Samba intermitted auth problems

Bilb · 09-16-2005, 04:14 AM

Hi,

I am currently having problems within samba. The problem is that sometimes it will not let totally random people into their accounts :/

In the logs I can only find the following errors:

[2005/09/13 10:39:45, 0] lib/util_sock.c:write_socket_data(499)
write_socket_data: write failure. Error = Connection reset by peer

and

[2005/09/08 14:40:04, 0] lib/util_sock.c:write_socket(523)
write_socket: Error writing 182 bytes to socket 22: ERRNO = Connection reset by peer

and

Unknown parameter encountered: "ldap ssl"
Ignoring unknown parameter "ldap ssl"

I have no idea what is causing the problem? Not sure if its samba not talking with the PDC properly or what

Here is a copy of my global settings:

Code:

[global]
    workgroup = GROUP
    netbios name = NAME
    server string = Server
    security = server
    encrypt passwords = yes
    obey pam restrictions = Yes
    password server = 10.41.1.14 10.41.2.200
    passwd program = /usr/bin/passwd %u
    passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully*
    username map = /etc/samba/smbusers
    unix password sync = yes
    log level = 3
    log file = /var/log/samba/%m.log
    max log size = 100000
    socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
    preferred master = no
    domain master = no
    dns proxy = No
    wins server = 10.41.1.14 10.41.2.200
    map to guest = never
    password level = 0
    null passwords = no
    os level = 0
    wins support = no
    bind interfaces only = no
    dead time = 0
    debug level = 10
    load printers = yes
    hide dot files = yes
    ldap ssl = yes
    domain logons = no

I can see that ldap ssl = yes above but would changing this to no solve my problems?

saneax · 09-16-2005, 04:19 AM

Hi

Quote:

password server = 10.41.1.14 10.41.2.200

Is this server implementing a ldap server, if so then your conf file is not appropriate, Look for samba ldap howto at http://www.idealx.org

regards

Bilb · 09-16-2005, 04:28 AM

Thanks for the reply saneax,

The password servers are Windows Active Directory. Is this something still wrong here for the Active directory to continue to talk with each other correctly?

saneax · 09-20-2005, 02:08 AM

I will summarize what I have understood because what you are trying to do is not obvious, but I can guess..

1) You have a Windows AD machine (assumed to be well configured DNS, etc)
2) You have a Linux Machine (Distro Not Known from your Post).
3) Now You want to become a Member of the AD. That means you want that others (windiows machines) can see/accesss shares on your linux machine

If the Above is Correct, then...
1) Yous smb.conf is absolutely wrong.
2) The Steps Are....
A) Configure the smb.conf appropriately so that you can join it to domain Look here http://www.samba.org/samba/docs/man/...in-member.html
Read this chapter before you go ahead, specially this section http://www.samba.org/samba/docs/man/...tml#ads-member
B) Configure /etc/krb5.conf Details are explained on the above docs
C) Do a 'net ads join'
You are Done

regards