[Samba] Problem with smbclient and domain logon

2002-12-12 Thread Sean Chambers



I am able to join the domain initially with root 
username and password.

When i reboot and try to logon to the domain it 
tells me:
The system could not log you on because the domain 
DARCSTAR is unavailable.

Additionally, i am having a problem with logging in 
from smbclient with any user except for root:

I type: smbclient -L FILESERVER -U 
sean
password:
session_setup_failed: 
NT_STATUS_LOGON_FAILURE

Are these 2 problems related in anyway? I've been 
messing with this for over a week now and I cannot figure it out.

also, in win2k when i open the run window and type 
: \\FILESERVER\
it opens a username/password box, if i put in sean 
and the password it pops the box right up again. In the samba.log file it says 
something to the effect of:
Couldn't find user 'sean' in passdb

i double checked and sean$ does exist in 
/etc/samba/smb.conf

I am not at the server right now so I do not have 
exact errors messages. If necessary I can post my smb.conf later 
today.

thank you.


RE: [Samba] Problem with smbclient and domain logon

2002-12-12 Thread Owens, Bob



did 
you add them to the smbpasswd and is samba's password encryption set to 
yes?

  -Original Message-From: Sean Chambers 
  [mailto:[EMAIL PROTECTED]]Sent: Thursday, December 12, 2002 8:49 
  AMTo: [EMAIL PROTECTED]Subject: [Samba] Problem with 
  smbclient and domain logon
  I am able to join the domain initially with root 
  username and password.
  
  When i reboot and try to logon to the domain it 
  tells me:
  The system could not log you on because the 
  domain DARCSTAR is unavailable.
  
  Additionally, i am having a problem with logging 
  in from smbclient with any user except for root:
  
  I type: smbclient -L FILESERVER -U 
  sean
  password:
  session_setup_failed: 
  NT_STATUS_LOGON_FAILURE
  
  Are these 2 problems related in anyway? I've been 
  messing with this for over a week now and I cannot figure it out.
  
  also, in win2k when i open the run window and 
  type : \\FILESERVER\
  it opens a username/password box, if i put in 
  sean and the password it pops the box right up again. In the samba.log file it 
  says something to the effect of:
  Couldn't find user 'sean' in passdb
  
  i double checked and sean$ does exist in 
  /etc/samba/smb.conf
  
  I am not at the server right now so I do not have 
  exact errors messages. If necessary I can post my smb.conf later 
  today.
  
  thank you.


Re: [Samba] Problem with smbclient and domain logon

2002-12-12 Thread Sean Chambers



for each user,
first i gave them a linux account by 
doing:

useradd sean$
passwd sean$ (changed the password)

then

smbpasswd -m -a sean

it then said it added the user sean$

then i did smbpasswd sean

changed the SMB password for user 
sean$

then:
smbpasswd -e sean$

and it says it enabled the user, but still i get 
the error
I check /etc/samba/smbpasswd and the user sean$ is 
in that file

do i also have to put the user into smbusers 
manually?
right now it only has:
admin = root
nobody = guest

not sure if i have to add anything to 
that?

thanks

  - Original Message - 
  From: 
  Owens, Bob 
  
  To: 'Sean Chambers' ; [EMAIL PROTECTED] 
  Sent: Thursday, December 12, 2002 9:54 
  AM
  Subject: RE: [Samba] Problem with 
  smbclient and domain logon
  
  did 
  you add them to the smbpasswd and is samba's password encryption set to 
  yes?
  
-Original Message-From: Sean Chambers 
[mailto:[EMAIL PROTECTED]]Sent: Thursday, December 12, 2002 
8:49 AMTo: [EMAIL PROTECTED]Subject: 
[Samba] Problem with smbclient and domain logon
I am able to join the domain initially with 
root username and password.

When i reboot and try to logon to the domain it 
tells me:
The system could not log you on because the 
domain DARCSTAR is unavailable.

Additionally, i am having a problem with 
logging in from smbclient with any user except for root:

I type: smbclient -L FILESERVER -U 
sean
password:
session_setup_failed: 
NT_STATUS_LOGON_FAILURE

Are these 2 problems related in anyway? I've 
been messing with this for over a week now and I cannot figure it 
out.

also, in win2k when i open the run window and 
type : \\FILESERVER\
it opens a username/password box, if i put in 
sean and the password it pops the box right up again. In the samba.log file 
it says something to the effect of:
Couldn't find user 'sean' in 
passdb

i double checked and sean$ does exist in 
/etc/samba/smb.conf

I am not at the server right now so I do not 
have exact errors messages. If necessary I can post my smb.conf later 
today.

thank 
you.


Re: [Samba] Problem with smbclient and domain logon

2002-12-12 Thread Jean-Paul ARGUDO
Sean Chambers wrote:

also, in win2k when i open the run window and type : \\FILESERVER\ 
file://\\FILESERVER\
it opens a username/password box, if i put in sean and the password it 
pops the box right up again. In the samba.log file it says something to 
the effect of:
Couldn't find user 'sean' in passdb

AFAIK, you have to create machine trust accounts in order to allow them 
to access your Samba PDC with a W2K workstation. After this, you create 
user accounts too.

