Re: [Samba] Linux in a Windows 2k3 domain - odd lockout issue

2007-10-03 Thread Volker Lendecke
On Tue, Oct 02, 2007 at 08:46:24AM -0700, Christopher Dick wrote:
 I don't have to wait any time at all to re-enable my
 user ID in the AD.  I just walk around the cube farm
 to the Windows admin and have him clear the checkbox
 on my user ID.  Walk back to my cube and everything is
 back to working again.

Are you logged into your local workstation as a user with
the same name as your domain account, but with a different
password?

Volker


pgprrhBptKv9u.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Linux in a Windows 2k3 domain - odd lockout issue

2007-10-03 Thread Christopher Dick

--- Volker Lendecke [EMAIL PROTECTED] wrote:

 On Tue, Oct 02, 2007 at 08:46:24AM -0700,
 Christopher Dick wrote:
  I don't have to wait any time at all to re-enable
 my
  user ID in the AD.  I just walk around the cube
 farm
  to the Windows admin and have him clear the
 checkbox
  on my user ID.  Walk back to my cube and
 everything is
  back to working again.
 
 Are you logged into your local workstation as a user
 with
 the same name as your domain account, but with a
 different
 password?
 
 Volker
 

No, I'm not.  As far as my workstation is concerned,
my user ID doesn't really exist, near as I can tell. 
My home folder was created automatically when I first
logged on, and it is /home/DOMAIN/user, and I have no
representative user ID in /etc/passwd at all.

Chris


  

Don't let your dream ride pass you by. Make it a reality with Yahoo! Autos.
http://autos.yahoo.com/index.html
 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Linux in a Windows 2k3 domain - odd lockout issue

2007-10-02 Thread Christopher Dick

--- Doug VanLeuven [EMAIL PROTECTED] wrote:

 Christopher Dick wrote:
  I am currently running an openSuSE 10.2 machine in
 a
  Windows 2k3 domain.  I have upgraded to Samba
 3.0.26a,
  hoping it would solve my issue, but so far no
 luck.
 
  I was successful in adding my machine to the
 domain,
  and the DC logs show repeated successful
  authentications, and those few typo'd attempts,
 but
  nothing that is a sequence of failed logins.
 
  I get tickets and can access shares from machines
 all
  over the network without needing to
 re-authenticate.
 
  The problem is, at approx. 3:30 every afternoon,
 the
  domain controller locks my user ID as if I had
 failed
  repeatedly to type in the correct password. 
 Though
  the DC does not show this in the logs.

 I only know of logon hours under the user account on
 the AD.
 
 Maybe your systems require a more frequent machine
 password change than 
 one week.
 
 It would be helpful to know what steps you take to
 re-enable the account 
 or how long you have to wait.
 
 Does samba manage the keytab or did you manually add
 the kerberos keytab 
 principals?
 
 Regards, Doug
 

I don't have to wait any time at all to re-enable my
user ID in the AD.  I just walk around the cube farm
to the Windows admin and have him clear the checkbox
on my user ID.  Walk back to my cube and everything is
back to working again.

As for the samba vs. kerberos keytab, Samba was
handling it, and I thought maybe I should actually
specify kerberos authentication, so I changed it, but
that made no impact on the issue at all.

I checked with a consultant who happens to be here,
and he said that the machine password shouldn't have
any effect on my user ID, which is what is
inexplicably getting locked.

Thanks for giving me at least somewhere to start
looking, though.  I do appreciate it. 



   

Need a vacation? Get great deals
to amazing places on Yahoo! Travel.
http://travel.yahoo.com/
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] Linux in a Windows 2k3 domain - odd lockout issue

2007-09-30 Thread Christopher Dick
I am currently running an openSuSE 10.2 machine in a
Windows 2k3 domain.  I have upgraded to Samba 3.0.26a,
hoping it would solve my issue, but so far no luck.

I was successful in adding my machine to the domain,
and the DC logs show repeated successful
authentications, and those few typo'd attempts, but
nothing that is a sequence of failed logins.

I get tickets and can access shares from machines all
over the network without needing to re-authenticate.

The problem is, at approx. 3:30 every afternoon, the
domain controller locks my user ID as if I had failed
repeatedly to type in the correct password.  Though
the DC does not show this in the logs.

In exchange for running Linux, I am told I can't call
help desk for support, and no changes can be made to
systems expressly to make them linux compatible.

Any help is appreciated, if someone might have an idea
of what this might be.

Thanks! 


  

Shape Yahoo! in your own image.  Join our Network Research Panel today!   
http://surveylink.yahoo.com/gmrs/yahoo_panel_invite.asp?a=7 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Linux in a Windows 2k3 domain - odd lockout issue

2007-09-30 Thread Doug VanLeuven

Christopher Dick wrote:

I am currently running an openSuSE 10.2 machine in a
Windows 2k3 domain.  I have upgraded to Samba 3.0.26a,
hoping it would solve my issue, but so far no luck.

I was successful in adding my machine to the domain,
and the DC logs show repeated successful
authentications, and those few typo'd attempts, but
nothing that is a sequence of failed logins.

I get tickets and can access shares from machines all
over the network without needing to re-authenticate.

The problem is, at approx. 3:30 every afternoon, the
domain controller locks my user ID as if I had failed
repeatedly to type in the correct password.  Though
the DC does not show this in the logs.
  

I only know of logon hours under the user account on the AD.

Maybe your systems require a more frequent machine password change than 
one week.


It would be helpful to know what steps you take to re-enable the account 
or how long you have to wait.


Does samba manage the keytab or did you manually add the kerberos keytab 
principals?


Regards, Doug


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba