[Samba] getting NT_STATUS_LOGON_FAILURE

[Rowland Penny]

On 09/01/15 15:00, Bob of Donelson Trophy wrote:
> On 2015-01-09 08:44, Rowland Penny wrote:
> W7 client "Preferred DNS server" is set to my DC. 
> My DC looks like this: root at dtdc01:~# cat /etc/resolv.conf search 
> dtshrm.local domain dtshrm.local nameserver 192.168.16.54 
> root at dtdc01:~# cat /etc/network/interfaces # This file describes the 
> network interfaces available on your system # and how to activate 
> them. For more information, see interfaces(5). # The loopback network 
> interface auto lo iface lo inet loopback # The primary network 
> interface allow-hotplug eth0 iface eth0 inet static address 
> 192.168.16.54 netmask 255.255.255.0 network 192.168.16.0 broadcast 
> 192.168.16.255 gateway 192.168.16.106 # dns-* options are implemented 
> by the resolvconf package, if installed dns-nameservers 208.67.222.222 
> dns-search dtshrm.local root at dtdc01:~# cat /etc/hosts 127.0.0.1 
> localhost 192.168.16.54 dtdc01.dtshrm.lan dtdc01 # The following lines 
> are desirable for IPv6 capable hosts ::1 localhost ip6-localhost 
> ip6-loopback ff02::1 ip6-allnodes ff02::2 ip6-allrouters Should the 
> /etc/resolv.conf be resolving to itself? (I chuckled at you "panic" 
> comment. lol) Fix this first, checking for 'libnss_winbind.so.2' is 
> next on my list for this morning. 

Firstly, what email client are you using ? it appears to be doing weird 
things :-)

Don't bother about libnss_winbind.so.2, you have it, what you don't have 
is the pam config file that automatically sets pam.

This is my /etc/resolv.conf from my DC:

nameserver 127.0.0.1
search example.lan

It needs to point to itself and you do not need the domain line. domain 
& search are mutually exclusive and the last one wins.

This is my /etc/network/interfaces

# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

auto eth0
iface eth0 inet static
         address 192.168.0.2
         netmask 255.255.255.0
         network 192.168.0.0
         broadcast 192.168.0.255
         gateway 192.168.0.1

I also turn off NetworkManager and stop it from starting at boot.

When you installed your member server via Louis's script, did you alter 
this line:

ENABLEPAMAUTH=0

Rowland