There it is machinename$ to be used, not user$ :-)

Remember to add -d /dev/null and -s /bin/false to useradd command when 
creating Machine Trust Account. Also do a passwd -l machinename$.
Then a smbpasswd -a -m machinename$.

I can be more precise with a detailed example if you wish, but:
This is all very well explained in Sam's teach yourself samba in 24 
hours, chapter 22, surely the best samba book I ever bought. ;-)

Cheers

--
Jean-Paul ARGUDO

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Problem with smbclient and domain logon

2002-12-12 Thread Frank Matthieß
On Thu, Dec 12, 2002 at 04:24:52PM +0100, Jean-Paul ARGUDO wrote:
 Sean Chambers wrote:
 also, in win2k when i open the run window and type : \\FILESERVER\ 
 file://\\FILESERVER\
 it opens a username/password box, if i put in sean and the password it 
 pops the box right up again. In the samba.log file it says something to 
 the effect of:
 Couldn't find user 'sean' in passdb
 
 AFAIK, you have to create machine trust accounts in order to allow them 
 to access your Samba PDC with a W2K workstation. After this, you create 
 user accounts too.
 
 There it is machinename$ to be used, not user$ :-)
 
 Remember to add -d /dev/null and -s /bin/false to useradd command when 
 creating Machine Trust Account. Also do a passwd -l machinename$.
 Then a smbpasswd -a -m machinename$.
 
 I can be more precise with a detailed example if you wish, but:
 This is all very well explained in Sam's teach yourself samba in 24 
 hours, chapter 22, surely the best samba book I ever bought. ;-)

...and also in Samba-HOWTO-Collection.pdf, which is part of samba.
-- 
Frank Matthieß[EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Problem with smbclient and domain logon

2002-12-12 Thread Sean Chambers
If it's not too much trouble could you tell me what steps I must take
basically your're saying first i must create a trust account AND a normal
user account?

What are the commands to do this? i am very confused with smbpasswd because
I find when doing smbpasswd -a sean it does not append the $ to the end, but
when i first add the account it does so automatically.

thank you.

- Original Message -
From: Jean-Paul ARGUDO [EMAIL PROTECTED]
To: Sean Chambers [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Thursday, December 12, 2002 10:24 AM
Subject: Re: [Samba] Problem with smbclient and domain logon


 Sean Chambers wrote:
  also, in win2k when i open the run window and type : \\FILESERVER\
  file://\\FILESERVER\
  it opens a username/password box, if i put in sean and the password it
  pops the box right up again. In the samba.log file it says something to
  the effect of:
  Couldn't find user 'sean' in passdb

 AFAIK, you have to create machine trust accounts in order to allow them
 to access your Samba PDC with a W2K workstation. After this, you create
 user accounts too.

 There it is machinename$ to be used, not user$ :-)

 Remember to add -d /dev/null and -s /bin/false to useradd command when
 creating Machine Trust Account. Also do a passwd -l machinename$.
 Then a smbpasswd -a -m machinename$.

 I can be more precise with a detailed example if you wish, but:
 This is all very well explained in Sam's teach yourself samba in 24
 hours, chapter 22, surely the best samba book I ever bought. ;-)

 Cheers

 --
 Jean-Paul ARGUDO

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Problem with smbclient and domain logon

2002-12-12 Thread Jean-Paul ARGUDO


...and also in Samba-HOWTO-Collection.pdf, which is part of samba.


Yes, section 2.5.3 describes it all..

:-)

--
Jean-Paul ARGUDO

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba



Re: [Samba] Problem with smbclient and domain logon

2002-12-12 Thread Frank Matthieß
On Thu, Dec 12, 2002 at 10:37:06AM -0500, Sean Chambers wrote:
 If it's not too much trouble could you tell me what steps I must take
 basically your're saying first i must create a trust account AND a normal
 user account?
 
 What are the commands to do this? i am very confused with smbpasswd because
 I find when doing smbpasswd -a sean it does not append the $ to the end, but
 when i first add the account it does so automatically.

For the machine WINBOX: 
   useradd WINBOX$
   smbpasswd -m WINBOX


For user which will acces this server:
useradd username
smbpasswd username

IMPORTANT: Please take care about additional parameters to useradd an smbpasswd.

After that, your WINBOX can join the domain.

The smbpasswd step is used to authenticate against a windows like encryption
scheme, which is held by the smbpasswd file. If this auth is proved, samba try
to switch to a unix account of same name. For this unix auth you must add unix
users via useradd. If one step failes access is denied.

Please take the time to read Samba-HOWTO-Collection.pdf, this will give you
a step-by-step instruction with background info's you need.

Frank.
-- 
Frank Matthieß[EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba