[Samba] fillup_password_policy fails with NT_STATUS_ACCESS_DENIED, samba 3.4.3
Kiran Patil
kiran.dpatil at gmail.com
Wed Oct 1 07:59:28 MDT 2014
Anyone?
Also if someone could point way to get further logging.
Got above logs with below settings added to global section in smb.conf.
log file = /var/log/samba/%m.log
log level = 10
max log size = 0
Thanks,
-Kiran
On Tue, Sep 30, 2014 at 11:40 AM, Kiran Patil <kiran.dpatil at gmail.com>
wrote:
> Hi,
>
> I'm getting below error with "fillup_password_policy" while authenticating
> users from default domain.
>
>
> [2014/09/30 03:15:26, 10] rpc_client/cli_pipe.c:1432(rpc_api_pipe_got_pdu)
> rpc_api_pipe: host dev003.namdev.myserv.net returned 16 bytes.
> [2014/09/30 03:15:26, 1] ../librpc/ndr/ndr.c:251(ndr_print_function_debug)
> samr_QueryDomainInfo: struct samr_QueryDomainInfo
> out: struct samr_QueryDomainInfo
> info : *
> info : NULL
> result : NT_STATUS_ACCESS_DENIED
> [2014/09/30 03:15:26, 10]
> winbindd/winbindd_cache.c:492(refresh_sequence_number)
> refresh_sequence_number: NAMDEV time ok
> [2014/09/30 03:15:26, 10]
> winbindd/winbindd_cache.c:537(refresh_sequence_number)
> refresh_sequence_number: NAMDEV seq number is now 100149701
> [2014/09/30 03:15:26, 10]
> winbindd/winbindd_pam.c:1713(winbindd_dual_pam_auth)
> Failed to get password policies for domain NAMDEV:
> NT_STATUS_ACCESS_DENIED
> [2014/09/30 03:15:26, 2]
> winbindd/winbindd_pam.c:1733(winbindd_dual_pam_auth)
> Plain-text authentication for user namdev\user74 returned
> NT_STATUS_ACCESS_DENIED (PAM: 4)
>
> Is there way to workaround to not fetch password policies? if not, what
> could be the corresponding setting on AD side which can be tweaked to
> resolved access denied issue?
>
> Appreciate any help in this regard. Let me know if require more
> information.
>
> Thanks,
> -Kiran
>
More information about the samba
mailing list