Re: [Samba] NT_STATUS_ACCESS_DENIED - Samba on Mandrake 8.2
Message: 7 Date: Thu, 17 Oct 2002 12:31:39 -0400 From: "Albert E. Whale" <[EMAIL PROTECTED]> Organization: ABS Computer Technology, Inc. To: Samba <[EMAIL PROTECTED]> Subject: [Samba] NT_STATUS_ACCESS_DENIED - Samba on Mandrake 8.2 I am attempting to integrate a Linux Samba Server with an NT 4.0 PDC. Ideally I am looking to authenticate the users on the PDC, and then permit access to the Samba Shares on the Linux Box. You probably want to setup winbind. Winbind is available in Mandrake 8.2, you may need to install it: # urpmi samba-winbind You will need to uncomment the winbind sections of the default smb.conf file, set it to 'security=domain', set the workgroup, and join the domain: # smbpasswd -j -U For more information (note that most steps should have been done for you in the 8.2 RPMS) see: http://ranger.dnsalias.com/mandrake/muo/connect/csamba5.html#winbind Note that Mandrake 9.0 allows you to join it to the domain (with full winbind setup) during installation (probably only in expert installation, choose "windows domain" as authentication method where you enter your root password). The latest samba RPMS for 8.2 (2.2.6 is available at http://ranger.dnsalias.com/mandrake/samba) have a better example smb.conf example configuration for winbind, /etc/samba/smb-winbind.conf. All that you should need to do to it is change your workgroup name). I have several issues, but the one which is presenting itself currently is when I attempt to Browse the PDC using smbclient. I get the following: smbclient -L dumbo You haven't specified a username, by default smbclient uses the username you are currently logged in as. Do you have a domain account with the same username? added interface ip=192.168.0.11 bcast=192.168.15.255 nmask=255.255.240.0 session request to DUMBO failed (Called name not present) Are you sure you're using the right netbios name for the machine (only applies to error above). Password: Anonymous login successful You haven't authenticated successfully. Domain=[FCCA.COM] OS=[Windows NT 4.0] Server=[NT LAN Manager 4.0] Sharename Type Comment - --- Error returning browse list: NT_STATUS_ACCESS_DENIED Server Comment ---- ACCMAN-JAIME ACCMAN-ROUSCHKA Dumbo is the DNS Name of the PDC. Netbios and DNS names should preferably match (either using DNS aliases/CNAMEs etc) Why Do I get the NT_STATUS_ACCESS_DENIED message? Because your machine does not have the guest account enabled, and you haven't connected with a valid username/password. I get this same message when I attempt to use the Samba Share as an NT PDC User (using the Username and password as well). That would probably be because you either haven't joined the domain, or don't have existing usernames on the samba server. Here are two sessions to our windows server (member of our samba domain), one without a valid username/password, one with a valid username/password: [bgmilne@bgmilne bgmilne]$ smbclient -L atlas added interface ip=146.232.174.36 bcast=146.232.174.255 nmask=255.255.255.0 Password: Anonymous login successful Domain=[CAE] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager] Sharename Type Comment - --- Error returning browse list: NT_STATUS_ACCESS_DENIED Server Comment ---- WorkgroupMaster ---- [bgmilne@bgmilne bgmilne]$ smbclient -L atlas added interface ip=146.232.174.36 bcast=146.232.174.255 nmask=255.255.255.0 Password: Domain=[CAE] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager] Sharename Type Comment - --- pwshareDisk pw Disk IPC$ IPC Remote IPC D$ Disk Default share ADMIN$ Disk Remote Admin C$ Disk Default share Server Comment ---- WorkgroupMaster ---- Regards, Buchan -- |Registered Linux User #182071-| Buchan MilneMechanical Engineer, Network Manager Cellphone * Work+27 82 472 2231 * +27 21 8828820x121 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] NT_STATUS_ACCESS_DENIED - Samba on Mandrake 8.2
