Re: Woody-Sarge Upgrade w/ Samba Problems

[Brian Kimsey-Hickman <kimhick@gmail.com>]

On 8/2/05, Brian Kimsey-Hickman <kimhick@gmail.com> wrote:
> Just upgraded a Debian box to Sarge and my Samba shares don't seem to
> work quite the same.  This box should be using Domain Authentication
> and I successfully rejoined the domain with a net join command but the
> only people that can open share are ones that have user account on the
> device and on the domain.  Anybody have any ideas?
> 
> Here is the config:
> 
> # Global parameters
> [global]
> 
>    panic action = /usr/share/samba/panic-action %d
>         workgroup = OCC
>         netbios name = COMPT-CD
>         server string = CDROM Server
>         security = DOMAIN
>         encrypt passwords = true
>    passdb backend = smbpasswd guest
>         obey pam restrictions = Yes
>         passwd program = /usr/bin/passwd %u
>         passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
> *Retype\snew\sUNIX\spassword:* %n\n .
>         syslog = 0
>         log file = /var/log/samba/log.%m
>         max log size = 1000
>         name resolve order = wins lmhosts hosts bcast
>         os level = 0
>         preferred master = False
>         local master = No
>         domain master = False
>         dns proxy = No
>         wins server = 172.30.10.21
>         invalid users = root
>         guest ok = Yes
> 
> [BC_03_07_Jul]
>         comment = BCC 2003 July
>         path = /iso/shares/BCC_2003_07
>         guest only = Yes
> 
> [BC_03_08_Aug]
>         comment = BCC 2003 August
>         path = /iso/shares/BCC_2003_08
>         guest only = Yes
> 
> [BC_03_09_Sep]
>         comment = BCC 2003 September
>         path = /iso/shares/BCC_2003_09
>         guest only = Yes
> 
> [BC_03_10_Oct]
>         comment = BCC 2003 October
>         path = /iso/shares/BCC_2003_10
>         guest only = Yes
> 
Found some addition information.  I check the event view on my PDC
emulator Domain Controller and found this error message:

Event Type:	Audit Failure
Event Source:	Security
Event Category:	Account Logon
Event ID:	675
Date:		8/3/2005
Time:		7:39:20 AM
User:		SYSTEM
Computer:	COM1
Description:
Pre-authentication failed:
 	User Name:	cpisbk3
  	User ID:		Additional Information [GUID]:
{S-1-5-21-844678424-286055849-2661016245-1121}
  	Service Name:	krbtgt/OCC
  	Pre-Authentication Type:	0x2
 	Failure Code:	0x18
 	Client Address:	172.30.5.233
 
Data:

I turned Kerberos pre-authentication off.  But, that didn't help.

Anybody have any ideas?

Thanks,

Brian