]= 72 (0x48)
smb_vwv[ 1]= 0 (0x0)
smb_vwv[ 2]= 2 (0x2)
smb_vwv[ 3]=16644 (0x4104)
smb_vwv[ 4]= 0 (0x0)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 0 (0x0)
smb_vwv[ 7]= 0 (0x0)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 72 (0x48)
smb_vwv[10]= 68 (0x44)
smb_vwv[11]= 0 (0x0)
smb_vwv[12]= 140 (0x8C)
smb_vwv[13]= 1 (0x1)
smb_vwv[14]= 16 (0x10)
smb_bcc=75
[000] 00 44 20 03 00 5C 00 6D 00 67 00 67 00 72 00 79 .D ..\.m .g.g.r.y
[010] 00 70 00 68 00 6F 00 6E 00 74 00 2E 00 6D 00 61 .p.h.o.n .t...m.a
[020] 00 73 00 73 00 69 00 76 00 65 00 67 00 65 00 65 .s.s.i.v .e.g.e.e
[030] 00 6B 00 2E 00 6C 00 6F 00 63 00 61 00 6C 00 5C .k...l.o .c.a.l.\
[040] 00 4D 00 50 00 33 00 73 00 00 00 .M.P.3.s ...
write_socket(5,144)
write_socket(5,144) wrote 144
got smb length of 308
size=308
smb_com=0x32
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=55361
smb_tid=1
smb_pid=9062
smb_uid=101
smb_mid=5
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 252 (0xFC)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 252 (0xFC)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=253
[000] 00 44 00 01 00 03 00 00 00 03 00 22 00 01 00 00 .D...... ..."....
[010] 00 58 02 00 00 22 00 68 00 AE 00 00 00 00 00 00 .X...".h ........
[020] 00 00 00 00 00 00 00 00 00 00 00 5C 00 6D 00 67 ........ ...\.m.g
[030] 00 67 00 72 00 79 00 70 00 68 00 6F 00 6E 00 74 .g.r.y.p .h.o.n.t
[040] 00 2E 00 6D 00 61 00 73 00 73 00 69 00 76 00 65 ...m.a.s .s.i.v.e
[050] 00 67 00 65 00 65 00 6B 00 2E 00 6C 00 6F 00 63 .g.e.e.k ...l.o.c
[060] 00 61 00 6C 00 5C 00 4D 00 50 00 33 00 73 00 00 .a.l.\.M .P.3.s..
[070] 00 5C 00 6D 00 67 00 67 00 72 00 79 00 70 00 68 .\.m.g.g .r.y.p.h
[080] 00 6F 00 6E 00 74 00 2E 00 6D 00 61 00 73 00 73 .o.n.t.. .m.a.s.s
[090] 00 69 00 76 00 65 00 67 00 65 00 65 00 6B 00 2E .i.v.e.g .e.e.k..
[0A0] 00 6C 00 6F 00 63 00 61 00 6C 00 5C 00 4D 00 50 .l.o.c.a .l.\.M.P
[0B0] 00 33 00 73 00 00 00 5C 00 6D 00 67 00 67 00 72 .3.s...\ .m.g.g.r
[0C0] 00 79 00 70 00 68 00 6F 00 6E 00 74 00 2E 00 6D .y.p.h.o .n.t...m
[0D0] 00 61 00 73 00 73 00 69 00 76 00 65 00 67 00 65 .a.s.s.i .v.e.g.e
[0E0] 00 65 00 6B 00 2E 00 6C 00 6F 00 63 00 61 00 6C .e.k...l .o.c.a.l
[0F0] 00 5C 00 4D 00 50 00 33 00 73 00 00 00 .\.M.P.3 .s...
size=308
smb_com=0x32
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=55361
smb_tid=1
smb_pid=9062
smb_uid=101
smb_mid=5
smt_wct=10
smb_vwv[ 0]= 0 (0x0)
smb_vwv[ 1]= 252 (0xFC)
smb_vwv[ 2]= 0 (0x0)
smb_vwv[ 3]= 0 (0x0)
smb_vwv[ 4]= 56 (0x38)
smb_vwv[ 5]= 0 (0x0)
smb_vwv[ 6]= 252 (0xFC)
smb_vwv[ 7]= 56 (0x38)
smb_vwv[ 8]= 0 (0x0)
smb_vwv[ 9]= 0 (0x0)
smb_bcc=253
[000] 00 44 00 01 00 03 00 00 00 03 00 22 00 01 00 00 .D...... ..."....
[010] 00 58 02 00 00 22 00 68 00 AE 00 00 00 00 00 00 .X...".h ........
[020] 00 00 00 00 00 00 00 00 00 00 00 5C 00 6D 00 67 ........ ...\.m.g
[030] 00 67 00 72 00 79 00 70 00 68 00 6F 00 6E 00 74 .g.r.y.p .h.o.n.t
[040] 00 2E 00 6D 00 61 00 73 00 73 00 69 00 76 00 65 ...m.a.s .s.i.v.e
[050] 00 67 00 65 00 65 00 6B 00 2E 00 6C 00 6F 00 63 .g.e.e.k ...l.o.c
[060] 00 61 00 6C 00 5C 00 4D 00 50 00 33 00 73 00 00 .a.l.\.M .P.3.s..
[070] 00 5C 00 6D 00 67 00 67 00 72 00 79 00 70 00 68 .\.m.g.g .r.y.p.h
[080] 00 6F 00 6E 00 74 00 2E 00 6D 00 61 00 73 00 73 .o.n.t.. .m.a.s.s
[090] 00 69 00 76 00 65 00 67 00 65 00 65 00 6B 00 2E .i.v.e.g .e.e.k..
