<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Courier New, monospace" size="2">
<div>Hi,</div>
<div> </div>
<div>I need some help to get Samba and Active Domain to play nicely.</div>
<div>The new server is an Ubuntu 10.04 LTS with Kubuntu to provide GUI, running Samba 3.4.7</div>
<div>We have several other Linux servers that work perfectly well however this is the first 10.04LTS the others are 8.04LTS.</div>
<div>Authentication is done through Kerberos/AD and works great!</div>
<div>There is no “shared folder”. The users use Samba to access their home directory from their WinXp or Win7 machines.</div>
<div>We use NX for remote login and it is working well. </div>
<div><font face="Calibri, sans-serif" size="2"> </font></div>
<div>The only errors that I can find is this message on the Samba log and the smbstatus (see below)</div>
<div><font face="Calibri, sans-serif" size="2"> </font></div>
<div>The Samba log shows:</div>
<div> </div>
<div> From /var/log/samba/</div>
<div> [2012/01/10 10:11:21, 1] smbd/sesssetup.c:342(reply_spnego_kerberos)</div>
<div> Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE!</div>
<div> [2012/01/10 10:11:21, 1] libads/kerberos_verify.c:336(ads_secrets_verify_ticket)</div>
<div> ads_secrets_verify_ticket: failed to fetch machine password</div>
<div> [2012/01/10 10:11:21, 1] smbd/sesssetup.c:342(reply_spnego_kerberos)</div>
<div> Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE!</div>
<div><font face="Calibri, sans-serif" size="2"> </font></div>
<div><font face="Calibri, sans-serif" size="2"> </font></div>
<div>Thanks!</div>
<div>Alfredo</div>
<div><font face="Calibri, sans-serif" size="2"> </font></div>
<div><font face="Calibri, sans-serif" size="2"> </font></div>
<div>%%%%% Background info %%%%%</div>
<div><font face="Calibri, sans-serif" size="2"> </font></div>
<div>The smb.conf</div>
<div> </div>
<div>From testparm</div>
<div><font face="Calibri, sans-serif" size="2"> </font></div>
<div>Load smb config files from /etc/samba/smb.conf</div>
<div>rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)</div>
<div>Processing section "[homes]"</div>
<div>Processing section "[printers]"</div>
<div>Processing section "[print$]"</div>
<div>Loaded services file OK.</div>
<div>Server role: ROLE_DOMAIN_MEMBER</div>
<div>Press enter to see a dump of your service definitions</div>
<div> </div>
<div>[global]</div>
<div> workgroup = USFN</div>
<div> realm = USFN.NZCORP.NET</div>
<div> server string = Samba Server - Rio</div>
<div> security = ADS</div>
<div> map to guest = Bad User</div>
<div> obey pam restrictions = Yes</div>
<div> password server = ##.###.##.###</div>
<div> pam password change = Yes</div>
<div> syslog = 0</div>
<div> log file = /var/log/samba/log.%m</div>
<div> max log size = 1000</div>
<div> name resolve order = lmhosts host wins bcast</div>
<div> socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192</div>
<div> dns proxy = No</div>
<div> usershare allow guests = Yes</div>
<div> panic action = /usr/share/samba/panic-action %d</div>
<div> idmap uid = 16777216-33554431</div>
<div> idmap gid = 16777216-33554431</div>
<div> invalid users = root</div>
<div> </div>
<div>[homes]</div>
<div> comment = Home Directories</div>
<div> path = %H</div>
<div> read only = No</div>
<div> </div>
<div><font face="Calibri, sans-serif" size="2"> </font></div>
<div>smbclient -L rio.usfn.nzcorp.net -U%</div>
<div>Domain=[USFN] OS=[Unix] Server=[Samba 3.4.7]</div>
<div> </div>
<div> Sharename Type Comment</div>
<div> --------- ---- -------</div>
<div> homes Disk Home Directories</div>
<div> print$ Disk Printer Drivers</div>
<div> IPC$ IPC IPC Service (Samba Server - Rio)</div>
<div>Domain=[USFN] OS=[Unix] Server=[Samba 3.4.7]</div>
<div> </div>
<div> Server Comment</div>
<div> --------- -------</div>
<div> RIO Samba Server - Rio</div>
<div> </div>
<div> Workgroup Master</div>
<div> --------- -------</div>
<div> USFN DCUSFN200</div>
<div> </div>
<div>SMBD status</div>
<div> </div>
<div style="text-indent: 36pt; ">service smbd status</div>
<div style="text-indent: 36pt; ">smbd start/running, process 2911</div>
<div><font face="Calibri, sans-serif" size="2"> </font></div>
<div>However smbstatus gives no output !?</div>
<div> </div>
<div style="text-indent: 36pt; ">Samba version 3.4.7</div>
<div style="text-indent: 36pt; ">PID Username Group Machine </div>
<div style="text-indent: 36pt; ">-------------------------------------------------------</div>
<div><font face="Calibri, sans-serif" size="2"> </font></div>
<div style="text-indent: 36pt; ">Service pid machine Connected at</div>
<div style="text-indent: 36pt; ">-------------------------------------------------------</div>
<div><font face="Calibri, sans-serif" size="2"> </font></div>
<div><font face="Calibri, sans-serif" size="2"> </font></div>
<div><font face="Calibri, sans-serif" size="2"> </font></div>
<div><font face="Calibri, sans-serif" size="2"> </font></div>
<div><font face="Calibri, sans-serif" size="2"> </font></div>
<div><font face="Calibri, sans-serif" size="2"> </font></div>
<div><font face="Calibri, sans-serif" size="2"> </font></div>
<div><font face="Calibri, sans-serif" size="2"> </font></div>
<div><font face="Calibri, sans-serif" size="2"> </font></div>
<div><font face="Calibri, sans-serif" size="2"> </font></div>
</font>
</body>
</html>