[Samba] ADS Trouble authorizing users.

Chris Bolton cbolton at rarr.org.uk
Thu Aug 28 12:55:34 GMT 2008

Hi all,

I've set up a CentOS machine with samba version 3.0.28-1.el5_2.1 to join a
Windows 2003 ADS.  Everything seemed to go fine while joining the domain:

[root at mailserver ~]# net ads join -U administrator
administrator's password:
Using short domain name -- MYDOMAIN

The trouble I'm having is authorizing users.

When connecting the the CentOS machine from a windows XP machine it pops up
a username and password dialog.  Entering in my details just pops it up
again as it would if I'd entered them incorrectly.  Nothing is recored in
the logs on the CentOS machine (either in /var/log/messages or
/var/log/samba/smbd.log) and I am unable to procced.

If I try a username in the dialog box that does not exist on the domain I
get an error in /var/log/messages:

Aug 28 12:58:06 mailserver smbd[23786]: [2008/08/28 12:58:06, 0]
Aug 28 12:58:06 mailserver smbd[23786]:   domain_client_validate: unable to
validate password for user dave in domain MYDOMAIN to Domain controller

I'm guessing its a problem with the way the CentOS machine is passing on the
logon details but without an error message I'm a bit stuck.  Any help would
be greatful.


Config files below:


 default = FILE:/var/log/krb5libs.log
 kdc = FILE:/var/log/krb5kdc.log
 admin_server = FILE:/var/log/kadmind.log

 default_realm = MYDOMAIN.LOCAL
 dns_lookup_realm = false
 dns_lookup_kdc = false
 ticket_lifetime = 24h
 forwardable = yes

  kdc = mans01
  admin_server = mans01
  default_domain = mydomain.local

 .mydomain.local = MYDOMAIN.LOCAL
 mydomain.local = MYDOMAIN.LOCAL

 pam = {
   debug = false
   ticket_lifetime = 36000
   renew_lifetime = 36000
   forwardable = true
   krb4_convert = false



workgroup = MYDOMAIN
netbios name = mailserver
server string = Samba Server 3.0
security = ads
password server = mans01
encrypt passwords = yes
printcap name = /etc/printcap
load printers = yes
printing = cups
log file = /var/log/samba/%m.log
max log size = 0
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
local master = no
domain master = no
preferred master = no
dns proxy = no

#============================ Share Definitions

  comment = Share
  path = /home/public
  public = yes
  writable = yes
  printable = no

More information about the samba mailing list