[Samba] NT_STATUS_NOLOGON_WORKSTATION_TRUST_ACCOUNT

[Volker Lendecke]

On Thu, Feb 24, 2011 at 02:20:49PM +0100, Frodogodo drogofodo wrote:
> Hello list,
> 
>     we're trying to use NTLMv2 authentication from Liferay Portal 6.0.5 as
> specified in
> http://www.liferay.com/community/wiki/-/wiki/Main/NTLMv2+SSO+Configuration.
> We've created a machine account for it that looks like that:
> 
> dn: uid=liferay$,ou=Maquinas,o=global,dc=map,dc=es
> sambaNTPassword: 76DBDF27BB32912AD61BC369DB8FEBD8
> sambaPwdLastSet: 1298373376
> sambaAcctFlags: [W]
> displayName: LIFERAY$
> sambaSID: S-1-5-21-3860457228-14833263-3247686105-1142
> uid: liferay$
> cn: liferay$
> objectClass: account
> objectClass: posixAccount
> objectClass: top
> objectClass: shadowAccount
> objectClass: AltAccountMAP
> objectClass: sambaSamAccount
> .... [ No more interesting attributes ]
> 
> But whenever we try to authenticate it fails and we have the following log:
> 
>   Primary group is 0 and contains 0 supplementary groups
> [2011/02/24 13:52:31, 3] smbd/sec_ctx.c:pop_sec_ctx(356)
>   pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2011/02/24 13:52:31, 2] auth/auth_sam.c:sam_account_ok(235)
>   sam_account_ok: Wksta trust account liferay$ denied by server

Can you send a lot more lines above this?

Volker Lendecke

-- 
SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen