[Samba] Samba auth error messages / hints ?

[Michael Arndt]

hello *


Problem: User authentications fails, error messages see below at end of Info Part

                 Any hints what i should check, what goes astray ?
                 I have to analyse / unterstand a legacy installation
                 and move it to an more recent samba

INFO Config Samba:
----------------------------

Config wrt LDAP


NO DOMAIN !!

[global]
        netbios name = Kairo
        server string = ABC Kairo
        workgroup = kai
        interfaces = em1 127.0.0.1
        bind interfaces only = Yes
       os level = 65
        local master = yes
        preferred master = yes
        domain master = yes
        domain logons = no
        wins support = yes


LDAP PART

        passdb backend = ldapsam:ldap://localhost
        ldap delete dn = no
        ldap passwd sync = yes
        ldap suffix = l=Kairo,dc=org,o=ABC
        ldap user suffix = cn=Benutzer
        ldap group suffix = cn=Gruppen
        ldap ssl = no
        ldap admin dn = cn=samba Admin,l=Kairo,dc=org,o=ABC


Info "new server" versions / OS

Server with the error Message is redhat el 6.2
samba-3.5.10-114.el6.x86_64
samba-winbind-clients-3.5.10-114.el6.x86_64
samba-client-3.5.10-114.el6.x86_64
samba-winbind-3.5.10-114.el6.x86_64
samba-common-3.5.10-114.el6.x86_64

the above  is the target server i try to get working

Info legacy server samba / OS versions
------------------------------------------------------

SUSE LINUX 10.0 (i586)
VERSION = 10.0


samba-doc-3.0.20-4
samba-client-3.0.20b-3.3
samba-3.0.20b-3.3
yast2-samba-client-2.12.4-2
samba-vscan-0.3.6b-4.3

Error Messages:
------------------------


Now the errors from the smb.abc-client.log

User adler in passdb, but getpwnam() fails!
  check_ntlm_password:  Authentication for user [adler] -> [adler] FAILED with error NT_STATUS_NO_SUCH_USER
  Got user=[adler] domain=[ABC-164] workstation=[ABC-164] len1=24 len2=24
  check_ntlm_password:  Checking password for unmapped user [ABC-164][adler]@[ABC-164] with the new password interface
  check_ntlm_password:  mapped user is: [KAIRO][adler]@[ABC-164]
  init_sam_from_ldap: Entry found for user: adler
  pdb_get_group_sid: Failed to find Unix account for adler
  User adler in passdb, but getpwnam() fails!
  check_ntlm_password:  Authentication for user [adler] -> [adler] FAILED with error NT_STATUS_NO_SUCH_USER
  Got user=[adler] domain=[ABC-164] workstation=[ABC-164] len1=24 len2=24
  check_ntlm_password:  Checking password for unmapped user [ABC-164][adler]@[ABC-164] with the new password interface
  check_ntlm_password:  mapped user is: [KAIRO][adler]@[ABC-164]
  init_sam_from_ldap: Entry found for user: adler
  pdb_get_group_sid: Failed to find Unix account for adler
  User adler in passdb, but getpwnam() fails!
  check_ntlm_password:  Authentication for user [adler] -> [adler] FAILED with error NT_STATUS_NO_SUCH_USER


thx for hints
micha

PS: i'd try to work it out on myself, but i am a bit within a tight time schedule :-)