[Samba] Accessing member server prompts for credentials

[devel at thom.fr.eu.org]

Do you have the "unix password sync" set to yes in smb.conf
If yes, maybe you're in trouble with the password chat. I had the problem
on my debian systems were using the default "passwd chat" value did not
work because it expects *changed* and my system returned updated.

> I'm still struggling with this if anyone can help.
>
> I'm back tracking through the HOWTO and realised that I hadn't created
> a machine trust account.
>
> So I've done:
>  # groupadd machines
>  # /usr/sbin/useradd -g machines -d /var/lib/nobody -c "Test Server" -s
> /bin/false server1
>  # passwd -l server1
>  Locking password for user server1.
>  # smbpasswd -a -m server1
>  Failed to modify password entry for user server1$
>
> Please can anyone tell me why this last step fails?
>
>>
>> From: Leon Stringer <leon.stringer at ntlworld.com>
>> Date: 2008/06/17 Tue AM 11:13:14 GMT
>> To: <samba at lists.samba.org>
>> Subject: [Samba] Accessing member server prompts for credentials
>>
>> Hi,
>>
>> I'm trying to join a server as an AD member but it isn't working.
>>
>> I do:
>>
>>  kinit ADMINISTRATOR at DOMAIN1.CO.UK
>>
>> which prompts for the password and displays nothing else. Then I do:
>>
>>  net ads join -U Administrator%XXXXX
>>
>> which returns:
>>
>>  Using short domain name -- DOMAIN1
>>  Joined 'SERVER1' to realm 'DOMAIN1.CO.UK'
>>
>> So all looks OK, but when I try to browse the shares on \\server1
>> from another domain member I'm prompted for a username and password. Any
>> valid domain credentials are rejected.
>>
>> The log file for the IP address for the computer I'm trying to connect
>> from says:
>>
>>  [2008/06/17 11:54:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(316)
>>    Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE!
>>
>> log.smbd says:
>>  [2008/06/17 11:55:47, 0]
>> auth/auth_util.c:create_builtin_administrators(792)
>>    create_builtin_administrators: Failed to create Administrators
>>  [2008/06/17 11:55:47, 0] auth/auth_util.c:create_builtin_users(758)
>>    create_builtin_users: Failed to create Users
>>
>> smb.conf says:
>>  [global]
>>         workgroup = DOMAIN1
>>         realm = DOMAIN1.CO.UK
>>         security = ADS
>>
>> Samba 3.0.30 on Fedora 8.
>>
>> Can anyone tell me where I'm going wrong?
>>
>
> -----------------------------------------
> Email sent from www.virginmedia.com/email
> Virus-checked using McAfee(R) Software and scanned for spam
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba
>
>
> Message scanned by ClamAV engine (http://www.clamav.net)
> --------------------------------------------------------
>


-- 
François Legal


Message scanned by ClamAV engine (http://www.clamav.net)
--------------------------------------------------------