[Samba] NT_STATUS_LOGON_FAILURE after upgrading 3.2.4 to 3.2.6

Petri Sukunimi werrew74 at suomi24.fi
Sat Dec 13 13:59:09 GMT 2008


Hello

I have strange authentication problem. My distribution is Centos 5.2 
and it`s 64 bit.

I Have compiled Samba 3.2.4 from source with following configure 
options:

--with-logfilebase=/var/log/samba \
--with-configdir=/etc/samba \
--with-piddir=/var/run \
--enable-cups \
--with-acl-support \
--with-ads \
--with-automount \
--with-fhs \
--with-pam \
--with-pam_smbpass \
--with-libsmbclient \
--with-libsmbsharemodes \
--without-smbwrapper \
--with-quotas \
--with-shared-modules=idmap_rid,idmap_ad \
--with-syslog \
--with-utmp \
--with-dnsupdate


smb.conf is following
[global]
workgroup = XXXX
netbios name = XXXXX
server string = Samba Server %v

# interfaces = xxx.xxx.xxx.xxx/32 127.0.0.1
interfaces = eth1, lo
bind interfaces only = Yes


passdb backend = tdbsam
pam password change = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*Password* %n\n *Re-enter*new*password*%n\n 
*Password*changed*
username map = /etc/samba/smbusers
unix password sync = Yes
smb ports = 139
name resolve order = wins bcast hosts
time server = Yes

load printers = no
printing = bsd
printcap name = /dev/null
disable spoolss = yes

# printcap name = CUPS
# show add printer wizard = No

add user script = /usr/sbin/useradd -m '%u'
delete user script = /usr/sbin/userdel -r '%u'
add group script = /usr/sbin/groupadd '%g'
delete group script = /usr/sbin/groupdel '%g'
add user to group script = /usr/sbin/usermod -G '%g' '%u'
add machine script = /usr/sbin/useradd -s /bin/false -d /tmp '%u'
shutdown script = /var/lib/samba/scripts/shutdown.sh
abort shutdown script = /sbin/shutdown -c

utmp = Yes
printing = cups
cups options = Raw
veto files = /*.eml/*.nws/*.{*}/
veto oplock files = /*.doc/*.xls/*.mdb/

#
# Various other directives ( man smb.conf )
####################################################
obey pam restrictions = Yes
#logon script = logon.bat
logon script = scripts\logon.bat
logon path = \\%L\Profiles\%U
logon drive = Z:
logon home = \\%L\%U
domain logons = Yes
os level = 99
preferred master = Yes
domain master = Yes
dont descend = /proc,/dev,/etc,/lib,/lost+found,/initrd
# show add printer wizard = no
show add printer wizard = yes

wins support = Yes
smb ports = 139 445


# Defining logging facility
####################################################
log level = 1
log file = /var/log/samba/%m.log
max log size = 1024

# Virus Scanning Definition
####################################################
# vfs object = vscan-clamav
# vscan-clamav: config-file = /etc/samba/vscan-clamav.conf

# We are time server
time server = Yes
map acl inherit = Yes

# Finish characters working
dos charset = 850
unix charset = ISO8859-1

#Some extra security
[IPC$]
   path = /tmp
   hosts allow = 192.168.2.0/24, 127.0.0.1
   hosts deny = 0.0.0.0/0

[homes]
comment = Home Directories
valid users = %S
read only = No
browseable = No

[xxxx]
   comment = comment
   path = /home/samba/groups/mallit
   writable = yes
   printable = no
   browseable = yes
   create mode = 0770
   directory mode = 0770
   valid users = @slaves
   force user = master
   force group = master


Samba 3.2.4 works just fine but when I compile 3.2.6 version with same 
options I cannot access shares (xxxx) anymore and when I use for 
example:
smbclient //machine/XXXX -U username -p password

Response is: session setup failed: NT_STATUS_LOGON_FAILURE

I even make the passdb.tdb and secrets.tdb files again without any 
help.

Second question is, do I have to make machine account for Samba 
server?

Any help?

Pete  










More information about the samba mailing list