[samba] wbinfo -t & ntlm_auth

[Maxim Morzhukhin]

25 Апрель 2004 12:42, Alexander Bokovoy написал:
> On Fri, Apr 23, 2004 at 10:30:33AM +0600, Maxim Morzhukhin wrote:
> >    Была samba 3.0.3 alt0.3 в домене w2k - все работало нормально!
> >
> >    Обновился до alt0.5 и работает тоже нормально - видно в сетевом
> > окружении, на расшаренные диски можно писать/читать, wbinfo -u и
> > wbinfo -g отображают списки, но не работает wbinfo -t и ntlm_auth
> > --username
> >
> > kinit user на DOMAIN.RU - получает билет
>
> Это неважно. Покажите конфигурационный файл.
[libdefaults]
    default_realm = FIRMA.RU

[realms]
    FIRMA.RU = {
        kdc = 192.168.1.2
    }


>
> > #wbinfo -t
> > checking the trust secret via RPC calls failed
> > error code was NT_STATUS_UNSUCCESSFUL (0xc0000001)
> > Could not check secret
> >
> > ------ log -------
> > [2004/04/23 10:24:53, 2]
> > libsmb/cliconnect.c:cli_session_setup_kerberos(512)
> >   Doing kerberos session setup
> > [2004/04/23 10:24:53, 0] rpc_client/cli_pipe.c:rpc_auth_pipe(336)
> >   rpc_auth_pipe: wrong schannel auth len 24
> > [2004/04/23 10:24:53, 0]
> > rpc_client/cli_netlogon.c:cli_nt_setup_creds(249)
> >   cli_nt_setup_creds: request challenge failed
> > [2004/04/23 10:24:53, 2]
> > nsswitch/winbindd_misc.c:winbindd_check_machine_acct(98)
> >   Checking the trust account password returned
> > NT_STATUS_UNSUCCESSFUL --------------------
> >
> > ntlm_auth --username=user
> > password:
> > NT_STATUS_NO_LOGON_SERVERS: No logon servers (0xc000005e)
>
> password server = PDC
[global]
    workgroup = FIRMA
    netbios name = COMP
    use spnego = yes
    smb ports = 139 445
    server string = "comp"
    message command = /usr/bin/linpopup "%f" "%m" %s; rm %s
    load printers = no
    log file = /var/log/samba/log.%U
    max log size = 500
    log level = 2
    syslog = 0
    realm = FIRMA.RU
    security = ADS
    password server = 192.168.1.2
    encrypt passwords = yes
    idmap uid = 10000-20000
    idmap gid = 10000-20000
    winbind enum users = yes
    winbind enum groups = yes
    winbind separator = +
    ;winbind use default domain = yes
    socket options = TCP_NODELAY
    interfaces = eth0 lo
    bind interfaces only = yes
    name resolve order = hosts lmhosts wins bcast
    dns proxy = no
    dos charset = cp866
    unix charset = koi8-r
 
   use sendfile = yes

password server = сервер выполняющий роль PDC

-- 
  rgrds
  Maxim