[Samba] Auth fail getpwuid(3000007) failed
Leander Schäfer
info at netocean.de
Sat May 3 06:50:49 MDT 2014
False Alarm. Turned out I forgott to change:
# Password backend
#passdb backend = samba_dsdb
passdb backend = tdbsam
and start samba afterwards, before
(echo "${SAMBA_SHARE_PASSWORD}"; echo "${SAMBA_SHARE_PASSWORD}") |
smbpasswd -a -s ${SAMBA_SHARE_USER}
It is now working again. Thanks a lot for your time and effort
Kind Regards,
Leander
Am 03.05.14 14:45, schrieb Leander Schäfer:
>
> Am 03.05.14 14:39, schrieb Rowland Penny:
>> On 03/05/14 13:30, Leander Schäfer wrote:
>>>
>>> Am 03.05.14 14:20, schrieb Rowland Penny:
>>>> On 03/05/14 13:15, Leander Schäfer wrote:
>>>>>
>>>>> Am 02.05.14 11:17, schrieb L.P.H. van Belle:
>>>>>> and you did try:
>>>>>> smbclient -U "DOMAIN\MyUser" \\\\MyServerName\\MyShare MyPassword
>>>>>>
>>>>>>
>>>>>>> -----Oorspronkelijk bericht-----
>>>>>>> Van: info at netocean.de [mailto:samba-bounces at lists.samba.org]
>>>>>>> Namens Leander Schäfer
>>>>>>> Verzonden: vrijdag 2 mei 2014 10:39
>>>>>>> Aan: samba at lists.samba.org
>>>>>>> CC: Patrick Hald
>>>>>>> Onderwerp: [Samba] Auth fail getpwuid(3000007) failed
>>>>>>>
>>>>>>> Hi
>>>>>>>
>>>>>>> sorry to bother, but all of a sudden after a fresh install of
>>>>>>> samba with
>>>>>>> the regular smb4.conf it keeps on failing when users try to
>>>>>>> authenticate:
>>>>>>>
>>>>>>>
>>>>>>> smbclient -U MyUser \\\\MyServerName\\MyShare MyPassword
>>>>>>> session setup failed: NT_STATUS_UNSUCCESSFUL
>>>>>>>
>>>>>>> [...]
>>>>>>>
>>>>>>> check_ntlm_password: authentication for user [MyUser] ->
>>>>>>> [MyUser] ->
>>>>>>> [MyUser] succeeded
>>>>>>> [2014/05/02 10:29:40.930648, 3]
>>>>>>> ../auth/ntlmssp/ntlmssp_sign.c:547(ntlmssp_sign_init)
>>>>>>> NTLMSSP Sign/Seal - Initialising with flags:
>>>>>>> [2014/05/02 10:29:40.930671, 3]
>>>>>>> ../auth/ntlmssp/ntlmssp_util.c:34(debug_ntlmssp_flags)
>>>>>>> Got NTLMSSP neg_flags=0x60088215
>>>>>>> NTLMSSP_NEGOTIATE_UNICODE
>>>>>>> NTLMSSP_REQUEST_TARGET
>>>>>>> NTLMSSP_NEGOTIATE_SIGN
>>>>>>> NTLMSSP_NEGOTIATE_NTLM
>>>>>>> NTLMSSP_NEGOTIATE_ALWAYS_SIGN
>>>>>>> NTLMSSP_NEGOTIATE_NTLM2
>>>>>>> NTLMSSP_NEGOTIATE_128
>>>>>>> NTLMSSP_NEGOTIATE_KEY_EXCH
>>>>>>> [2014/05/02 10:29:40.930799, 4]
>>>>>>> ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
>>>>>>> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>>>>>>> [2014/05/02 10:29:40.930876, 4]
>>>>>>> ../source3/smbd/sec_ctx.c:216(push_sec_ctx)
>>>>>>> push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
>>>>>>> [2014/05/02 10:29:40.930905, 4]
>>>>>>> ../source3/smbd/uid.c:495(push_conn_ctx)
>>>>>>> push_conn_ctx(0) : conn_ctx_stack_ndx = 0
>>>>>>> [2014/05/02 10:29:40.930926, 4]
>>>>>>> ../source3/smbd/sec_ctx.c:316(set_sec_ctx)
>>>>>>> setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>>>>>>> [2014/05/02 10:29:40.930947, 5]
>>>>>>> ../libcli/security/security_token.c:53(security_token_debug)
>>>>>>> Security token: (NULL)
>>>>>>> [2014/05/02 10:29:40.930968, 5]
>>>>>>> ../source3/auth/token_util.c:629(debug_unix_user_token)
>>>>>>> UNIX token of user 0
>>>>>>> Primary group is 0 and contains 0 supplementary groups
>>>>>>> [2014/05/02 10:29:40.931099, 4]
>>>>>>> ../source3/smbd/sec_ctx.c:424(pop_sec_ctx)
>>>>>>> pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
>>>>>>> [2014/05/02 10:29:40.931611, 1]
>>>>>>> ../source3/auth/token_util.c:430(add_local_groups)
>>>>>>> SID S-1-5-21-2799780924-1191006566-1534516595-1102 ->
>>>>>>> getpwuid(3000007) failed
>>>>>>> [2014/05/02 10:29:40.931654, 3]
>>>>>>> ../source3/auth/token_util.c:316(create_local_nt_token_from_info3)
>>>>>>> Failed to finalize nt token
>>>>>>> [2014/05/02 10:29:40.931677, 1]
>>>>>>> ../source3/smbd/sesssetup.c:276(reply_sesssetup_and_X_spnego)
>>>>>>> Failed to generate session_info (user and group token) for
>>>>>>> session
>>>>>>> setup: NT_STATUS_UNSUCCESSFUL
>>>>>>>
>>>>>>> [...]
