[Samba] Failed auth attempt i don't understand.

[karel.de.macil at free.fr]

Le 01/10/2020 21:55, Rowland penny via samba a écrit :
> On 01/10/2020 20:47, karel.de.macil at free.fr wrote:
>> Le 01/10/2020 20:46, Rowland penny via samba a écrit :
>>> On 01/10/2020 19:06, karel.de.macil at free.fr wrote:
>>>> Le 01/10/2020 19:27, Rowland penny via samba a écrit :
>>>>> 
>>>>> Is this on a DC or a Unix domain member ?
>>>> 
>>>> this is a remote desktop attempt on a computer who is in the domain 
>>>> managed by the DC from which i get the log
>>> I actually meant where the log came from.
>> The log commes from the samba 4 DC of the domain.
>> 
>>>> 
>>>>> Why are you using Administrator on Unix ?
>>>> 
>>>> This is the default administrator account in samba4 but the behavior 
>>>> is the same with any account.
>>> 
>>> No, it is the default administrator in AD and as such, shouldn't be
>>> used used as a normal user. Another question is, do you use the
>>> winbind 'ad' backend anywhere in your network and have you added a
>>> uidNumber to Administrator ?
>> 
>> for winbind, i'm not sur if i'm using it..
>> 
>> for the administrator and his uidNumber :
>> and ldbsearch -H /root/sambackup/private/sam.ldb CN=administrator | 
>> grep uidNumber
>> --> uidNumber: 10001
>> 
> By doing that, you have turned Administrator into a normal Unix user,
> when it is supposed to be mapped to 'root'. I suggest you remove the
> uidNumber from Administrator.
  I can do that
> Also, if you are not using the winbind 'ad' backend, why have you
> added a uidNumber attribute to anything ?
  If the goal of winbind is to map windows user to unix user so i suppose 
i use it cause this happened on some of my server.
I will check.
> Rowland