Hi,
I need some help to get Samba and Active Domain to play nicely.
The new server is an Ubuntu 10.04 LTS with Kubuntu to provide GUI, running
Samba 3.4.7
We have several other Linux servers that work perfectly well however this is
the first 10.04LTS the others are 8.04LTS.
Authentication is done through Kerberos/AD and works great!
There is no "shared folder". The users use Samba to access their home directory
from their WinXp or Win7 machines.
We use NX for remote login and it is working well.
The only errors that I can find is this message on the Samba log and the
smbstatus (see below)
The Samba log shows:
From /var/log/samba/
[2012/01/10 10:11:21, 1] smbd/sesssetup.c:342(reply_spnego_kerberos)
Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE!
[2012/01/10 10:11:21, 1]
libads/kerberos_verify.c:336(ads_secrets_verify_ticket)
ads_secrets_verify_ticket: failed to fetch machine password
[2012/01/10 10:11:21, 1] smbd/sesssetup.c:342(reply_spnego_kerberos)
Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE!
Thanks!
Alfredo
%%%%% Background info %%%%%
The smb.conf
>From testparm
Load smb config files from /etc/samba/smb.conf
rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)
Processing section "[homes]"
Processing section "[printers]"
Processing section "[print$]"
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions
[global]
workgroup = USFN
realm = USFN.NZCORP.NET
server string = Samba Server - Rio
security = ADS
map to guest = Bad User
obey pam restrictions = Yes
password server = ##.###.##.###
pam password change = Yes
syslog = 0
log file = /var/log/samba/log.%m
max log size = 1000
name resolve order = lmhosts host wins bcast
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = No
usershare allow guests = Yes
panic action = /usr/share/samba/panic-action %d
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
invalid users = root
[homes]
comment = Home Directories
path = %H
read only = No
smbclient -L rio.usfn.nzcorp.net -U%
Domain=[USFN] OS=[Unix] Server=[Samba 3.4.7]
Sharename Type Comment
--------- ---- -------
homes Disk Home Directories
print$ Disk Printer Drivers
IPC$ IPC IPC Service (Samba Server - Rio)
Domain=[USFN] OS=[Unix] Server=[Samba 3.4.7]
Server Comment
--------- -------
RIO Samba Server - Rio
Workgroup Master
--------- -------
USFN DCUSFN200
SMBD status
service smbd status
smbd start/running, process 2911
However smbstatus gives no output !?
Samba version 3.4.7
PID Username Group Machine
-------------------------------------------------------
Service pid machine Connected at
-------------------------------------------------------
_______________________________________________
vox-tech mailing list
vox-tech@lists.lugod.org
http://lists.lugod.org/mailman/listinfo/vox-tech