>>>>>>>
>>>>>>> What's wrong here?! Any hint is geartfully appreciated ;)
>>>>>>>
>>>>>>> Kind Regards
>>>>>>> --
>>>>>>> To unsubscribe from this list go to the following URL and read the
>>>>>>> instructions: https://lists.samba.org/mailman/options/samba
>>>>>>>
>>>>>>>
>>>>> Sorrz, I fogot. Here is the provision config:
>>>>>
>>>>>
>>>>>
>>>>> samba-tool domain provision \
>>>>> --realm ${DOMAINNAME^^} \
>>>>> --domain "$( echo ${DOMAINNAME^^} | awk -F'.' '{print
>>>>> $1}' )" \
>>>>> --adminpass ${ROOT_PWD} \
>>>>> --server-role=standalone
>>>>>
>>>> And there is probably where your problems are coming from, I am
>>>> fairly sure that you cannot provision samba4 as a standalone
>>>> server, you need to run samba4 as if it was a samba 3 server,
>>>> starting and running the separate smbd, nmbd and winbind daemons.
>>>>
>>>> Rowland
>>> So, if I understand you correctly, then you recommend to NOT use the
>>> "samba-tool domain provision" command at all, and instead proceed
>>> with my regular smb4.conf posted before?
>> If you mean this one:
>>
>> [global]
>>
>> # Basic server settings
>> workgroup = MYDOMAIN
>> realm = MYDOMAIN.LOCAL
>> netbios name = STORAGE-01
>> server role = standalone server
>>
>> # Password backend
>> passdb backend = samba_dsdb
>>
>> # DNS
>> dns forwarder = 10.0.0.1
>>
>> # Logging
>> log level = auth:10
>> max log size = 0
>>
>> # Charset
>> unix charset = UTF-8
>> dos charset = cp1252
>>
>> # NTLMv2
>> ntlm auth = No
>> lanman auth = No
>> client ntlmv2 auth = Yes
>>
>> # Printing
>> load printers = No
>> printing = BSD
>> printcap name = /dev/null
>>
>> # Default masks
>> unix extensions = No
>> create mask = 0777
>> force create mode = 0777
>> directory mask = 0777
>> force directory mode = 0777
>>
>> # Miscellaneous
>> veto oplock files = /*.doc/*.xls/*.ppt/*.mdb/*.docx/*.xlsx/*.ppt
>> veto files =
>> /.snap/.windows/.zfs/Thumbs.db/.DS_Store/._.DS_Store/.apdisk/
>> wide links = No
>>
>>
>> # ============= Shares ============= #
>>
>>
>> [FireFly]
>> comment = Shared Music
>> path = /mnt/FireFly
>> guest ok = Yes
>> read only = No
>>
>> Then no, If you are setting up a standalone fileserver, then it needs
>> to be setup as if you are setting up a samba3 machine, with users
>> that are both Unix & samba users, do a search on the internet, there
>> are loads of howto's out there.
>>
>> otherwise if you have a samba AD DC, then you need to set it up as a
>> member server, see here:
>>
>> https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server
>>
>> Rowland
> ... turned out a folder was not created by installation script of
> ports - anyway it still results in an error
>
> mkdir -p -m 0755 /var/db/samba4/private
>
> (echo "${SAMBA_SHARE_PASSWORD}"; echo "${SAMBA_SHARE_PASSWORD}") |
> smbpasswd -a -s ${SAMBA_SHARE_USER}
>
> pdb backend samba_dsdb did not correctly init (error was
> NT_STATUS_UNSUCCESSFUL)
> Failed to open passdb!
>
>
>
More information about the samba
mailing list