Re: [Samba] Problem with Active Directory...
Hi, I'd done other searches and it seems my problem comes from samba configuration on parameters like "winbind trusted domains", etc... If I do a test like : wbinfo --authenticate=AC\\utilisateur.paris%password everything is ok. So, my server is ok to authenticate users from the 'AC' domain. Do you think I only have problems in smb.conf ??? Do you have any links which can explain this configuration ? Thanks a lot. David. Le Mon, 5 Jan 2009 14:15:01 +0100, David BERCOT a écrit : > Hi, > > I have some problems with Samba and Active Directory. > Here is the beginning of my smb.conf (on Debian) : > [global] > realm = AC-NANTES.JUSTICE.FR > workgroup = AC-NANTES > Users from this domain (AC-NANTES) have no problem to log on... > > Now, I'd like to do the same with another user from another domain : > AC.JUSTICE.FR who is in a global security group in AC-NANTES (I use > this global group for ressources access). And there, when I try to > validate this user (AC\utilisateur.paris), I have this message : > check_ntlm_password: Checking password for unmapped user > [ac]\[utilisateur.par...@[xp-david] with the new password interface > [2009/01/05 12:01:04, 3] auth/auth.c:check_ntlm_password(224) > check_ntlm_password: mapped user is: > [ac-nantes]\[utilisateur.par...@[xp-david] [...] [2009/01/05 > 12:01:04, 2] auth/auth.c:check_ntlm_password(319) check_ntlm_password: > Authentication for user [utilisateur.paris] -> > [utilisateur.paris] FAILED with error NT_STATUS_NO_SUCH_USER > [2009/01/05 12:01:04, 3] smbd/error.c:error_packet(146) error packet > at smbd/sesssetup.c(99) cmd=115 (SMBsesssetupX) > NT_STATUS_LOGON_FAILURE > > If I well understand, Samba tries to validate the user from its domain > and not from his real domain... > Is it possible to validate a user from another domain (in the same > AD) ? Can we put many domains in Samba configuration ? > > Thanks a lot for any idea ;-) > > David. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Problem with Active Directory...
Hi, I have some problems with Samba and Active Directory. Here is the beginning of my smb.conf (on Debian) : [global] realm = AC-NANTES.JUSTICE.FR workgroup = AC-NANTES Users from this domain (AC-NANTES) have no problem to log on... Now, I'd like to do the same with another user from another domain : AC.JUSTICE.FR who is in a global security group in AC-NANTES (I use this global group for ressources access). And there, when I try to validate this user (AC\utilisateur.paris), I have this message : check_ntlm_password: Checking password for unmapped user [ac]\[utilisateur.par...@[xp-david] with the new password interface [2009/01/05 12:01:04, 3] auth/auth.c:check_ntlm_password(224) check_ntlm_password: mapped user is: [ac-nantes]\[utilisateur.par...@[xp-david] [...] [2009/01/05 12:01:04, 2] auth/auth.c:check_ntlm_password(319) check_ntlm_password: Authentication for user [utilisateur.paris] -> [utilisateur.paris] FAILED with error NT_STATUS_NO_SUCH_USER [2009/01/05 12:01:04, 3] smbd/error.c:error_packet(146) error packet at smbd/sesssetup.c(99) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE If I well understand, Samba tries to validate the user from its domain and not from his real domain... Is it possible to validate a user from another domain (in the same AD) ? Can we put many domains in Samba configuration ? Thanks a lot for any idea ;-) David. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Problem with Active Directory
Hello, i need a file server for workstation of a network Windows 2000 with AD. I'm using Suse 10 and Samba. Reading "HOWTO" and "by Example" i reached this results: - the Linux server is in domain, i see it in Computers folder of AD - wbinfo -u get successfully all users of domain - wbinfo -g get successfully all groups of domain - getent passwd lists all users of domain - getent group lists all groups of domain - with chown i changed successfully (verified with ls -la) the owner of folder shared in smb.conf (now the owner of the folder is an user of the domain) - logging on the Windows workstation with the domain user configured as owner of the shared folder, i see the Server Linux and all shared folder configured in smb.conf. When i try to open a shared folder i receive "Password incorrect or user unknown" and request for username and password. What is problem? This is my smb.conf: [global] unix charset = LOCALE workgroup = INTRANET realm = INTRANET.IMB server string = File Server security = ADS username map = /etc/samba/smbusers log level = 1 syslog = 0 log file = /var/log/samba/%m max log size = 50 printcap name = CUPS ldap ssl = no idmap uid = 1-2 idmap gid = 1-2 template shell = /bin/bash winbind use default domain = Yes winbind enum users = Yes winbind enum groups = Yes winbind nested groups = Yes [homes] comment = Home Directories valid users = %S read only = No browseable = No [data] path = /home/data valid users = %S read only = No Please help me. Thank's. Vittorio -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
