[samba] Проблема с подключением WinXP к Самба + ЛДАП

Andrey Shilnikov shan на etersoft.ru
Вс Фев 24 20:12:25 MSK 2008


Не добавить в PDC виндовую машину. При попытке ввести в домен, пишет что имя 
пользователя и пароль не опознаны.

В логах /syslog/messages

Feb 24 19:19:22 testing winbindd[30981]: [2008/02/24 19:19:22, 0] 
libsmb/clientgen.c:cli_receive_smb(112)
Feb 24 19:19:22 testing winbindd[30981]:   Receiving SMB: Server stopped 
responding
Feb 24 19:19:28 testing su[5643]: pam_ldap: error trying to bind (Invalid 
credentials)
Feb 24 19:19:35 testing winbindd[30981]: [2008/02/24 19:19:35, 0] 
libsmb/clientgen.c:cli_receive_smb(112)
Feb 24 19:19:35 testing winbindd[30981]:   Receiving SMB: Server stopped 
responding
Feb 24 19:19:47 testing winbindd[30981]: [2008/02/24 19:19:47, 0] 
libsmb/clientgen.c:cli_receive_smb(112)
Feb 24 19:19:47 testing winbindd[30981]:   Receiving SMB: Server stopped 
responding
Feb 24 19:19:47 testing winbindd[30996]: [2008/02/24 19:19:47, 0] 
nsswitch/idmap.c:idmap_alloc_init(750)
Feb 24 19:19:47 testing winbindd[30996]:   ERROR: Initialization failed for 
alloc backend, deferred!
Feb 24 19:19:47 testing smbd[5583]: [2008/02/24 19:19:47, 0] 
auth/auth_util.c:create_builtin_administrators(792)
Feb 24 19:19:47 testing smbd[5583]:   create_builtin_administrators: Failed to 
create Administrators
Feb 24 19:19:47 testing winbindd[30996]: [2008/02/24 19:19:47, 0] 
nsswitch/idmap.c:idmap_alloc_init(750)
Feb 24 19:19:47 testing winbindd[30996]:   ERROR: Initialization failed for 
alloc backend, deferred!
Feb 24 19:19:47 testing smbd[5632]: [2008/02/24 19:19:47, 0] 
auth/auth_util.c:create_builtin_administrators(792)
Feb 24 19:19:47 testing smbd[5632]:   create_builtin_administrators: Failed to 
create Administrators
Feb 24 19:19:47 testing winbindd[30996]: [2008/02/24 19:19:47, 0] 
nsswitch/idmap.c:idmap_alloc_init(750)
Feb 24 19:19:47 testing winbindd[30996]:   ERROR: Initialization failed for 
alloc backend, deferred!
Feb 24 19:19:47 testing smbd[5647]: [2008/02/24 19:19:47, 0] 
auth/auth_util.c:create_builtin_administrators(792)
Feb 24 19:19:47 testing smbd[5647]:   create_builtin_administrators: Failed to 
create Administrators
Feb 24 19:19:47 testing winbindd[30996]: [2008/02/24 19:19:47, 0] 
nsswitch/idmap.c:idmap_alloc_init(750)
Feb 24 19:19:47 testing winbindd[30996]:   ERROR: Initialization failed for 
alloc backend, deferred!
Feb 24 19:19:47 testing smbd[5583]: [2008/02/24 19:19:47, 0] 
auth/auth_util.c:create_builtin_users(758)
Feb 24 19:19:47 testing smbd[5583]:   create_builtin_users: Failed to create 
Users
Feb 24 19:19:47 testing winbindd[30996]: [2008/02/24 19:19:47, 0] 
nsswitch/idmap.c:idmap_alloc_init(750)
Feb 24 19:19:47 testing winbindd[30996]:   ERROR: Initialization failed for 
alloc backend, deferred!
Feb 24 19:19:47 testing smbd[5632]: [2008/02/24 19:19:47, 0] 
auth/auth_util.c:create_builtin_users(758)
Feb 24 19:19:47 testing winbindd[30996]: [2008/02/24 19:19:47, 0] 
nsswitch/idmap.c:idmap_alloc_init(750)
Feb 24 19:19:47 testing smbd[5632]:   create_builtin_users: Failed to create 
Users
Feb 24 19:19:47 testing winbindd[30996]:   ERROR: Initialization failed for 
alloc backend, deferred!
Feb 24 19:19:47 testing smbd[5647]: [2008/02/24 19:19:47, 0] 
auth/auth_util.c:create_builtin_users(758)
Feb 24 19:19:47 testing smbd[5647]:   create_builtin_users: Failed to create 
Users

