[Samba] AD logins fail

[Yan Seiner]

On 09/03/2014 03:23 PM, Yan Seiner wrote:
> I migrated my config to a new server, and now logins against the AD 
> server are failing.
>
> If I try the correct password, I get:
>
> check_ntlm_password:  Authentication for user [yans] -> [yans] FAILED 
> with error NT_STATUS_NO_SUCH_USER
>
> But if I try with a wrong password I get:
>
> check_ntlm_password:  Authentication for user [yans] -> [yans] FAILED 
> with error NT_STATUS_WRONG_PASSWORD
>
> Where do I look?
>
> pam config:
>
> password        [success=2 default=ignore]      pam_unix.so obscure 
> sha512
> password        [success=1 default=ignore]      pam_winbind.so 
> use_authtok try_first_pass
> password        requisite                       pam_deny.so
> password        required                        pam_permit.so
> password        optional                        pam_smbpass.so nullok 
> use_authtok use_first_pass
>
> nsswtich.conf:
>
> passwd:     compat winbind
> shadow:     compat
> group:      compat winbind
>
> smb.conf:
>
> [global]
>    workgroup = HPM
>    netbios name = wiki
>    server string = %h server (roadtrekwiki)
>    log level = 2
>    log file = /var/log/samba/log.%m
>    max log size = 1000
>    syslog = 0
>    panic action = /usr/share/samba/panic-action %d
>    security = ads
>    realm = HPM.NET
>
>      idmap config *:backend = tdb
>      idmap config *:range = 70001-80000
>
>    winbind enum users = yes
>    winbind enum groups = yes
>
>      domain master = no
>      local master = no
>      preferred master = no
>      os level = 20
>      map to guest = bad user
>      map untrusted to domain = Yes
>
> wbinfo stuff:
>
> root at wiki:/etc/samba# wbinfo -D HPM
> Name              : HPM
> Alt_Name          : HPM.net
> SID               : S-1-5-21-2459339012-1500590541-72990266
> Active Directory  : Yes
> Native            : Yes
> Primary           : Yes
> root at wiki:/etc/samba# wbinfo --own-domain
> HPM
> root at wiki:/etc/samba# wbinfo --domain HPM -i 'yans'
> failed to call wbcGetpwnam: WBC_ERR_DOMAIN_NOT_FOUND
> Could not get info for user yans
> root at wiki:/etc/samba# wbinfo -u | grep yans
> HPM\yans
>
> What in the world am I doing wrong?
I just tried this:

root at wiki:/etc/samba# wbinfo -a yans%xxxx
plaintext password authentication failed
Could not authenticate user yans%xxxx with plaintext password
challenge/response password authentication succeeded
root at wiki:/etc/samba#

Now I'm really confused.  :(