[Samba] Fwd: Re: Fwd: Re: Fwd: Re: Kerberos and NTLMv2 authentication

Edouard Guigné eguigne at pasteur-cayenne.fr
Wed Jun 19 15:16:47 UTC 2019


So I re run the test with domain users gid 14513

Still not working (sssd stopped, nsswitch.cnf with  "files winbind" for 
passwd group, # net cache flush + restart winbindd smb)

On the samba server :
# wbinfo -i MYDOMAIN\usertest
MYDOMAIN\usertest:*:10430:*14513*:user TEST:/home/usertest:/bin/bash

In log, I have :

myw7worstation.log
/[2019/06/19 12:04:29.496822,  1] 
../source3/smbd/service.c:521(make_connection_snum)//
//  create_connection_session_info failed: NT_STATUS_ACCESS_DENIED//
//[2019/06/19 12:04:34.085421,  1] 
../source3/smbd/service.c:521(make_connection_snum)//
//  create_connection_session_info failed: NT_STATUS_ACCESS_DENIED//
//[2019/06/19 12:05:22.113816,  1] 
../source3/smbd/service.c:521(make_connection_snum)//
//  create_connection_session_info failed: NT_STATUS_ACCESS_DENIED//
//[2019/06/19 12:05:27.124307,  1] 
../source3/smbd/service.c:521(make_connection_snum)//
//  create_connection_session_info failed: NT_STATUS_ACCESS_DENIED/

log.winbindd-idmap
/[2019/06/19 12:04:29.464431,  1] 
../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)//
//  tdb(/var/lib/samba/winbindd_idmap.tdb): tdb_transaction_commit: 
transaction error pending//
//[2019/06/19 12:04:29.464460,  1] 
../source3/winbindd/idmap_tdb_common.c:138(idmap_tdb_common_allocate_id)//
//  Error allocating a new GID//
//[2019/06/19 12:04:29.464606,  1] 
../lib/tdb_wrap/tdb_wrap.c:64(tdb_wrap_log)//
//  tdb(/var/lib/samba/winbindd_idmap.tdb): tdb_transaction_commit: 
transaction error pending//
//[2019/06/19 12:04:29.464622,  1] 
../source3/winbindd/idmap_tdb_common.c:138(idmap_tdb_common_allocate_id)//
//  Error allocating a new GID/

And when I try to mount the share manually (same syntax than the one in 
the logon script), I get :
net use S: \\mysambaserver\groups /user:MYDOMAIN\usertest
"invalid password for \\mysambaserver\groups"
and System error 5

In smb.cnf, I set valid users = @"utilisateurs du domaine at MYDOMAIN.LOCAL"
Can it be the reason ?




More information about the samba mailing list