Thank you! Buchan Milne wrote:
> > Message: 7 > > Date: Thu, 17 Oct 2002 12:31:39 -0400 > > From: "Albert E. Whale" <[EMAIL PROTECTED]> > > Organization: ABS Computer Technology, Inc. > > To: Samba <[EMAIL PROTECTED]> > > Subject: [Samba] NT_STATUS_ACCESS_DENIED - Samba on Mandrake 8.2 > > > > I am attempting to integrate a Linux Samba Server with an NT 4.0 PDC. > > Ideally I am looking to authenticate the users on the PDC, and then > > permit access to the Samba Shares on the Linux Box. > > You probably want to setup winbind. Winbind is available in Mandrake > 8.2, you may need to install it: > > # urpmi samba-winbind > > You will need to uncomment the winbind sections of the default smb.conf > file, set it to 'security=domain', set the workgroup, and join the domain: > > # smbpasswd -j <domain> -U <domain admin account> > > For more information (note that most steps should have been done for you > in the 8.2 RPMS) see: > > http://ranger.dnsalias.com/mandrake/muo/connect/csamba5.html#winbind > > Note that Mandrake 9.0 allows you to join it to the domain (with full > winbind setup) during installation (probably only in expert > installation, choose "windows domain" as authentication method where you > enter your root password). > > The latest samba RPMS for 8.2 (2.2.6 is available at > http://ranger.dnsalias.com/mandrake/samba) have a better example > smb.conf example configuration for winbind, /etc/samba/smb-winbind.conf. > All that you should need to do to it is change your workgroup name). > > > I have several > > issues, but the one which is presenting itself currently is when I > > attempt to Browse the PDC using smbclient. I get the following: > > > > smbclient -L dumbo > > You haven't specified a username, by default smbclient uses the username > you are currently logged in as. Do you have a domain account with the > same username? > > > added interface ip=192.168.0.11 bcast=192.168.15.255 nmask=255.255.240.0 > > > > session request to DUMBO failed (Called name not present) > > Are you sure you're using the right netbios name for the machine (only > applies to error above). > > > Password: > > Anonymous login successful > > You haven't authenticated successfully. > > > Domain=[FCCA.COM] OS=[Windows NT 4.0] Server=[NT LAN Manager 4.0] > > > > Sharename Type Comment > > --------- ---- ------- > > Error returning browse list: NT_STATUS_ACCESS_DENIED > > > > Server Comment > > --------- ------- > > ACCMAN-JAIME > > ACCMAN-ROUSCHKA > > > > Dumbo is the DNS Name of the PDC. > > Netbios and DNS names should preferably match (either using DNS > aliases/CNAMEs etc) > > > Why Do I get the > > NT_STATUS_ACCESS_DENIED message? > > Because your machine does not have the guest account enabled, and you > haven't connected with a valid username/password. > > > I get this same message when I attempt > > to use the Samba Share as an NT PDC User (using the Username and > > password as well). > > That would probably be because you either haven't joined the domain, or > don't have existing usernames on the samba server. > > Here are two sessions to our windows server (member of our samba > domain), one without a valid username/password, one with a valid > username/password: > > [bgmilne@bgmilne bgmilne]$ smbclient -L atlas > added interface ip=146.232.174.36 bcast=146.232.174.255 nmask=255.255.255.0 > Password: > Anonymous login successful > Domain=[CAE] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager] > > Sharename Type Comment > --------- ---- ------- > Error returning browse list: NT_STATUS_ACCESS_DENIED > > Server Comment > --------- ------- > > Workgroup Master > --------- ------- > [bgmilne@bgmilne bgmilne]$ smbclient -L atlas > added interface ip=146.232.174.36 bcast=146.232.174.255 nmask=255.255.255.0 > Password: > Domain=[CAE] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager] > > Sharename Type Comment > --------- ---- ------- > pwshare Disk > pw Disk > IPC$ IPC Remote IPC > D$ Disk Default share > ADMIN$ Disk Remote Admin > C$ Disk Default share > > Server Comment > --------- ------- > > Workgroup Master > --------- ------- > > Regards, > Buchan > > -- > |----------------Registered Linux User #182071-----------------| > Buchan Milne Mechanical Engineer, Network Manager > Cellphone * Work +27 82 472 2231 * +27 21 8828820x121 > Stellenbosch Automotive Engineering http://www.cae.co.za > GPG Key http://ranger.dnsalias.com/bgmilne.asc > 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -- Albert E. Whale - CISSP http://www.abs-comptech.com ---------------------------------------------------------------------- ABS Computer Technology, Inc. - ESM, Computer & Networking Specialists Sr. Security, Network, and Systems Consultant Board of Directors - InfraGard - Pittsburgh, PA -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
