SAMBA 2.2.x clen NT + winbind acl

[Jaromír Boško]

Všechny zdravím,

zápasím už několik dní se Sambou 2.2.1a (CVS)
1. Nedokážu se z W2K přihlásit na POKUS_ACL (only user = Yes) 
ani jako bosko ani jako NASENOMENA\bosko - udajně chybné heslo

 cli_net_sam_logon_internal: NT_STATUS_WRONG_PASSWORD
[2001/10/12 08:47:26, 0] smbd/password.c:domain_client_validate(1608)
  domain_client_validate: unable to validate password for user bosko in
domain STAPRO to Domain controller EXCHANGE. 
Error was NT_STATUS_WRONG_PASSWORD.
[2001/10/12 08:47:26, 1] smbd/password.c:pass_check_smb(546)
  Couldn't find user 'stapro\bosko' in passdb.
[2001/10/12 08:47:26, 1] smbd/password.c:pass_check_smb(546)
  Couldn't find user 'stapro\bosko' in passdb.
[2001/10/12 08:47:26, 1] smbd/reply.c:reply_sesssetup_and_X(995)
  Rejecting user 'stapro\bosko': authentication failed

Server je připojený do DOMENY 
( wbinfo -u vypise seznam uzivatelu ve tvaru MASEDOMENA\jmeno),
presto uzivatele nakonec nenajde
2. Nedokážu měnit (přidávat uživatele) - údajně nedostatečná oprávnění

Za případné rady ( popř fungující konfiguraci s winbinddem neodmítnu)

v /etc/pam.d/samba
auth	required	pam_pwdb.so nullok shadow
auth    required	pam_nologin.so
auth    sufficient	pam_winbind.so
auth	required	pam_pwdb.so use_first_pass shadow nullok
account	required	pam_pwdb.so
#session    required	pam_pwdb.so
#password   required	pam_pwdb.so shadow md5


# /etc/nsswitch.conf

passwd:     files winbind
shadow:     files
group:      files winbind

#hosts:     db files nisplus nis dns
hosts:      files nisplus dns

# Samba config file created using SWAT
# Date: 2001/10/12 11:54:13

# Global parameters
[global]
	client code page = 852
	workgroup = NASEDOMENA
	netbios name = NOE
	server string = NOE tancuje sambu
	security = DOMAIN
	encrypt passwords = Yes
	null passwords = Yes
	password server = EXCHANGE
	password level = 2
	username level = 2
	log level = 1
	log file = /var/log/samba/log.%m
	name resolve order = winbind host wins bcast
	load printers = No
	character set = ISO8859-2
	preferred master = False
	local master = No
	domain master = False
	dns proxy = No
	valid chars = Ř:. ç:ć ź:? ý:ü §:| ě:í ś:> Ô:Ň -:. Ł:é .:Ţ ĺ:Ő
	winbind uid = 10000-20000
	winbind gid = 10000-20000
	winbind cache time = 10
	hosts allow = 172.16. 192.168.11. 127.

[PUBLIC]
	comment = PUBLIC na NOE.stapro.cz
	path = /mnt/LIN/samba/PUBLIC
	force user = nobody
	read only = No
	guest only = Yes
	guest ok = Yes
	hosts allow = 172.16.

[bosko]
	comment = moje soukrome
	path = /mnt/LIN/samba/bosko
	guest account = bosko
	admin users = STAPRO\bosko
	read only = No
	create mask = 0600
	directory mask = 0700
	guest ok = Yes
	hosts allow = 172.16.
	volume = JAREK

[POKUS_ACL]
	comment = XFS s podporou ACL
	path = /mnt/hdc2-XFS
	admin users = bosko
	read only = No
	only user = Yes
	hosts allow = 172.16.
	volume = XFS-ACL


Jarek Boško
bosko na stapro.cz
---
Odchozí zpráva neobsahuje viry.
Zkontrolováno antivirovým systémem AVG (http://www.grisoft.cz).
Verze: 6.0.286 / Virová báze: 152 - datum vydání: 9. 10. 2001