[Samba] Samab + AD authentication error

Tharanga Abeyseela (RGA) tharanga.abeyseela at rexelga.com.au
Wed Mar 23 05:01:47 MDT 2011


Hi Guys,

I have managed to configure samba authentication with AD.

the ntlm_auth working fine.

But when I try to access a samba directory
It gives the following error

[2011/03/23 21:48:32.072590,  2] auth/auth.c:314(check_ntlm_password)
  check_ntlm_password:  Authentication for user [domainuserx.y] -> [domainuserx.y] FAILED with error NT_STATUS_NO_SUCH_USER
[2011/03/23 21:48:32.522646,  2] auth/auth.c:314(check_ntlm_password)

[2011/03/23 21:48:32.598577,  2] smbd/sesssetup.c:1391(setup_new_vc_session)
But   wbinfo -u /wbinfo -g gives the correct out put. (domain users/groups)

Iam using latest stable version 3.5.8.
Getent passwd returns only local user account passwords , not the domain.

What could be the problem in my config.


[global]
workgroup = xxx
realm = xxx.xx
password server = *
server string = Samba file and print server
security = ADS
encrypt passwords = yes
log level = 2
log file = /var/log/samba/%m
max log size = 50
winbind separator = +
##new
#client schannel = no
idmap cache time = 1800
idmap negative cache time = 300
winbind cache time = 1800
##end new
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind use default domain = yes
nt acl support = yes
map acl inherit = yes
winbind enum users = yes
winbind enum groups = yes
#client ntlmv2 auth = yes
template homedir = /home/%D/%U
template shell = /bin/bash
ldap passwd sync  = yes


Thanks

Tharanga




More information about the samba mailing list