Hi there, my first post to the lists!

*Environment: *
Linux RHEL4 x86_64 kernel 2.6.9-42
Samba 3.0.25b-0.4E.5

I am using winbind. My server is joined to an AD domain which has a two way trust with an NT4 domain.

This is the only linux box in the windows domain.

I am trying to login with NT4 domain user.

*From login prompt:*
I can log in using an AD user.
I CANNOT log in using an NT4 user even though the 2 way trust is established.

*From root user:*
I can su - to both AD and NT4 users as no password needed.

If I try logging in as NT4 user and I enter the correct password the prompt returns "su: incorrect password" If I try logging in as NT4 user and I enter the INCORRECT password the prompt returns 2 lines. "Wrong password" and "su: incorrect password"

My smb.conf

[global]
    workgroup = AD
    realm = AD.DOMAIN
    netbios name = LNXSAMBA
    server string = Samba Server
    interfaces = eth0
    security = ADS
    password server = server.ad.domain
    log level = 1
    log file = /var/log/samba/%m.log
    max log size = 0
    smb ports = 139
    name resolve order = wins bcast hosts
    preferred master = No
    local master = No
    domain master = No
    winbind separator = +
    dns proxy = No
    wins server = 10.100.3.51
    winbind enum users = yes
    winbind enum groups = yes
    idmap uid = 10000-65000
    idmap gid = 10000-65000
    template homedir = /home/NTUsers/%D/%U
    template shell = /bin/bash
    winbind use default domain = no

Should I be able to authenticate NT users through the AD trust using the ADS security method?

Could the problem lie in my pam.d configuration files?

This is my first foray into the world of Samba so if you need any more info please let me know.

Thanks

Roycrom

***************************************************************************
This e-mail is confidential and privileged.  If you are not the intended
recipient do not disclose, copy or distribute information in this e-mail
or take any action in reliance on its content.
***************************************************************************

***************************************************************************
This email has been checked for known viruses. ***************************************************************************
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to