OS - RHEL AS 3.0
I built this machine to be a Squid server and have that functioning almost without an issue. Long story short = I need to use NTLM authentication.

Samba Version - 3.0.14

I have successfully added my machine to the domain using kinit. Whn I confirm kinit with klist -e, I am told that I have no tickets cached but do not receive an error message.

At this point in time, wbinfo -u and wbinfo -g work without an issue. Whenever I try wbinfo -t, I get an error "NT_STATUS_ACCESS_DENIED"

My smb.conf file reads:

#======================= Global Settings =====================================
[global]

# workgroup = NT-Domain-Name or Workgroup-Name
workgroup = xxx.xxx
netbios name = blue-squid
hosts allow = 10.100.1.100
realm = xxx.xxx
server string = Linux Samba Server
security = ads
encrypt passwords = Yes
smb passwd file = /etc/passwd
password server = blue-w2k-ad
log file = /var/log/samba/%m.log
max log size = 0
#socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
preferred master = False
local master = No
domain master = False
dns proxy = No
wins server = 10.100.1.100
winbind separator = +
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes
idmap uid = 10000-20000
idmap gid = 10000-20000

When I uncomment the 'socket options = ....' line I get the error NT_STATUS_UNSUCCESSFUL.

Here is where it gets weird: blue-w2k-ad, the password server lists three item in it's event logs pertaining to this wbinfo attempt....and they are all 'Success Audits.'


I have tried a slew of fixes that I have googled but none have remedied my situation. This seems to be a common error, any advice?

Thanks so much.

I am not sure this is related, but why is your hosts allow set to only one ip? This might be an idiot reply but try to specifically allow both the w2k and Samba Server.

The hosts allow line is, by default, commented out in the smb.conf file. I recently changed it to the one IP that you see. I changed it to the IPs of both machines. The results are the same with each of these three configurations.

Thanks though.