Samba errors with ADS authentication

Ziggie · 01-30-2006, 01:23 PM

Hi.

I've configured samba to use LDAP authentication to an Active Directory Domain Controller. The eventual goal is to be able to authenticate users through the domain controller and have them be able to access the Samba shares, but only once they've authenticated.

Whenever I try to access the samba share, however, I get a box that pops up asking for a username and password. The error I get in the samba log is:

Quote:

[2006/01/30 14:21:03, 2] smbd/reply.c:reply_special(235)
netbios connect: name1=CRASH name2=CJOHNSON
[2006/01/30 14:21:03, 2] smbd/reply.c:reply_special(242)
netbios connect: local=crash remote=cjohnson, name type = 0
[2006/01/30 14:21:03, 2] smbd/sesssetup.c:setup_new_vc_session(608)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2006/01/30 14:21:03, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username AMCOLOR\chad is invalid on this system
[2006/01/30 14:21:03, 2] smbd/sesssetup.c:setup_new_vc_session(608)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2006/01/30 14:21:03, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username AMCOLOR\chad is invalid on this system
[2006/01/30 14:21:03, 2] smbd/server.c:exit_server(571)
Closing connections
[2006/01/30 14:21:03, 2] smbd/sesssetup.c:setup_new_vc_session(608)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2006/01/30 14:21:04, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username AMCOLOR\chad is invalid on this system
[2006/01/30 14:21:04, 2] smbd/server.c:exit_server(571)
Closing connections
[2006/01/30 14:21:04, 2] smbd/sesssetup.c:setup_new_vc_session(608)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2006/01/30 14:21:04, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username AMCOLOR\chad is invalid on this system
[2006/01/30 14:21:04, 2] smbd/sesssetup.c:setup_new_vc_session(608)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2006/01/30 14:21:04, 1] smbd/sesssetup.c:reply_spnego_kerberos(250)
Username AMCOLOR\chad is invalid on this system
[2006/01/30 14:21:04, 2] smbd/server.c:exit_server(571)
Closing connections

Yet the username exists both on the DC and using a wbinfo -u

Did I miss a flag somewhere? I'm not able to access the share even if I put in my user name and password.

The global section of my smb.conf:

Quote:

[global]
log file = /var/samba/log/log.%m
socket options = TCP_NODELAY IPTOS_LOWDELAY
debug timestamp = yes
log level = 2
unix charset = LOCALE
workgroup = AMCOLOR
realm = AMCOLOR.DOITBESTCORP.COM
security = ADS
ldap ssl = no
idmap uid = 15000-20000
idmap gid = 15000-20000
template primary group = "Domain Users"
template shell = /bin/bash
winbind separator = \\
netbios name = crash
server string = File Server

paintcheck200 · 01-30-2006, 11:37 PM

N/m should have read ur log