could you add the following and send the generated log files os level = 3 passdb:5 auth:10 winbind:5
* spnego has something to do with this failure regards, saddam abu ghaida On Thu, Nov 27, 2008 at 2:01 AM, Kums <[EMAIL PROTECTED]> wrote: > Hi, > > Iam trying to setup Samba version 3.2.3 on Redhat (RHEL5) server to use > Active Directory for authentication. I followed the instructions from > article in following website: > http://technet.microsoft.com/en-au/magazine/dd228986.aspx > > Setup Winbind + Samba + Kerberos and it seems to work fine. I can see the > users in Active Directory through winbind as well as authenticate users > using NTLM authentication. > > Problem is that Iam unable to access Samba share from Windows clients as AD > user. Analyzing the network traffic on SMBD port gives: > --- > 10.849969 192.168.97.2 -> 192.168.97.5 SMB Session Setup AndX Request, > NTLMSSP_AUTH, User: TESTDOMAIN\testuser > 10.853302 192.168.97.5 -> 192.168.97.2 SMB Session Setup AndX Response, > Error:STATUS_LOGON_FAILURE > -- > > I can however access the Samba share as local user in the Samba server via > smbpasswd: > --- > 166.059746 192.168.97.2 -> 192.168.97.5 SMB Session Setup AndX Request, > NTLMSSP_AUTH, User: D1950-01\kums > 166.068297 192.168.97.5 -> 192.168.97.2 SMB Session Setup AndX Response > 166.068500 192.168.97.2 -> 192.168.97.5 SMB Tree Connect AndX Request, Path: > \\192.168.97.5\global > 166.068787 192.168.97.5 -> 192.168.97.2 SMB Tree Connect AndX Response > --- > > Winbind gives following error, not sure if this is significant for I can > access the AD via "wbinfo" > [2008/11/26 15:22:58, 1] > libsmb/cliconnect.c:cli_session_setup_kerberos(626) > cli_session_setup_kerberos: spnego_gen_negTokenTarg failed: Cannot find > KDC for requested realm > > Please see attached for configuration detail + detailed error log. Googling > helped me to get so far, but not completely resolve this issue. > > Please advise. > > Thanks in Advance, > -Kums > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/listinfo/samba > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
