[Samba] [SOLVED] Re: Active Directory authentication no longer works

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dan O'Brien wrote:

> After days of banging my head against my desk we've managed 
> to find the cause of the issue.  The problem was in the group policy
> on the domain controllers, under
> "Default Domain Controller Security Settings" -> Local Policies ->
> Security Options":
>
> Allow anonymous SID/Name translation:  Was set to disabled
> Do not allow anonymous enumeration of SAM accounts and Shares: 
> Was Enabled
> 
> once we changed these (and disabled the "No Override" bit 
> on the default domain policy). Everything started working again.

That's only masking the connection problem between Samba
and the DC I'm afraid.  I would love to see the network
traces of the failures from pam_winbind.





cheers, jerry
=====================================================================
Samba                                    ------- http://www.samba.org
Centeris                         -----------  http://www.centeris.com
"What man is a man who does not make the world better?"      --Balian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFGU2eMIR7qMdg1EfYRAnVFAJ0ZjyUr/7ilri1zXcRSOSFfi1vzWACfUS/U
oKaQfRYPdzXyiJAWs1oamHU=
=73p1
-----END PGP SIGNATURE-----