[Samba] Problem using ADS

Dave Jones opensamba.deb at gmail.com
Thu Apr 12 12:04:44 GMT 2007


Hi,
I have configured samba to authenticate against a windows 2003 AD. There is
no error joining to the domain ..
If I try to access any share using smbclient using an existing user account
from the AD, it returns an error "NT_STATUS_LOGON_FAILURE".
On adding the same user to local machine (/etc/passwd), the smbclient logs
in and displays all information properly.

Is this the usual behavior or did I forget configuring something ?
Dave Jones
Samba version : samba-3.0.25pre2 running on SLES 10

smb.conf :

[global]
security = ADS
workgroup = NEWLIFE
realm = NEWLIFE.COM
idmap gid = 20000-25000
idmap uid = 30000-40000
winbind separator  = +
password server = 192.168.32.1
use spnego = no
kernel oplocks = no

[tmp]
path = /tmp
writeable = yes

 # ./net ads join -Uadministrator%TesTing123
Using short domain name -- NEWLIFE
Joined 'rhel-4' to realm 'NEWLIFE.COM'

# ./smbclient -k -UNEWLIFE+Administrator%happy123 //192.168.32.40/tmp
session setup failed: NT_STATUS_LOGON_FAILURE

 # cat /etc/passwd | grep user1
user1:x:1000:100::/home/user1:/bin/bash

#./smbclient -k -UNEWLIFE+user1%happy //192.168.32.40/tmp

Domain=[NEWLIFE] OS=[Unix] Server=[Samba 3.0.25pre2]
smb: \>

# ping 192.168.32.40
PING 192.168.32.40 (192.168.32.40) 56(84) bytes of data.
64 bytes from 192.168.32.40: icmp_seq=1 ttl=64 time=3.74 ms
64 bytes from 192.168.32.40: icmp_seq=2 ttl=64 time=0.257 ms
64 bytes from 192.168.32.40: icmp_seq=3 ttl=64 time=0.269 ms

--- 192.168.32.40 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2004ms
rtt min/avg/max/mdev = 0.257/1.424/3.747/1.642 ms

Thanks in advance.


More information about the samba mailing list