samba - auth problems from local and MS Workstations

lappen · 08-03-2005, 01:04 PM

edit: VERSION and USE flags

Code:

[ebuild   R   ] net-fs/samba-3.0.10  -acl +cups -doc -kerberos -ldap -libclamav +mysql -oav +pam -postgres +python -quotas +readline (-selinux) -winbind -xml -xml2

I've been having some problems with samba lately, it used to work flawlessly then I tried the samba webmin module, restarted samba and now I can't auth my self.

Basically if I try to login from my shell/smb server I get this.

Code:

lappen@anderslejon ~ $ smbclient -L 192.168.1.1
Password:
Domain=[TUX] OS=[Unix] Server=[Samba 3.0.10]
tree connect failed: NT_STATUS_ACCESS_DENIED

And if I type the wrong password I get

Code:

lappen@anderslejon ~ $ smbclient -L 192.168.1.1
Password:
session setup failed: NT_STATUS_LOGON_FAILURE

So it seems it does atleast try to validate the user, i've searched for other similar threads in these forums, some stated clearing the smbpasswd file and adding the user again would work but I still have the same problem.

If I try to map a samba/folder from my XP Workstation I only get the password auth box nothing happens i'm not able to validate my user.

This is my configuration

Code:

[global]
        workgroup = Workgroup
        netbios name = tux
        server string = Samba Server %v
        log file = /var/log/samba/log.%m
        max log size = 50
        log level = 4
        hosts allow = 127. 192.168.1.
        hosts deny = 0.0.0.0/0
        guest account = guest
        map to guest = bad user
        security = user
        encrypt passwords = yes
        smb passwd file = /etc/samba/private/smbpasswd
        username map = /etc/samba/smbusers
        local master = no

        unix password sync = Yes
        pam password change = yes
        passwd program = /usr/bin/passwd %u

        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        interfaces = eth0
        bind interfaces only = yes

        directory security mask = 0700
        create mask = 0700
        invalid users = root @wheel


[homes]
        comment = Home Directories'
        read only = no
        browseable = no
        writable = yes
        #vfs object = /usr/lib/samba/vfs/recycle.so

[public]
        public = yes
        guest ok = yes
        browseable = yes
        comment = Public Files
        create mode = 1766
        writable = no
        write list = lappen
        path = /home/samba/public

[upload]
        public = yes
        guest ok = yes
        comment = Upload
        writeable = yes
        path = /home/samba/public/upload

smbusers and smbpasswd

Code:

#smbusers
# Unix_name = SMB_name1 SMB_name2 ...
# $Header: /var/cvsroot/gentoo-x86/net-fs/samba/files/smbusers,v 1.4 2004/07/18 03:55:05 dragonheart Exp $
root = administrator admin
nobody = guest pcguest smbguest
lappen = anders ANDERS

#smbconfig
lappen:1000:CENSORED:
guest:405:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:[DU         ]:LCT-00000000:

As seen above/below I have mapped unvalidated users to guest so when logging into my XP Workstation it tries my user then Im logged into the guest account and the public shares is visible and partially working, I'm not able to write to [upload] as guest..

Code:

[global]
        guest account = guest
        map to guest = bad user

[upload]
        public = yes
        guest ok = yes
        comment = Upload
        writeable = yes
        path = /home/samba/public/upload

Any suggestions appreciated I've been pulling my hair countless of hours with this/these problems.

lappen · 08-03-2005, 04:53 PM

Updated samba to and tried

Code:

*  net-fs/samba :
        [  I] 3.0.14a-r2 (0)

pdbedit --force-initialized-passwords

Without any luck

lappen · 08-03-2005, 04:59 PM

How strange if I do this I get different output on the screen and in the file

Code:

lappen@anderslejon ~ $ smbclient -L 192.168.1.1 > OUTPUT

FROM THE OUTPUT FILE

Code:

tree connect failed: NT_STATUS_ACCESS_DENIED

FROM THE TTY/SCREEN I don't see any NT_STATUS_ACCESS_DENIED

Code:

doing parameter hosts allow = 127. 192.168.1.
doing parameter hosts deny = 0.0.0.0/0
doing parameter guest account = guest
doing parameter map to guest = bad user
doing parameter security = user
doing parameter encrypt passwords = yes
doing parameter smb passwd file = /etc/samba/private/smbpasswd
doing parameter username map = /etc/samba/smbusers
doing parameter local master = no
doing parameter unix password sync = Yes
doing parameter pam password change = yes
doing parameter passwd program = /usr/bin/passwd %u
doing parameter socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
doing parameter interfaces = eth0
doing parameter bind interfaces only = yes
doing parameter directory security mask = 0700
doing parameter create mask = 0700
doing parameter invalid users = root @wheel
pm_process() returned Yes
added interface ip=192.168.1.1 bcast=192.168.1.255 nmask=255.255.255.0
Client started (version 3.0.14a).
Connecting to 192.168.1.1 at port 445
 session request ok
Serverzone is -7200
Password:

After inputing the correct password

Code:

Doing spnego session setup (blob length=58)
got OID=1 3 6 1 4 1 311 2 2 10
got principal=NONE
Got challenge flags:
Got NTLMSSP neg_flags=0x608a0215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_CHAL_TARGET_INFO
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x60080215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x60080215
  NTLMSSP_NEGOTIATE_UNICODE
  NTLMSSP_REQUEST_TARGET
  NTLMSSP_NEGOTIATE_SIGN
  NTLMSSP_NEGOTIATE_NTLM
  NTLMSSP_NEGOTIATE_NTLM2
  NTLMSSP_NEGOTIATE_128
  NTLMSSP_NEGOTIATE_KEY_EXCH
Domain=[TUX] OS=[Unix] Server=[Samba 3.0.14a]
 session setup ok