Re: [Samba] samba authenticating users via kerberos failure

2012-04-02 Thread Christopher Chan

On Monday, April 02, 2012 12:45 PM, Christopher Chan wrote:
On Friday, March 30, 2012 05:40 PM, Christopher Chan wrote: What does 
this mean? A configuration problem?


Yep. thanks to Andrew Barlett, the problem was identified as kerberos 
method = system tab.


Switching back to default solved it.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] samba authenticating users via kerberos failure

2012-04-01 Thread Christopher Chan

On Friday, March 30, 2012 05:40 PM, Christopher Chan wrote:
When users try to access the samba server via \\shortname, they get a 
dialog prompting them for their username and password. Access via 
\\ip.addr does not exhibit that though.


samba 3.5.13 + winbind + idmap_ldap backend

Logs from samba during attempts to access via \\shortname:

From log.clientip
[2012/03/30 17:27:46.502131,  1] 
../../../samba-3.5.13/source3/smbd/sesssetup.c:332()

  Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE!

From log.winbindd
[2012/03/30 17:27:01.538840,  6] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:768()

  accepted socket 21
[2012/03/30 17:27:01.539159, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:620()

  process_request: request fn INTERFACE_VERSION
[2012/03/30 17:27:01.539244,  3] 
../../../samba-3.5.13/source3/winbindd/winbindd_misc.c:352()

  [14121]: request interface version
[2012/03/30 17:27:01.539382, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:716()
  winbind_client_response_written[14121:INTERFACE_VERSION]: deliverd 
response to client
[2012/03/30 17:27:01.539525, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:620()

  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2012/03/30 17:27:01.539595,  3] 
../../../samba-3.5.13/source3/winbindd/winbindd_misc.c:385()

  [14121]: request location of privileged pipe
[2012/03/30 17:27:01.539755, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:716()
  winbind_client_response_written[14121:WINBINDD_PRIV_PIPE_DIR]: 
deliverd response to client
[2012/03/30 17:27:01.540017,  6] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:768()

  accepted socket 30
[2012/03/30 17:27:01.540160,  6] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:816()

  closing socket 21, client exited
[2012/03/30 17:27:01.540332, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:593()

  process_request: Handling async request 14121:GETGROUPS
[2012/03/30 17:27:01.540408,  3] 
../../../samba-3.5.13/source3/winbindd/winbindd_getgroups.c:60()

  getgroups root
[2012/03/30 17:27:01.540646,  5] 
../../../samba-3.5.13/source3/winbindd/winbindd_getgroups.c:187()

  Could not convert sid S-0-0: NT_STATUS_NONE_MAPPED
[2012/03/30 17:27:01.540733, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:655()

  wb_request_done[14121:GETGROUPS]: NT_STATUS_NONE_MAPPED
[2012/03/30 17:27:01.540866, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:716()
  winbind_client_response_written[14121:GETGROUPS]: deliverd response 
to client
[2012/03/30 17:27:01.541252, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:593()

  process_request: Handling async request 14121:GETGROUPS
[2012/03/30 17:27:01.541333,  3] 
../../../samba-3.5.13/source3/winbindd/winbindd_getgroups.c:60()

  getgroups root
[2012/03/30 17:27:01.541513,  5] 
../../../samba-3.5.13/source3/winbindd/winbindd_getgroups.c:187()

  Could not convert sid S-0-0: NT_STATUS_NONE_MAPPED
[2012/03/30 17:27:01.541588, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:655()

  wb_request_done[14121:GETGROUPS]: NT_STATUS_NONE_MAPPED
[2012/03/30 17:27:01.541706, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:716()
  winbind_client_response_written[14121:GETGROUPS]: deliverd response 
to client
[2012/03/30 17:27:01.546385,  6] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:816()

  closing socket 30, client exited
[2012/03/30 17:27:10.089633,  6] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:768()

  accepted socket 21
[2012/03/30 17:27:10.089909, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:620()

  process_request: request fn INTERFACE_VERSION
[2012/03/30 17:27:10.089985,  3] 
../../../samba-3.5.13/source3/winbindd/winbindd_misc.c:352()

  [14124]: request interface version
[2012/03/30 17:27:10.090116, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:716()
  winbind_client_response_written[14124:INTERFACE_VERSION]: deliverd 
response to client
[2012/03/30 17:27:10.090248, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:620()

  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2012/03/30 17:27:10.090317,  3] 
../../../samba-3.5.13/source3/winbindd/winbindd_misc.c:385()

  [14124]: request location of privileged pipe
[2012/03/30 17:27:10.090474, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:716()
  winbind_client_response_written[14124:WINBINDD_PRIV_PIPE_DIR]: 
deliverd response to client
[2012/03/30 17:27:10.090775,  6] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:768()

  accepted socket 30
[2012/03/30 17:27:10.090910,  6] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:816()

  closing socket 21, client exited
[2012/03/30 17:27:10.091091, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:593()

  process_request: Handling async request 14124:GETPWNAM
[2012/03/30 17:27:10.091183,  3] 
../../../samba-3.5.13/source3/winbindd/winbindd_getpwnam.c:55()

  getpwnam mailnull
[2012/03/30 17:27:10.091329, 10] 
../../

[Samba] samba authenticating users via kerberos failure

2012-03-30 Thread Christopher Chan
When users try to access the samba server via \\shortname, they get a 
dialog prompting them for their username and password. Access via 
\\ip.addr does not exhibit that though.


samba 3.5.13 + winbind + idmap_ldap backend

Logs from samba during attempts to access via \\shortname:

From log.clientip
[2012/03/30 17:27:46.502131,  1] 
../../../samba-3.5.13/source3/smbd/sesssetup.c:332()

  Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE!

From log.winbindd
[2012/03/30 17:27:01.538840,  6] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:768()

  accepted socket 21
[2012/03/30 17:27:01.539159, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:620()

  process_request: request fn INTERFACE_VERSION
[2012/03/30 17:27:01.539244,  3] 
../../../samba-3.5.13/source3/winbindd/winbindd_misc.c:352()

  [14121]: request interface version
[2012/03/30 17:27:01.539382, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:716()
  winbind_client_response_written[14121:INTERFACE_VERSION]: deliverd 
response to client
[2012/03/30 17:27:01.539525, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:620()

  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2012/03/30 17:27:01.539595,  3] 
../../../samba-3.5.13/source3/winbindd/winbindd_misc.c:385()

  [14121]: request location of privileged pipe
[2012/03/30 17:27:01.539755, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:716()
  winbind_client_response_written[14121:WINBINDD_PRIV_PIPE_DIR]: 
deliverd response to client
[2012/03/30 17:27:01.540017,  6] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:768()

  accepted socket 30
[2012/03/30 17:27:01.540160,  6] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:816()

  closing socket 21, client exited
[2012/03/30 17:27:01.540332, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:593()

  process_request: Handling async request 14121:GETGROUPS
[2012/03/30 17:27:01.540408,  3] 
../../../samba-3.5.13/source3/winbindd/winbindd_getgroups.c:60()

  getgroups root
[2012/03/30 17:27:01.540646,  5] 
../../../samba-3.5.13/source3/winbindd/winbindd_getgroups.c:187()

  Could not convert sid S-0-0: NT_STATUS_NONE_MAPPED
[2012/03/30 17:27:01.540733, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:655()

  wb_request_done[14121:GETGROUPS]: NT_STATUS_NONE_MAPPED
[2012/03/30 17:27:01.540866, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:716()
  winbind_client_response_written[14121:GETGROUPS]: deliverd response 
to client
[2012/03/30 17:27:01.541252, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:593()

  process_request: Handling async request 14121:GETGROUPS
[2012/03/30 17:27:01.541333,  3] 
../../../samba-3.5.13/source3/winbindd/winbindd_getgroups.c:60()

  getgroups root
[2012/03/30 17:27:01.541513,  5] 
../../../samba-3.5.13/source3/winbindd/winbindd_getgroups.c:187()

  Could not convert sid S-0-0: NT_STATUS_NONE_MAPPED
[2012/03/30 17:27:01.541588, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:655()

  wb_request_done[14121:GETGROUPS]: NT_STATUS_NONE_MAPPED
[2012/03/30 17:27:01.541706, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:716()
  winbind_client_response_written[14121:GETGROUPS]: deliverd response 
to client
[2012/03/30 17:27:01.546385,  6] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:816()

  closing socket 30, client exited
[2012/03/30 17:27:10.089633,  6] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:768()

  accepted socket 21
[2012/03/30 17:27:10.089909, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:620()

  process_request: request fn INTERFACE_VERSION
[2012/03/30 17:27:10.089985,  3] 
../../../samba-3.5.13/source3/winbindd/winbindd_misc.c:352()

  [14124]: request interface version
[2012/03/30 17:27:10.090116, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:716()
  winbind_client_response_written[14124:INTERFACE_VERSION]: deliverd 
response to client
[2012/03/30 17:27:10.090248, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:620()

  process_request: request fn WINBINDD_PRIV_PIPE_DIR
[2012/03/30 17:27:10.090317,  3] 
../../../samba-3.5.13/source3/winbindd/winbindd_misc.c:385()

  [14124]: request location of privileged pipe
[2012/03/30 17:27:10.090474, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:716()
  winbind_client_response_written[14124:WINBINDD_PRIV_PIPE_DIR]: 
deliverd response to client
[2012/03/30 17:27:10.090775,  6] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:768()

  accepted socket 30
[2012/03/30 17:27:10.090910,  6] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:816()

  closing socket 21, client exited
[2012/03/30 17:27:10.091091, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd.c:593()

  process_request: Handling async request 14124:GETPWNAM
[2012/03/30 17:27:10.091183,  3] 
../../../samba-3.5.13/source3/winbindd/winbindd_getpwnam.c:55()

  getpwnam mailnull
[2012/03/30 17:27:10.091329, 10] 
../../../samba-3.5.13/source3/winbindd/winbindd_cache.c:4805()

  E