[Samba] AD-Shares not accessible with 3.0.31
Jens Nissen
jens.nissen at gmx.net
Fri Jul 18 13:50:21 GMT 2008
Starting with version 3.0.31, it is not possible to access shares on a
Windows Server 2000 SP4, even though it is possible to join the domain
controlled by that Server.
The same configuration worked "fine" (for one hour) with 3.0.30.
What has changed? What do I need to configure or compile differently to
get back to 3.0.2x behaviour?
The commands
#> wbinfo -u
#> wbinfo -g
#> wbinfo -a DOMAIN\\Administrator%PASS
#> wbinfo -t
#> net ads testjoin -s /path_to_config
all work fine.
Replacing the 3.0.31 files one by one with 3.0.30 files again gives me a
somewhat working system, so it it must be something with 3.0.31.
Not my day :-(
The error log looks like this:
[2008/07/18 15:34:43, 10] smbd/sesssetup.c:reply_spnego_kerberos(364)
Mapped to [DOMAIN] (using PAC)
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_alloc(131)
Finding user DOMAIN\Administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(75)
Trying _Get_Pwnam(), username as lowercase is candeo\administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(83)
Trying _Get_Pwnam(), username as given is DOMAIN\Administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(93)
Trying _Get_Pwnam(), username as uppercase is DOMAIN\ADMINISTRATOR
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(102)
Checking combinations of 0 uppercase letters in candeo\administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(108)
Get_Pwnam_internals didn't find user [DOMAIN\Administrator]!
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_alloc(131)
Finding user Administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(75)
Trying _Get_Pwnam(), username as lowercase is administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(83)
Trying _Get_Pwnam(), username as given is Administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(93)
Trying _Get_Pwnam(), username as uppercase is ADMINISTRATOR
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(102)
Checking combinations of 0 uppercase letters in administrator
[2008/07/18 15:34:43, 5] lib/username.c:Get_Pwnam_internals(108)
Get_Pwnam_internals didn't find user [Administrator]!
[2008/07/18 15:34:43, 10] nsswitch/winbindd.c:process_request(321)
process_request: request fn PING
[2008/07/18 15:34:43, 3] nsswitch/winbindd_misc.c:winbindd_ping(470)
[ 2360]: ping
[2008/07/18 15:34:43, 1] smbd/sesssetup.c:reply_spnego_kerberos(439)
Username DOMAIN\Administrator is invalid on this system
[2008/07/18 15:34:43, 3] smbd/error.c:error_packet_set(106)
error packet at smbd/sesssetup.c(444) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
[2008/07/18 15:34:43, 5] lib/util.c:show_msg(484)
[2008/07/18 15:34:43, 5] lib/util.c:show_msg(494)
size=35
smb_com=0x73
smb_rcls=109
smb_reh=0
smb_err=49152
smb_flg=136
smb_flg2=51201
smb_tid=0
smb_pid=65279
smb_uid=101
smb_mid=33152
smt_wct=0
smb_bcc=0
[global]
dos charset = ISO-8859-1
unix charset = ISO-8859-1
display charset = ISO-8859-1
workgroup = DOMAIN
realm = DOMAIN.TEST
server string = intradisk NASdrive (IP:%$(IPADDR))
interfaces = ixp0
security = ADS
allow trusted domains = No
password server = sbs2000.candeo.test
private dir = /var/lib/adsamba/private
passdb backend = tdbsam
guest account = samba
log level = 6
log file = /var/log/adsamba/smblog.ad
max log size = 0
name resolve order = wins bcast host
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE
SO_RCVBUF=8192 SO_SNDBUF=8192
load printers = No
show add printer wizard = No
preferred master = No
local master = No
domain master = No
wins server = 192.168.1.4
idmap uid = 1000-60000
idmap gid = 1000-60000
winbind enum users = Yes
winbind enum groups = Yes
winbind offline logon = Yes
admin users = DOMAIN\\Administrator
ea support = Yes
More information about the samba
mailing list