[Samba] Domain authentication not working
Daniel Kasak
dkasak at nusconsulting.com.au
Mon May 21 01:46:09 GMT 2007
Hi all.
I'm trying to share a printer out via samba, and it's suddenly stopped
working. Samba says it's connecting to the DC, but then returning
NT_STATUS_NO_SUCH_USER. It wasn't doing this earlier today. I haven't
changed anything in the top half of the smb.conf file ... only the
print-related stuff. Any ideas?
The log is saying:
[2007/05/21 11:40:26, 3] smbd/process.c:process_smb(1110)
Transaction 8 of length 210
[2007/05/21 11:40:26, 3] smbd/process.c:switch_message(914)
switch message SMBsesssetupX (pid 21422) conn 0x0
[2007/05/21 11:40:26, 3] smbd/sec_ctx.c:set_sec_ctx(241)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2007/05/21 11:40:26, 3] smbd/sesssetup.c:reply_sesssetup_and_X(849)
wct=12 flg2=0xc807
[2007/05/21 11:40:26, 2] smbd/sesssetup.c:setup_new_vc_session(799)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
[2007/05/21 11:40:26, 3]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(660)
Doing spnego session setup
[2007/05/21 11:40:26, 3]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(691)
NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0]
PrimaryDomain=[]
[2007/05/21 11:40:26, 3] smbd/sesssetup.c:reply_spnego_negotiate(551)
Got OID 1 3 6 1 4 1 311 2 2 10
[2007/05/21 11:40:26, 3] smbd/sesssetup.c:reply_spnego_negotiate(554)
Got secblob of size 40
[2007/05/21 11:40:26, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63)
Got NTLMSSP neg_flags=0xe2088297
[2007/05/21 11:40:26, 3] smbd/process.c:process_smb(1110)
Transaction 9 of length 338
[2007/05/21 11:40:26, 3] smbd/process.c:switch_message(914)
switch message SMBsesssetupX (pid 21422) conn 0x0
[2007/05/21 11:40:26, 3] smbd/sec_ctx.c:set_sec_ctx(241)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2007/05/21 11:40:26, 3] smbd/sesssetup.c:reply_sesssetup_and_X(849)
wct=12 flg2=0xc807
[2007/05/21 11:40:26, 2] smbd/sesssetup.c:setup_new_vc_session(799)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
[2007/05/21 11:40:26, 3]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(660)
Doing spnego session setup
[2007/05/21 11:40:26, 3]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(691)
NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0]
PrimaryDomain=[]
[2007/05/21 11:40:26, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(672)
Got user=[administrator] domain=[NUSAUS] workstation=[VMDKASAK]
len1=24 len2=24
[2007/05/21 11:40:26, 3] libsmb/namequery.c:get_dc_list(1426)
get_dc_list: preferred server list: "NUS_AUST_NT, *"
[2007/05/21 11:40:26, 3] libsmb/namequery_dc.c:rpc_dc_name(117)
rpc_dc_name: Returning DC NUS_AUST_NT (10.146.0.2) for domain NUSAUS
[2007/05/21 11:40:26, 3] libsmb/cliconnect.c:cli_start_connection(1426)
Connecting to host=NUS_AUST_NT
[2007/05/21 11:40:26, 3] lib/util_sock.c:open_socket_out(874)
Connecting to 10.146.0.2 at port 445
[2007/05/21 11:40:26, 2] lib/util_sock.c:open_socket_out(911)
error connecting to 10.146.0.2:445 (Connection refused)
[2007/05/21 11:40:26, 3] lib/util_sock.c:open_socket_out(874)
Connecting to 10.146.0.2 at port 139
[2007/05/21 11:40:26, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081)
rpc_pipe_bind: Remote machine NUS_AUST_NT pipe \lsarpc fnum 0x380b
bind request returned ok.
