On Mon, 2003-09-29 at 17:05, Ron Garcia-Vidal wrote: > I'm having a problem getting a browse list from my Samba box. I'm > running debian testing with the 3.0beta2-1 package. Winbind appears to > be installed properly and functioning properly: > > [EMAIL PROTECTED]:~# wbinfo -t > checking the trust secret via RPC calls succeeded > > [EMAIL PROTECTED]:~# wbinfo -a Administrator%xxxxx > plaintext password authentication succeeded > challenge/response password authentication succeeded > > wbinfo -u and -g gives me all the users and groups I'm expecting, as > does getent passwd and getent group. I've even set up the PAM modules > for login, ssh and su to recognize winbind and am able to log in via > console and ssh using my NT credentials. > > The problem comes when I try to access via smbclient or Windows > Explorer. I get the following error on the console (with smbclient): > > [EMAIL PROTECTED]:~# smbclient -L //dbs -UAdministrator > Password: > session setup failed: NT_STATUS_LOGON_FAILURE > > And the logs show the following: > > [2003/09/25 12:29:04, 0] auth/pampass.c:smb_pam_account(573) > ~ smb_pam_account: PAM: UNKNOWN PAM ERROR (9) during Account Management > for User: Administrator > [2003/09/25 12:29:04, 0] auth/pampass.c:smb_pam_accountcheck(781) > ~ smb_pam_accountcheck: PAM: Account Validation Failed - Rejecting User > Administrator! > > So under 2.8 this was happening, until I realized I hadn't installed > libpam-smbpass. Once I did this, access was granted. After I upgraded > I checked that all relevant packages were at 3.0beta2 and they were, > including libpam-smbpass. So am I missing another library? Am I > missing something in my smb.conf file? Here's the output of testparm: libpam-smbpass is not required to make samba work correctly. It is of absolutely no use when you put it inside /etc/pam.d/samba.
> > [EMAIL PROTECTED]:~# testparm > Load smb config files from /etc/samba/smb.conf > Processing section "[homes]" > Processing section "[printers]" > Processing section "[Backup]" > Loaded services file OK. > 'winbind separator = +' might cause problems with group membership. > Server role: ROLE_DOMAIN_MEMBER > Press enter to see a dump of your service definitions > > # Global parameters > [global] > ~ workgroup = DOMAIN1 > ~ netbios name = DBS > ~ server string = %h server (Samba %v) > ~ security = DOMAIN > ~ obey pam restrictions = Yes ^^ obey pam restrictions is only useful if you have 'encrypt passwords = no' Jelmer -- Jelmer Vernooij - http://jelmer.vernstok.nl/
signature.asc
Description: This is a digitally signed message part
-- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
