Paul Gienger wrote:

Am I doing something wrong or does samba really not support cached credentials local logins?



I can assure you that it works just fine. I go home every night and log in just fine off the company 'net. It also works just fine on default domain setups, so there must be some step you've added that isn't liked very well.


What is the exact error you are getting? For example, I get an error about not finding my roaming profile, but that's expected.

win2k says something like (translation from Czech):

System can't log you on becouse the domain INVEX.CZ is not available.

winXP says:

System cannot log you on now becouse the domain INVEX.CZ is not available.


What method did you use to set up your server? Did you follow a howto or something that we could reference to find out what is causing you problems?


No, i have a bit more complicated setup dealing with ldap replication, shared users for samba, exim, cyrus, etc...


Mathew Easton kicked me the right way:

> Do you, by any chance, have an smbusers file? (Mine is
> /etc/samba/smbusers,
> yours may be located elsewhere) This file maps windows users to unix
> users.
> If you use this file to map legacy windows usernames to accounts on
> your samba server, cached credentials will fail.

I LDAP i have names like '[EMAIL PROTECTED]' and in smb.conf i have LDAP queries that do the right mapping for me.

This allows me to have in LDAP multiple domains for mail and choose one of them for samba.

The problem is that the real names are then the ones including '@' (in fact e-mail adresses) all other names are aliases. And you can't log into windows using a name with '@' :-(

When I tried changing an account in LDAP (remove the @domain.cz part) then cached credentials logins work.

I'm using the LDAP database also for e-mail services and eventually I would like to have multiple samba instances running with the same LDAP each with different domain (both the @domain.cz part and samba domain), so removing the @domain.cz part from all accounts in the LDAP database is not a sollution for me.

Thank you all very much!

Have you got any idea, how can I keep the e-mail address accounts and make the cached credentials logins work?

Regards,

--
Mgr. Martin Povolný, soLNet, s.r.o.,
+420777714458, <[EMAIL PROTECTED]>

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to