[Samba] Integrating samba with existing AD

Thibaut POUZET thibaut.pouzet at lyra-network.com
Wed Jul 20 02:44:34 MDT 2011

Hi everyone,


I am currently trying to set-up a samba server in my network in order to
replace the existing windows samba server. It's been now two weeks that I am
struggling with a vicious problem, and I cannot see any issue right now.
Before I loose all my hairs, I am sharing with you this problem : hopefully,
someone will have a tip for me.


The software involved : 

Server Linux CentOS 5.6

Windows 2003 Serveur R2 with working AD and another DNS server working just

# rpm -qa | grep samba




# rpm -qa | grep krb








The smb.conf



The krb5.conf



In the nsswich.conf

passwd:     files ldap winbind

shadow:     files ldap

group:      files ldap winbind


The problem (Everything seems to work just fine ): 

# kinit -V thibaut

Password for thibaut at WORK-NETWORK.COM:

Authenticated to Kerberos v5


# net join -S pwdsrv -U Thibaut

Thibaut's password:

Using short domain name -- WORK

DNS update failed!

Joined 'smbsrv' to realm 'WORK-NETWORK.COM'


wbinfo -u

wbinfo -g

getent passwd

getent group

=> All of them returns all I want (users and groups, with locals for the
last two commands)


# smbclient -L localhost -U Thibaut


Domain=[WORK] OS=[Unix] Server=[Samba 3.0.33-3.29.el5_6.2]


        Sharename       Type      Comment

        ---------       ----      -------

        IPC$            IPC       IPC Service (Server blabla)

        thibaut         Disk      Home Directories

Domain=[WORK] OS=[Unix] Server=[Samba 3.0.33-3.29.el5_6.2]


        Server               Comment

        ---------            -------

        SMBSRV            Serveur blabla


        Workgroup            Master

        ---------            -------



. and that's all. The windows clients can connect and see some shares (I
guess thank's to passthru), for instance I can see my home folder and the
printers folders, but not the others as with smbclient. Furthermore, Even if
I can see the roots folders, I cannot parse them : I am prompted a
login+password form when I try to enter the "Thibaut" folder, for instance.
I think I am connected as a guest user, but I am not sure of that.

And when I try to access the folder Thibaut, I got some logs : 


[2011/07/20 09:50:38, 2] lib/access.c:check_access(323)

  Allowed connection from  (a.b.c.d)

[2011/07/20 09:50:38, 2] smbd/service.c:make_connection_snum(617)

  user 'WORK\thibaut' (from session setup) not permitted to access this
share (thibaut)


So where am I going wrong ? L 



More information about the samba mailing list