RE: [Samba] computer name instead of username?

2004-01-07 Thread steven.TSE

-Original Message-
From: Andrew Bartlett [mailto:[EMAIL PROTECTED]
Sent: Wednesday, January 07, 2004 12:52 PM
To: steven.TSE
Cc: [EMAIL PROTECTED]
Subject: Re: [Samba] computer name instead of username?


On Wed, Jan 07, 2004 at 11:15:22AM +0800,
[EMAIL PROTECTED] wrote:
 
 Hi,
 
 Since the Failed to verify incoming ticket problem on Samba3.0.1, I
rolled
 back to 3.0.  All the authentication and connection jobs are done
successfully
 for 3.0, and this time clients able to browse to the Samba.  However, I
keep ask
 for the username, password when I access to any of the shared folder.  The
log
 of client shows:
 
 [2004/01/06 17:44:50, 1] smbd/sesssetup.c:reply_spnego_kerberos(218)
   Username CLIENT$ is invalid on this system
 
 where CLIENT$ is the computer name of client computer.  I wonder why it
 authenticate with computer name rather than user name.

Known issue that is still on my 'pet hate' list.  Basicly, machines
are people too, and can login, wiht kerberos.  We need to allow them
to log in.  There bug #722 in bugzilla.samba.org.

Andrew Bartlett


Thanks Andrew, is that mean I have to wait until next bug fixed version?
Samba3.0.2?
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] computer name instead of username?

2004-01-06 Thread steven . tse

Hi,

Since the Failed to verify incoming ticket problem on Samba3.0.1, I rolled
back to 3.0.  All the authentication and connection jobs are done successfully
for 3.0, and this time clients able to browse to the Samba.  However, I keep ask
for the username, password when I access to any of the shared folder.  The log
of client shows:

[2004/01/06 17:44:50, 1] smbd/sesssetup.c:reply_spnego_kerberos(218)
  Username CLIENT$ is invalid on this system

where CLIENT$ is the computer name of client computer.  I wonder why it
authenticate with computer name rather than user name.

smb.conf

[global]
workgroup = CHAETO
realm = CHAETO.COM
server string = Test Linux File Server
security = ADS
auth methods = winbind
password server = pdc
client lanman auth = No
client plaintext auth = No
log file = /var/log/samba/log.%m
min protocol = LANMAN1
local master = No
wins server = 192.168.0.248
ldap ssl = no
idmap uid = 1-2
idmap gid = 1-2
template homedir = /home/winnt/%D/%U
template shell = /bin/bash
winbind separator = +

[public]
comment = Public Stuff
path = /public/shared
valid users = '@CHAETO+Domain Users'
write list = '@CHAETO+Domain Users'
force group = ntgroup
create mask = 0666
directory mask = 0777

Please help, thankyou

Best Rgds.,
Steven
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] computer name instead of username?

2004-01-06 Thread Andrew Bartlett
On Wed, Jan 07, 2004 at 11:15:22AM +0800, [EMAIL PROTECTED] wrote:
 
 Hi,
 
 Since the Failed to verify incoming ticket problem on Samba3.0.1, I rolled
 back to 3.0.  All the authentication and connection jobs are done successfully
 for 3.0, and this time clients able to browse to the Samba.  However, I keep ask
 for the username, password when I access to any of the shared folder.  The log
 of client shows:
 
 [2004/01/06 17:44:50, 1] smbd/sesssetup.c:reply_spnego_kerberos(218)
   Username CLIENT$ is invalid on this system
 
 where CLIENT$ is the computer name of client computer.  I wonder why it
 authenticate with computer name rather than user name.

Known issue that is still on my 'pet hate' list.  Basicly, machines
are people too, and can login, wiht kerberos.  We need to allow them
to log in.  There bug #722 in bugzilla.samba.org.

Andrew Bartlett
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba