Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: jasonv on May 09, 2006, 06:31:10 PM

Title: SME auths fine as PDC, but not to linux boxes
Post by: jasonv on May 09, 2006, 06:31:10 PM

Hi.

Got my SME server box up and running, it's working well. I can use XP clients to log in to the domain.

However, I can't get my FC4 machines to auth either directly to LDAP, or through winbind or samba. A typical /var/log/messages response looks like:

Quote

May  9 09:27:08 fedora4 sshd(pam_unix)[2617]: session opened for user root by root(uid=0)
May  9 09:27:18 fedora4 sshd(pam_unix)[2645]: check pass; user unknown
May  9 09:27:18 fedora4 sshd(pam_unix)[2645]: authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=fedora4

Any suggestions are appreciated.

Title: data point
Post by: jasonv on May 16, 2006, 01:56:20 AM

I've got winbind configured and responding to wbinfo and getent queries as expected.. EXCEPT 'getent shadow' returns only local file results. Nothing from the samba server. getent'ing passwd and group return the full results.

I suspect that's why it can't auth a user. for instance:

Quote

[root@fedora4 ~]# wbinfo -a USER%PASS
plaintext password authentication failed
error code was NT_STATUS_NO_SUCH_USER (0xc0000064)
error messsage was: No such user
Could not authenticate user USER%PASS with plaintext password
challenge/response password authentication succeeded

but i know the user is there, because you can see USER in the "getent passwd" results, and here:

Quote

wbinfo -n USER
S-1-5-21-834948185-2811089009-823559709-11016 User (1)

Suggestions would be greatly appreciated.

Title: Re: SME auths fine as PDC, but not to linux boxes
Post by: CharlieBrady on May 16, 2006, 03:09:58 AM

Quote from: "jasonv"

Got my SME server box up and running, it's working well. I can use XP clients to log in to the domain.

However, I can't get my FC4 machines to auth either directly to LDAP,

LDAP in SME has no authentication information.

Your question looks to me to be purely an FC4 question.