On 8/2/05, Brian Kimsey-Hickman <[EMAIL PROTECTED]> wrote:
> Just upgraded a Debian box to Sarge and my Samba shares don't seem to
> work quite the same. This box should be using Domain Authentication
> and I successfully rejoined the domain with a net join command but the
> only people that can open share are ones that have user account on the
> device and on the domain. Anybody have any ideas?
>
> Here is the config:
>
> # Global parameters
> [global]
>
> panic action = /usr/share/samba/panic-action %d
> workgroup = OCC
> netbios name = COMPT-CD
> server string = CDROM Server
> security = DOMAIN
> encrypt passwords = true
> passdb backend = smbpasswd guest
> obey pam restrictions = Yes
> passwd program = /usr/bin/passwd %u
> passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
> *Retype\snew\sUNIX\spassword:* %n\n .
> syslog = 0
> log file = /var/log/samba/log.%m
> max log size = 1000
> name resolve order = wins lmhosts hosts bcast
> os level = 0
> preferred master = False
> local master = No
> domain master = False
> dns proxy = No
> wins server = 172.30.10.21
> invalid users = root
> guest ok = Yes
>
> [BC_03_07_Jul]
> comment = BCC 2003 July
> path = /iso/shares/BCC_2003_07
> guest only = Yes
>
> [BC_03_08_Aug]
> comment = BCC 2003 August
> path = /iso/shares/BCC_2003_08
> guest only = Yes
>
> [BC_03_09_Sep]
> comment = BCC 2003 September
> path = /iso/shares/BCC_2003_09
> guest only = Yes
>
> [BC_03_10_Oct]
> comment = BCC 2003 October
> path = /iso/shares/BCC_2003_10
> guest only = Yes
>
Found some addition information. I check the event view on my PDC
emulator Domain Controller and found this error message:
Event Type: Audit Failure
Event Source: Security
Event Category: Account Logon
Event ID: 675
Date: 8/3/2005
Time: 7:39:20 AM
User: SYSTEM
Computer: COM1
Description:
Pre-authentication failed:
User Name: cpisbk3
User ID: Additional Information [GUID]:
{S-1-5-21-844678424-286055849-2661016245-1121}
Service Name: krbtgt/OCC
Pre-Authentication Type: 0x2
Failure Code: 0x18
Client Address: 172.30.5.233
Data:
I turned Kerberos pre-authentication off. But, that didn't help.
Anybody have any ideas?
Thanks,
Brian
