|
Hello everyone!
I'm having a strange issue with Samba. Here's the
setup:
WindowsNT 4 PDC
Windows 2000 clients.
Samba 2.2.7 on a Mandrake 9 system that has
successfully joined the domain and is visible when the client systems browse the
network. (config files and error log samples below)
The problem is getting the Win2k clients to
authenticate when they try to connect to shares that aren't open to everyone.
The Samba machine does appear to be communicating with the NT4 PDC, but it
appears that the clients are sending a user name with the domain name added to
the front of the actual user name (or Samba is sending it that way to the PDC
anyway). So if there's a user named "bearl" in the domain "pc-alpha," the
Samba system is checking with the domain controller for a user named
"pc-alphabearl" and the PDC correctly replies that there is no user by that
name.
Does anyone have any suggestions for what could be
causing this and how to fix it?
Thanks very much!
Bill
<error recorded in
/var/log/messages>
Dec 30 13:31:38 dganger rmbd[2314]:
domain_client_validate: unable to validate password for user pc-alphabearl in
domain PC-ALPHA to Domain controller *. Error was
NT_STATUS_NO_SUCH_USER.
<smb.conf file>
[global]
workgroup = PC-ALPHA netbios name = DGANGER server string = Samba Server %v security = DOMAIN encrypt passwords = Yes password server = * pam password change = Yes add user script = /usr/sbin/useradd -s /sbin/false %u log file = /var/log/samba/log.%m max log size = 150 socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 printcap name = lpstat local master = No dns proxy = No remote announce = 192.168.1.255 winbind separator = + winbind cache time = 10 template shell = /bin/bash template homedir = /home/%D/%U winbind uid = 10000-20000 winbind gid = 10000-20000 winbind use default domain = Yes printing = cups [SharedVolume] comment = Main file share path = /storage/sharedvolume public = Yes writable = Yes guest ok = Yes printable = No hide dot files = Yes browseable = Yes [bill] comment = Test folder for Bill path = /storage/bill valid users = bearl public = No writeable = Yes printable = No hide dot files = No browseable = Yes |
