Prev: Dynamic updates to "interfaces" parameter doesn't work
Next: [Samba] samba cifs
From: Alexander Födisch on 16 Dec 2009 05:40
Hi,

we have a very strange behaviour today. On of our clustered (by heartbeat) samba server don't want provide shares
anymore. Every user is blocked with message "access denied".
So I thought there is a problem with mapping of users/groups. But wbinfo / id / getent are working fine.


Do I move the share to another node everything works fine - the shared folders and the smb.conf are stored on a cluster
filesystem, so all other nodes uses the same config file and the shared files have the same permissions.


With log level of 10 I got following log:

[...]
[2009/12/16 10:57:26, 6] auth/auth_sam.c:416(check_samstrict_security)
check_samstrict_security: EVAN is not one of my local names (ROLE_DOMAIN_MEMBER)
[2009/12/16 10:57:26, 10] auth/auth.c:262(check_ntlm_password)
check_ntlm_password: sam had nothing to say
[2009/12/16 10:57:26, 3] smbd/sec_ctx.c:210(push_sec_ctx)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/12/16 10:57:26, 3] smbd/uid.c:428(push_conn_ctx)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/12/16 10:57:26, 3] smbd/sec_ctx.c:310(set_sec_ctx)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/12/16 10:57:26, 5] auth/token_util.c:522(debug_nt_user_token)
NT user token: (NULL)
[2009/12/16 10:57:26, 5] auth/token_util.c:548(debug_unix_user_token)
UNIX token of user 0
Primary group is 0 and contains 0 supplementary groups
[2009/12/16 10:57:27, 3] smbd/sec_ctx.c:418(pop_sec_ctx)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/12/16 10:57:27, 10] auth/auth_winbind.c:85(check_winbind_security)
check_winbind_security: wbcAuthenticateUserEx failed: WBC_ERR_AUTH_ERROR
[2009/12/16 10:57:27, 5] auth/auth.c:274(check_ntlm_password)
check_ntlm_password: winbind authentication for user [<username>] FAILED with error NT_STATUS_ACCESS_DENIED
[2009/12/16 10:57:27, 2] auth/auth.c:320(check_ntlm_password)
check_ntlm_password: Authentication for user [<username>] -> [<username>] FAILED with error NT_STATUS_ACCESS_DENIED
[2009/12/16 10:57:27, 5] auth/auth_util.c:2114(free_user_info)
attempting to free (and zero) a user_info structure
[2009/12/16 10:57:27, 10] auth/auth_util.c:2118(free_user_info)
structure was created for <username>
[2009/12/16 10:57:27, 3] smbd/error.c:60(error_packet_set)
error packet at smbd/sesssetup.c(1725) cmd=115 (SMBsesssetupX) NT_STATUS_ACCESS_DENIED
[2009/12/16 10:57:27, 5] lib/util.c:632(show_msg)
[2009/12/16 10:57:27, 5] lib/util.c:642(show_msg)
[...]


Is there a possibility to get the reason for "NT_STATUS_ACCESS_DENIED"?
What does " check_winbind_security: wbcAuthenticateUserEx failed: WBC_ERR_AUTH_ERROR" meens?


Used samba version: 3.4.1 (by SerNet)


Thanks
Alex
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
 | 
Pages: 1
Prev: Dynamic updates to "interfaces" parameter doesn't work
Next: [Samba] samba cifs