Thank you! Buchan Milne wrote: > > Message: 7 > > Date: Thu, 17 Oct 2002 12:31:39 -0400 > > From: "Albert E. Whale" <[EMAIL PROTECTED]> > > Organization: ABS Computer Technology, Inc. > > To: Samba <[EMAIL PROTECTED]> > > Subject: [Samba] NT_STATUS_ACCESS_DENIED - Samba on Mandrake 8.2 > > > > I am attempting to integrate a Linux Samba Server with an NT 4.0 PDC. > > Ideally I am looking to authenticate the users on the PDC, and then > > permit access to the Samba Shares on the Linux Box. > > You probably want to setup winbind. Winbind is available in Mandrake > 8.2, you may need to install it: > > # urpmi samba-winbind > > You will need to uncomment the winbind sections of the default smb.conf > file, set it to 'security=domain', set the workgroup, and join the domain: > > # smbpasswd -j -U > > For more information (note that most steps should have been done for you > in the 8.2 RPMS) see: > > http://ranger.dnsalias.com/mandrake/muo/connect/csamba5.html#winbind > > Note that Mandrake 9.0 allows you to join it to the domain (with full > winbind setup) during installation (probably only in expert > installation, choose "windows domain" as authentication method where you > enter your root password). > > The latest samba RPMS for 8.2 (2.2.6 is available at > http://ranger.dnsalias.com/mandrake/samba) have a better example > smb.conf example configuration for winbind, /etc/samba/smb-winbind.conf. > All that you should need to do to it is change your workgroup name). > > > I have several > > issues, but the one which is presenting itself currently is when I > > attempt to Browse the PDC using smbclient. I get the following: > > > > smbclient -L dumbo > > You haven't specified a username, by default smbclient uses the username > you are currently logged in as. Do you have a domain account with the > same username? > > > added interface ip=192.168.0.11 bcast=192.168.15.255 nmask=255.255.240.0 > > > > session request to DUMBO failed (Called name not present) > > Are you sure you're using the right netbios name for the machine (only > applies to error above). > > > Password: > > Anonymous login successful > > You haven't authenticated successfully. > > > Domain=[FCCA.COM] OS=[Windows NT 4.0] Server=[NT LAN Manager 4.0] > > > > Sharename Type Comment > > - --- > > Error returning browse list: NT_STATUS_ACCESS_DENIED > > > > Server Comment > > ---- > > ACCMAN-JAIME > > ACCMAN-ROUSCHKA > > > > Dumbo is the DNS Name of the PDC. > > Netbios and DNS names should preferably match (either using DNS > aliases/CNAMEs etc) > > > Why Do I get the > > NT_STATUS_ACCESS_DENIED message? > > Because your machine does not have the guest account enabled, and you > haven't connected with a valid username/password. > > > I get this same message when I attempt > > to use the Samba Share as an NT PDC User (using the Username and > > password as well). > > That would probably be because you either haven't joined the domain, or > don't have existing usernames on the samba server. > > Here are two sessions to our windows server (member of our samba > domain), one without a valid username/password, one with a valid > username/password: > > [bgmilne@bgmilne bgmilne]$ smbclient -L atlas > added interface ip=146.232.174.36 bcast=146.232.174.255 nmask=255.255.255.0 > Password: > Anonymous login successful > Domain=[CAE] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager] > > Sharename Type Comment > - --- > Error returning browse list: NT_STATUS_ACCESS_DENIED > > Server Comment > ---- > > WorkgroupMaster > ---- > [bgmilne@bgmilne bgmilne]$ smbclient -L atlas > added interface ip=146.232.174.36 bcast=146.232.174.255 nmask=255.255.255.0 > Password: > Domain=[CAE] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager] > > Sharename Type Comment > - --- > pwshareDisk > pw Disk > IPC$ IPC Remote IPC > D$ Disk Default share > ADMIN$ Disk Remote Admin > C$ Disk Default share > > Server Comment > ---- > > WorkgroupMaster > ---- > > Regards, > Buchan > > -- > |Registered Linux User #182071-| > Buchan MilneMechanical Engineer, Network Manager > Cellphone * Work+27 82 472 2231 * +27 21 8828820x121 > Stellenbosch Automotive Engineering http://www.cae.co.za > GPG Key http://ranger.dnsalias.com/bgmilne.asc > 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -- Albert E. Whale - C