Какие именно логи по самбе выложить, я не знаю, т.к. их очень много и все они 
разные.
Вот ./samba/<адрес-машины-где стоит самба>/.log
[2008/02/24 20:09:42, 5] auth/auth.c:get_ntlm_challenge(97)
  auth_get_challenge: module winbind did not want to specify a challenge
[2008/02/24 20:09:42, 5] auth/auth.c:get_ntlm_challenge(137)
  auth_context challenge created by random
[2008/02/24 20:09:42, 5] auth/auth.c:get_ntlm_challenge(138)
  challenge is:
[2008/02/24 20:09:42, 5] lib/util.c:dump_data(2264)
  [000] 04 21 02 E9 07 CF B4 D6                           .!......
[2008/02/24 20:09:42, 5] lib/util.c:show_msg(484)
[2008/02/24 20:09:42, 5] lib/util.c:show_msg(494)
  size=330
  smb_com=0x73
  smb_rcls=22
  smb_reh=0
  smb_err=49152
  smb_flg=136
  smb_flg2=51201
  smb_tid=0
  smb_pid=30981
  smb_uid=100
  smb_mid=2
  smt_wct=4
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=    0 (0x0)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=  233 (0xE9)
  smb_bcc=287
[2008/02/24 20:09:42, 3] smbd/process.c:process_smb(1068)
  Transaction 2 of length 244
[2008/02/24 20:09:42, 5] lib/util.c:show_msg(484)
[2008/02/24 20:09:42, 5] lib/util.c:show_msg(494)
  size=240
  smb_com=0x73
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=8
  smb_flg2=51201
  smb_tid=0
  smb_pid=30981
  smb_uid=100
  smb_mid=3
  smt_wct=12
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=    0 (0x0)
  smb_vwv[ 2]=65535 (0xFFFF)
  smb_vwv[ 3]=    2 (0x2)
  smb_vwv[ 4]=    1 (0x1)
  smb_vwv[ 5]=    0 (0x0)
  smb_vwv[ 6]=    0 (0x0)
  smb_vwv[ 7]=  158 (0x9E)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_vwv[10]=53340 (0xD05C)
  smb_vwv[11]=32768 (0x8000)
  smb_bcc=181
[2008/02/24 20:09:42, 3] smbd/process.c:switch_message(926)
  switch message SMBsesssetupX (pid 7158) conn 0x0
[2008/02/24 20:09:42, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2008/02/24 20:09:42, 5] auth/auth_util.c:debug_nt_user_token(448)
  NT user token: (NULL)
[2008/02/24 20:09:42, 5] auth/auth_util.c:debug_unix_user_token(474)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2008/02/24 20:09:42, 5] smbd/uid.c:change_to_root_user(288)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2008/02/24 20:09:42, 3] smbd/sesssetup.c:reply_sesssetup_and_X(1244)
  wct=12 flg2=0xc801
[2008/02/24 20:09:42, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1029)
  Doing spnego session setup
[2008/02/24 20:09:42, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(1060)
  NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[]
[2008/02/24 20:09:42, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(739)
  Got user=[ETERSOFT-PDC$] domain=[ETERSOFT] workstation=[ETERSOFT-PDC] len1=0 
len2=0

ЛДАП и ГОсу настраивал сам до этого, в ее работоспособности сомневаться не 
приходиться. Конфигурацию самбы взял отсюда 
http://forum.ubuntu.ru/index.php?topic=10440.msg82533


Подробная информация о списке рассылки Samba