[2007/05/21 11:40:26, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(224)
lsa_io_sec_qos: length c does not match size 8
[2007/05/21 11:40:26, 3] auth/auth.c:check_ntlm_password(221)
check_ntlm_password: Checking password for unmapped user
[NUSAUS]\[administrator]@[VMDKASAK] with the new password interface
[2007/05/21 11:40:26, 3] auth/auth.c:check_ntlm_password(224)
check_ntlm_password: mapped user is:
[NUSAUS]\[administrator]@[VMDKASAK]
[2007/05/21 11:40:26, 3] smbd/sec_ctx.c:push_sec_ctx(208)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2007/05/21 11:40:26, 3] smbd/uid.c:push_conn_ctx(345)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2007/05/21 11:40:26, 3] smbd/sec_ctx.c:set_sec_ctx(241)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2007/05/21 11:40:26, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2007/05/21 11:40:26, 3] libsmb/namequery.c:get_dc_list(1426)
get_dc_list: preferred server list: "NUS_AUST_NT, *"
[2007/05/21 11:40:26, 3] libsmb/namequery_dc.c:rpc_dc_name(117)
rpc_dc_name: Returning DC NUS_AUST_NT (10.146.0.2) for domain NUSAUS
[2007/05/21 11:40:26, 3] libsmb/cliconnect.c:cli_start_connection(1426)
Connecting to host=NUS_AUST_NT
[2007/05/21 11:40:26, 3] lib/util_sock.c:open_socket_out(874)
Connecting to 10.146.0.2 at port 445
[2007/05/21 11:40:26, 2] lib/util_sock.c:open_socket_out(911)
error connecting to 10.146.0.2:445 (Connection refused)
[2007/05/21 11:40:26, 3] lib/util_sock.c:open_socket_out(874)
Connecting to 10.146.0.2 at port 139
[2007/05/21 11:40:26, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081)
rpc_pipe_bind: Remote machine NUS_AUST_NT pipe \NETLOGON fnum 0x980a
bind request returned ok.
[2007/05/21 11:40:26, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081)
rpc_pipe_bind: Remote machine NUS_AUST_NT pipe \NETLOGON fnum 0x980b
bind request returned ok.
[2007/05/21 11:40:26, 2] auth/auth.c:check_ntlm_password(319)
check_ntlm_password: Authentication for user [administrator] ->
[administrator] FAILED with error NT_STATUS_NO_SUCH_USER
[2007/05/21 11:40:26, 3] smbd/error.c:error_packet(146)
error packet at smbd/sesssetup.c(99) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
[2007/05/21 11:40:26, 3] smbd/process.c:process_smb(1110)
Transaction 10 of length 43
[2007/05/21 11:40:26, 3] smbd/process.c:switch_message(914)
switch message SMBulogoffX (pid 21422) conn 0x0
[2007/05/21 11:40:26, 3] smbd/sec_ctx.c:set_sec_ctx(241)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2007/05/21 11:40:26, 3] smbd/reply.c:reply_ulogoffX(1607)
ulogoff, vuser id 102 does not map to user.
[2007/05/21 11:40:26, 3] smbd/reply.c:reply_ulogoffX(1618)
ulogoffX vuid=102
The smb.conf file:
[global]
security = domain
workgroup = NUSAUS
wins server = 10.146.0.2
domain master = no
domain logons = no
local master = no
preferred master = no
server string = Samba Server %v
passdb backend = tdbsam
encrypt passwords = yes
log level = 3
log file = /var/log/samba/log.%m
max log size = 50
name resolve order = wins lmhosts bcast
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
printcap name = cups
os level = 0
keep alive = 60
wins support = yes
printing = cups
load printers = yes
[print$]
comment = Printer Drivers
path = /etc/samba/printer # this path holds the driver structure
guest ok = yes
browseable = yes
read only = yes
# Modify this to "username,root" if you don't want root to
# be the only printer admin)
write list = root
[printers]
comment = All Printers
browseable = no
printable = yes
writable = no
public = yes
guest ok = yes
path = /var/spool/samba
# Modify this to "username,root" if you don't want root to
# be the only printer admin)
printer admin = root
--
Daniel Kasak
IT Developer
NUS Consulting Group
Level 5, 77 Pacific Highway
North Sydney, NSW, Australia 2060
T: (+61) 2 9922-7676 / F: (+61) 2 9922 7989
email: dkasak at nusconsulting.com.au
website: http://www.nusconsulting.com.au
More information about the samba
mailing list