[Samba] samba 3 create_connection_server_info failed: NT_STATUS_ACCESS_DENIED

[Andrew Bartlett]

On Tue, 2012-08-14 at 23:22 -0300, Mauricio Perez wrote:
> Hi everybody.... I'm trying to build a fileserver with samba. And I had it
> ok when users where authenticating via samba, but I changed the
> authentication method to OpenLDAP, and for some strange reason users can
> not access the shares anymore... it is giving me this error:
> "create_connection_server_info failed: NT_STATUS_ACCESS_DENIED".
> I have chacked the permission in the SO and is 777 for the hole share
> estructure.
> I have tried to use "username =" but it enters any user, not only the
> permited ones.
> The LDAP server is authenticating right, I know because I use him as a base
> for my DC's.
> The server with that problem is not my PDC. It is just a fileserver.
> 
> I've read that it is because I'm using "valid users = " is that right? I've
> tried to use "valid users" whit "write list" but it had no effect. I don't
> know what to do any more.
> 
> thank's in advance. If anyone can help me, I will be very grateful
> 
> Here is my smb.conf
> 
> [global]
> # ---------------- Autenticação -------------------
>         workgroup = <DOMAIN IN PDC>
>         netbios name = <NETBIOS NAME>
>         security = DOMAIN
>         password server = <IP OF LDAP>
>         dos charset = ISO8859-1
>         unix charset = UTF-8
>         winbind uid = 10000-20000
>         winbind gid = 10000-20000
>         winbind use default domain = yes

This is not how you connect Samba to OpenLDAP.  This is how you connect
Samba to Samba classic (eg 3.x) domain.

Perhaps you need to join the domain using 'net rpc join'?

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org