[Samba] tree connect failled: ERRDOS - ERRnoaccess (Access denied.)

[Felipe Augusto van de Wiel]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 01/26/2007 02:23 PM, GNUtoo at no-log.org wrote:
> On 01/24/2007 07:22 PM, GNUtoo at no-log.org escreveu:
>>>> i have recently switched to ldap backend for passwords
>>>> smbldap-useradd,smbldap-passwd works without error messages...
>>>> but when i try to connect from linux it gives me the following error
>>>> XXXXX:tree connect failled: ERRDOS - ERRnoaccess (Access denied.)
>>>> XXXXX can be remplaced with diffferent numbers such as
>>>> 10270
>>>> 11202
>>>> 11318
>>>> 11750
>>>> ...evry time the number of the errors change i don't know why
>>>>
>>>> i have only tryed it with username that are valid unix usernames
>>>> (i don't know if smbldap create the unix usernames for me) and the samba
>>>> and unix password are the same

[...]

> here my smb.conf

> [photos_modif]
>    comment = private stuff
>    path = /home/gentux/Pictures
>    valid users = samba gentux
>    public = no
>    writable = no
>    printable = no


> [home]
>    comment = private stuff
>    path = /home
>    valid users = gentux
>    public = no
>    writable = no
>    printable = no


	Well, you don't need to share [home] like that, you
can use [homes] instead. And samba and gentux do not have
the 'samba' object class.


> here all my ldap entries:
[...]
> # root, Users, GNUtoo.org
> dn: uid=root,ou=Users,dc=GNUtoo,dc=org
> cn: root
> sn: root
> objectClass: inetOrgPerson
> objectClass: sambaSamAccount
> objectClass: posixAccount
> objectClass: shadowAccount
> gidNumber: 0
> uid: root
> uidNumber: 0
> homeDirectory: /home/root
> sambaLogonTime: 0
> sambaLogoffTime: 2147483647
> sambaKickoffTime: 2147483647
> sambaPwdCanChange: 0
> sambaHomePath: \\PDC-SRV\root
> sambaHomeDrive: H:
> sambaProfilePath: \\PDC-SRV\profiles\root
> sambaPrimaryGroupSID: S-1-5-21-4205727931-4131263253-1851132061-512
> sambaSID: S-1-5-21-4205727931-4131263253-1851132061-500
> loginShell: /bin/false
> gecos: Netbios Domain Administrator
> sambaLMPassword: 600A867539982BF08E5D533411003C5C
> sambaAcctFlags: [U]
> sambaNTPassword: 2B4FE695A07847E3F92A21A30541CAD7
> sambaPwdLastSet: 1169673792
> sambaPwdMustChange: 1173561792
> userPassword:: e1NTSEF9Mnc0aVFUcEgxdTFjOC9ycFd3ZG5kUUs3OGZFMVV6RlE=


> # samba, Users, GNUtoo.org
> dn: uid=samba,ou=Users,dc=GNUtoo,dc=org
> objectClass: top
> objectClass: inetOrgPerson
> objectClass: posixAccount
> objectClass: shadowAccount
> cn: samba
> sn: samba
> uid: samba
> uidNumber: 1002
> gidNumber: 513
> homeDirectory: /home/samba
> loginShell: /bin/bash
> gecos: System User
> description: System User
> userPassword:: e1NTSEF9VTBtbEFvQ05uU3d5MkdDTS9TQjhjdTJ4NGdsdGNFOVM=

> # gentux, Users, GNUtoo.org
> dn: uid=gentux,ou=Users,dc=GNUtoo,dc=org
> objectClass: top
> objectClass: inetOrgPerson
> objectClass: posixAccount
> objectClass: shadowAccount
> cn: gentux
> sn: gentux
> uid: gentux
> uidNumber: 1006
> gidNumber: 513
> homeDirectory: /home/gentux
> loginShell: /bin/bash
> gecos: System User
> description: System User
> userPassword:: e1NTSEF9RzNkU2FQckNHL1FVTG1sdmhycS8zQU8zbzc4eGFrVkk=

	Why 'samba' and 'gentux' users do not have an sambaSAMAccount?
They need that info in order to access your samba resources.


> the problem is that i don't see any error logs but the logs of my
> ldapsearch...

	Perhaps you should increase the loglevel of your smb.conf
and check the common log files found in /var/log.


	Kind regards,

- --
Felipe Augusto van de Wiel <felipe at paranacidade.org.br>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/           Phone: (+55 41 3350 3300)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFvfGCCj65ZxU4gPQRAtuIAKCKyqrnRLS+tGinzQv782KRRrmDjACeMdPF
QiQHjlSi50a3V8xMlQhfVSY=
=yGA+
-----END PGP SIGNATURE-----