RE: [Samba] ntlm_auth question
> -Original Message- > From: Andrew Bartlett [mailto:[EMAIL PROTECTED] > Sent: Thursday, March 31, 2005 3:31 PM > To: Snodgrass, Micah > Cc: samba@lists.samba.org > Subject: RE: [Samba] ntlm_auth question > > > On Thu, 2005-03-31 at 07:36 -0600, Snodgrass, Micah wrote: > > Thank you much Andrew, joining the domain did the trick. For the > > record, doing a net rpc join -U administrator from the > > Linux/FreeRADIUS box joined the machine to the domain, > > but still no luck. I took a look at the Win2k3 AD server, > > and had to check the foolish little check box on the account > > for the Linux computer that said something like > > "This machine is a Pre-Windows 2000 machine" and then we > were talking. > > Had you done a 'net ads join' and set 'security=ads' in your smb.conf, > then it would have worked. > > I'm lining up a micro-patch to make the error message > indicate the need > for a domain join. Hmmm... no I didn't. I'm not familiar with the "net ads" command *digs out google and man pages* - At this point, it's safe to say that I have done neither. smb.conf has security = server, and then password server = ip.of.AD.server. Once I sat down at the AD server and checked that foolish "this is a pre-windows 2000 computer" checkbox, ntlm_auth started working fine, and I moved on to the next hurdle in the project which is a problem with the FreeRADIUS config file. (something totally unrelated to samba, so I won't bore you with the details. thanks again for the help. I'll do some digging into security=ads and "net ads ..." as it sounds like they may save me future headaches. -MS -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] ntlm_auth question
On Thu, 2005-03-31 at 07:36 -0600, Snodgrass, Micah wrote: > Thank you much Andrew, joining the domain did the trick. For the > record, doing a net rpc join -U administrator from the > Linux/FreeRADIUS box joined the machine to the domain, > but still no luck. I took a look at the Win2k3 AD server, > and had to check the foolish little check box on the account > for the Linux computer that said something like > "This machine is a Pre-Windows 2000 machine" and then we were talking. Had you done a 'net ads join' and set 'security=ads' in your smb.conf, then it would have worked. I'm lining up a micro-patch to make the error message indicate the need for a domain join. Andrew bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] ntlm_auth question
Thank you much Andrew, joining the domain did the trick. For the record, doing a net rpc join -U administrator from the Linux/FreeRADIUS box joined the machine to the domain, but still no luck. I took a look at the Win2k3 AD server, and had to check the foolish little check box on the account for the Linux computer that said something like "This machine is a Pre-Windows 2000 machine" and then we were talking. thanks again for the reply, -MS > -Original Message- > From: Andrew Bartlett [mailto:[EMAIL PROTECTED] > Sent: Thursday, March 31, 2005 5:31 AM > To: Snodgrass, Micah > Cc: samba@lists.samba.org > Subject: Re: [Samba] ntlm_auth question > > > On Wed, 2005-03-30 at 08:05 -0600, Snodgrass, Micah wrote: > > > [EMAIL PROTECTED]:~# ntlm_auth --username=msnodgrass > --request-nt-key --domain=CECNT > > password: > > NT_STATUS_CANT_ACCESS_DOMAIN_INFO: > NT_STATUS_CANT_ACCESS_DOMAIN_INFO (0xc0da) > > [EMAIL PROTECTED]:~# > > You have to join the domain first - see the documentation on > setting up > a fileserver as a domain member, and once you are joined you can just > run winbindd and nmbd. > > Andrew Bartlett > > -- > Andrew Bartlett > http://samba.org/~abartlet/ > Authentication Developer, Samba Team http://samba.org > Student Network Administrator, Hawker College http://hawkerc.net > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] ntlm_auth question
On Wed, 2005-03-30 at 08:05 -0600, Snodgrass, Micah wrote: > [EMAIL PROTECTED]:~# ntlm_auth --username=msnodgrass --request-nt-key > --domain=CECNT > password: > NT_STATUS_CANT_ACCESS_DOMAIN_INFO: NT_STATUS_CANT_ACCESS_DOMAIN_INFO > (0xc0da) > [EMAIL PROTECTED]:~# You have to join the domain first - see the documentation on setting up a fileserver as a domain member, and once you are joined you can just run winbindd and nmbd. Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] ntlm_auth question
Hi guys/gals. I'm brand new to this list, been working with Linux for several years, and have occasionally set up samba file servers before in a "hi-i'm-wide-open-so-anyone-can-read/write-to-my-shares" mode for temporary storage in data recovery scenarios. At the moment, I'm working on a project that involves FreeRADIUS authenticating against a Win2k/2k3 AD server using the ntlm_auth program. The Free RADIUS folks say that ntlm_auth is a samba-related program and to RTFM or ask a samba mailing list. (ok, they really were nice about it, they just didn't have any suggestions) The machine is running Debian-testing, and is all updated. It's on the same local network/subnet as the AD server, and I can ping/nmap the AD server. The AD server works, as it authenticates enough windows machines on a daily basis to give my stuffed Tux the creeps. When I run ntlm_auth from the command line, just to verify that it does indeed do what it's supposed to do, I get the following: [EMAIL PROTECTED]:~# ntlm_auth --username=msnodgrass --request-nt-key --domain=CECNT password: NT_STATUS_CANT_ACCESS_DOMAIN_INFO: NT_STATUS_CANT_ACCESS_DOMAIN_INFO (0xc0da) [EMAIL PROTECTED]:~# I realize that there's probably been someone asking this exact question sometime in the past, and I've googled my heart out on this one to no avail. Any sort of help/point-in-the-right-direction would be greatly appreciated. -MS -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