[0A0] 00 6C 00 6F 00 63 00 61 00 6C 00 5C 00 4D 00 50 .l.o.c.a .l.\.M.P
[0B0] 00 33 00 73 00 00 00 5C 00 6D 00 67 00 67 00 72 .3.s...\ .m.g.g.r
[0C0] 00 79 00 70 00 68 00 6F 00 6E 00 74 00 2E 00 6D .y.p.h.o .n.t...m
[0D0] 00 61 00 73 00 73 00 69 00 76 00 65 00 67 00 65 .a.s.s.i .v.e.g.e
[0E0] 00 65 00 6B 00 2E 00 6C 00 6F 00 63 00 61 00 6C .e.k...l .o.c.a.l
[0F0] 00 5C 00 4D 00 50 00 33 00 73 00 00 00 .\.M.P.3 .s...
write_socket(5,39)
write_socket(5,39) wrote 39
got smb length of 35
size=35
smb_com=0x71
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=1
smb_pid=9062
smb_uid=101
smb_mid=6
smt_wct=0
smb_bcc=0
write_socket(5,126)
write_socket(5,126) wrote 126
got smb length of 35
size=35
smb_com=0x75
smb_rcls=34
smb_reh=0
smb_err=49152
smb_flg=136
smb_flg2=51201
smb_tid=0
smb_pid=9062
smb_uid=101
smb_mid=7
smt_wct=0
smb_bcc=0
lang_tdb_init: /usr/lib/samba/en_US.UTF-8.msg: No such file or directory
tree connect failed: NT_STATUS_ACCESS_DENIED
Nolan
Gary Dale wrote:
> Nolan Garrett wrote:
>> Gary Dale wrote:
>>
>>> Nolan Garrett wrote:
>>>
>>>> I have a linux box, Samba 3.0.23a, that is joined to a W2K3 domain.
>>>> I cannot connect to the "MP3s" share (all legal!) on this system - I
>>>> can connect to home directories and printers. When I try to connect
>>>> to MP3s as any user on the domain, I get an Access is denied message,
>>>> or it prompts me for the username and password again. I am using
>>>> Winbind (if that matters), so none of these accounts exist locally on
>>>> the system.
>>>>
>>>> Here is the applicable part of my smb.conf: [MP3s] path =
>>>> /home/samba/MP3s ; writeable = no browseable = yes valid users
>>>> = @"MASSIVEGEEK+Domain Users" writeable = yes
>>>>
>>>> And here is the actual file permissions: drwxrwx--- 93 root domain
>>>> users 4096 Jul 14 18:54 MP3s
>>>>
>>>> Any ideas here? I've tried connecting from several different systems
>>>> (XP, 2003, Linux), with no luck. Here is output from smbclient:
>>>>
>>>> [root at mgprisvr ~]# smbclient //mggryphont.massivegeek.local/MP3s -U
>>>> MASSIVEGEEK\\mgwinxpvm1vpn -d 2 added interface ip=192.168.0.1
>>>> bcast=192.168.0.255 nmask=255.255.255.0 added interface ip=127.0.0.1
>>>> bcast=127.255.255.255 nmask=255.0.0.0 Password: Domain=[MASSIVEGEEK]
>>>> OS=[Unix] Server=[Samba 3.0.23a-1.fc5.1] tree connect failed:
>>>> NT_STATUS_ACCESS_DENIED
>>>>
>>>> Thank you!
>>>>
>>>> Nolan
>>>>
>>>>
>>> Your valid users looks a little funny. Have you tried
>>>
>>> valid users = @"Domain Users"
>>>
>>> instead?
>>>
>>> I'm assuming that your server is a member of the domain.
>>>
>>
>> Yeah, the server is a member of the domain. I tried that line above, no
>> luck either. I've also tried it with no "valid users" line, but still
>> no luck. I did find this in the logs:
>>
>> [2006/07/28 10:37:12, 0] smbd/service.c:make_connection_snum(773)
>> make_connection: connection to MP3s denied due to security descriptor.
>>
>> Any idea what that means?
>>
>> Here's my [global]:
>>
>> [global]
>> workgroup = MASSIVEGEEK
>> server string = Samba Server
>> printcap name = /etc/printcap
>> load printers = yes
>> printer admin = MASSIVEGEEK+ngarrett MASSIVEGEEK+Administrator
>> root
>> cups options = raw
>> log file = /var/log/samba/%m.log
>> max log size = 50
>> security = ADS
>> realm = MASSIVEGEEK.LOCAL
>> socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>> dns proxy = no
>> idmap uid = 16777216-33554431
>> idmap gid = 16777216-33554431
>> template shell = /bin/bash
>> winbind use default domain = yes
>> username map = /etc/samba/smbusers
>> winbind separator = +
>> winbind enum users = yes
>> winbind enum groups = yes
>> template homedir = /home/winnt/%D/%U
>> admin users = @"MASSIVEGEEK+Domain Admins"
>>
>> Thanks!
>>
>>
> Sorry, you've passed beyond my level of expertise here with Kerberos and
> ADS.
>
> I can suggest you try some simple things like bumping up your log level
> and doing some testing. Perhaps try a share connecting as a user where
> the user is local as well as a domain user. The message looks like it is
> complaining about security, so I suspect it isn't getting the
> information it expects from your DC (if it is even communicating with it).
>
More information about the samba
mailing list