Samba + overovani v domene

[Petr Tison]

Je to sice stare tema, ale ja s nim mam stale problemy.
Mel by k tomu nekdo nejakou poznamku? Budu velmi vdecen. Ma nekdo stejnou
konfiguraci?

pt


Mam NT 4.0 + SP6a
Mam SuSE 6.4 se sambou 2.0.6
V Server Manageru pridam svoje PC
Zaregistruji PC v domene prikazem

baby:~ # smbpasswd -j UD-PRAGUE -r NEO
2002/05/25 17:40:05 : change_trust_account_password: Changed password for
domain UD-PRAGUE.
Joined domain UD-PRAGUE.

Upravim smb.conf
   encrypt passwords = yes
   security = domain
   password server = *
Spustim sambu ... OK

V Server Manager si dam vlastnosti linuxoveho stroje
  - vidim co je na PC nasdileno
  - vse je OK


Ted mam SuSE 7.1cz se sambou 2.0.7
Opakuji vyse uvedeny postup - registrace PC v domene je OK
Chci si zobrazit vlastnosti PC v Server Manageru
  - vyskoci mi hlaska Access is denied.
  - v EventLogu na PDC se objevi: "The server received an incorrectly
formatted request from \\BABY."

a samba LOG je nasledujici:

2002/05/25 17:55:49, 1] smbd/server.c:main(641)
  smbd version 2.0.7 started.
  Copyright Andrew Tridgell 1992-1998
[2002/05/25 17:55:49, 1] smbd/files.c:file_init(216)
  file_init: Information only: requested 10000 open files, 1014 are
available.
[2002/05/25 17:56:15, 0] rpc_client/cli_pipe.c:rpc_read(89)
  rpc_read: Error 1 in cli_read
[2002/05/25 17:56:15, 0] smbd/password.c:domain_client_validate(1470)
  domain_client_validate: unable to validate password for user petrt in
domain UD-PRAGUE to Domain controller *. Error was ERRSRV - ERRerror
(Non-specific error code.).
[2002/05/25 17:56:15, 1] smbd/password.c:pass_check_smb(500)
  Couldn't find user 'petrt' in smb_passwd file.
[2002/05/25 17:56:15, 1] smbd/password.c:pass_check_smb(500)
  Couldn't find user 'petrt' in smb_passwd file.
[2002/05/25 17:56:15, 1] smbd/reply.c:reply_sesssetup_and_X(925)
  Rejecting user 'petrt': authentication failed
[2002/05/25 17:56:15, 0] rpc_client/cli_pipe.c:rpc_read(89)
  rpc_read: Error 1 in cli_read
[2002/05/25 17:56:15, 0] smbd/password.c:domain_client_validate(1470)
  domain_client_validate: unable to validate password for user petrt in
domain UD-PRAGUE to Domain controller *. Error was ERRSRV - ERRerror
(Non-specific error code.).
[2002/05/25 17:56:15, 1] smbd/password.c:pass_check_smb(500)
  Couldn't find user 'petrt' in smb_passwd file.
[2002/05/25 17:56:15, 1] smbd/password.c:pass_check_smb(500)
  Couldn't find user 'petrt' in smb_passwd file.
[2002/05/25 17:56:15, 1] smbd/reply.c:reply_sesssetup_and_X(925)
  Rejecting user 'petrt': authentication failed
[2002/05/25 17:56:15, 0] rpc_client/cli_pipe.c:rpc_read(89)
  rpc_read: Error 1 in cli_read
[2002/05/25 17:56:15, 0] smbd/password.c:domain_client_validate(1470)
  domain_client_validate: unable to validate password for user petrt in
domain UD-PRAGUE to Domain controller *. Error was ERRSRV - ERRerror
(Non-specific error code.).
[2002/05/25 17:56:15, 1] smbd/password.c:pass_check_smb(500)
  Couldn't find user 'petrt' in smb_passwd file.
[2002/05/25 17:56:15, 1] smbd/password.c:pass_check_smb(500)
  Couldn't find user 'petrt' in smb_passwd file.
[2002/05/25 17:56:15, 1] smbd/reply.c:reply_sesssetup_and_X(925)
  Rejecting user 'petrt': authentication failed



Pri opetovnem pokusu o zmenu hesla na PDC
V EventLogu na PDC:
The session setup from the computer BABY failed to authenticate. The name of
the account referenced in the security database is BABY$.  The following
error occurred:
Access is denied.

baby:~ # smbpasswd -j UD-PRAGUE
cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
cli_nt_setup_creds: auth2 challenge failed
modify_trust_password: unable to setup the PDC credentials to machine
MORPHEUS. Error was : NT_STATUS_ACCESS_DENIED.
cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
cli_nt_setup_creds: auth2 challenge failed
modify_trust_password: unable to setup the PDC credentials to machine NEO.
Error was : NT_STATUS_ACCESS_DENIED.
2002/05/25 17:57:40 : change_trust_account_password: Failed to change
password for domain UD-PRAGUE.
Unable to join domain UD-PRAGUE.