Hi there,
I've been trying to set up Samba 3.0.14a with Active Directory
integration on a network with an ordinary W2k Server PDC. I'm currently
having a problem which I'm convinced has nothing to do with my Windows
or Samba configuration.
The problem only occurs when trying to connect to the Samba server from
an authenticated domain account which is only a member of the default
'Domain users' group. When this is the case, the
'make_server_info_from_pw' function returns NT_STATUS_NO_SUCH_USER,
incorrectly.
Here is an appropriate log fragment (debug = 5):
[2005/06/02 12:51:19, 3] libads/ads_ldap.c:ads_sid_to_dn(222)
ads sid_to_dn mapped CN=Neil Klopfenstein,CN=Users,DC=geovectra,DC=cl
[2005/06/02 12:51:19, 5] libads/ldap_utils.c:ads_do_search_retry(56)
Search for (objectclass=*) gave 1 replies
[2005/06/02 12:51:19, 3] nsswitch/winbindd_ads.c:lookup_usergroups_alt(463)
ads: lookup_usergroups_alt
[2005/06/02 12:51:19, 5] libads/ldap_utils.c:ads_do_search_retry(56)
Search for (&(member=CN=Neil
Klopfenstein,CN=Users,DC=geovectra,DC=cl)(objectClass=group)) gave 0 replies
[2005/06/02 12:51:19, 5] nsswitch/winbindd_ads.c:lookup_usergroups_alt(498)
lookup_usergroups: No supp groups found
[2005/06/02 12:51:19, 4] auth/auth_util.c:add_user_groups(796)
get_user_groups_from_local_sam failed
[2005/06/02 12:51:19, 5] auth/auth_util.c:free_server_info(1406)
attempting to free (and zero) a server_info structure
[2005/06/02 12:51:19, 1] smbd/sesssetup.c:reply_spnego_kerberos(265)
make_server_info_from_pw failed!
[2005/06/02 12:51:19, 3] smbd/error.c:error_packet(105)
error string = No such file or directory
[2005/06/02 12:51:19, 3] smbd/error.c:error_packet(129)
error packet at smbd/sesssetup.c(270) cmd=115 (SMBsesssetupX)
NT_STATUS_NO_SUCH_USER
If the same user is added to another group, it works fine, though.
I'm a little surprised that I have not seen this problem reported
anywhere else, so there is probably something else going on. For what
it's worth, I am using a Spanish version of Redhat 9, compiling Samba
with the 'makerpms.sh' script, and also using the Spanish version of
Windows 2000 Server with the most recent service pack.
I have experienced this problem in 3.0.13 and 3.0.14a. I didn't try any
earlier versions.
-- neil klopfenstein
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
