I have installed the quest-samba-3.0.25a_q213 rpm's under fedora core 7, followed the installation instructions running and ran the /opt/quest/bin/vas-samba-config , all worked fine.
# /opt/quest/bin/vas-samba-config
Checking for VAS...
Stopping Samba services...
Checking /etc/opt/quest/samba/smb.conf...
/etc/opt/quest/samba/smb.conf: No changes required
Checking /etc/opt/quest/vas/vas.conf...
/etc/opt/quest/vas/vas.conf: No changes required
Samba can support NTLM (non-Kerberos) authentication for users,
but this requires that the local host password be renewed (set to
a new random string) during installation. Renewing the host
password is a normal operation that is performed periodically
by vasd.
Reset the local host key now for NTLM support? [yes]:
Detecting domain SID...
Renewing the computer account password...
Modified trust account password in secrets database
Join is OK
Starting Samba services...
Starting vasidmapd service: [ OK ]
Starting nmbd-quest service: [ OK ]
Starting smbd-quest service: [ OK ]
Starting winbindd-quest service: [ OK ]
Then tried a few things from the 'testing the samba server is properly confgured'
/opt/quest/bin/net rpc testjoin
Join to '###' is OK
/opt/quest/bin/net/ads testjoin
Join is OK
now, all going fine you might say, however ....
when I try and do the smbclient, all I get is smb_pam_accountcheck: PAM: Account Validation Failed - Rejecting User mikec!
I have tried the following
su - mikec
kinit mikec@MY.REALM
/opt/quest/bin/smbclient //leaf.mydomain/mikec -UMYDOMAIN/mikec
cli_session_setup_blob: recieve failed (NT_STATUS_LOGON_FAILURE)
session setup failed: NT_STATUS_LOGON_FAILURE
The error that keeps cropping up in /var/log/messages is
smbd[5910]: smb_pam_accountcheck: PAM: Account Validation Failed - Rejecting User mikec!
can anyone shed any light?
regards
Mike
# /opt/quest/bin/vas-samba-config
Checking for VAS...
Stopping Samba services...
Checking /etc/opt/quest/samba/smb.conf...
/etc/opt/quest/samba/smb.conf: No changes required
Checking /etc/opt/quest/vas/vas.conf...
/etc/opt/quest/vas/vas.conf: No changes required
Samba can support NTLM (non-Kerberos) authentication for users,
but this requires that the local host password be renewed (set to
a new random string) during installation. Renewing the host
password is a normal operation that is performed periodically
by vasd.
Reset the local host key now for NTLM support? [yes]:
Detecting domain SID...
Renewing the computer account password...
Modified trust account password in secrets database
Join is OK
Starting Samba services...
Starting vasidmapd service: [ OK ]
Starting nmbd-quest service: [ OK ]
Starting smbd-quest service: [ OK ]
Starting winbindd-quest service: [ OK ]
Then tried a few things from the 'testing the samba server is properly confgured'
/opt/quest/bin/net rpc testjoin
Join to '###' is OK
/opt/quest/bin/net/ads testjoin
Join is OK
now, all going fine you might say, however ....
when I try and do the smbclient, all I get is smb_pam_accountcheck: PAM: Account Validation Failed - Rejecting User mikec!
I have tried the following
su - mikec
kinit mikec@MY.REALM
/opt/quest/bin/smbclient //leaf.mydomain/mikec -UMYDOMAIN/mikec
cli_session_setup_blob: recieve failed (NT_STATUS_LOGON_FAILURE)
session setup failed: NT_STATUS_LOGON_FAILURE
The error that keeps cropping up in /var/log/messages is
smbd[5910]: smb_pam_accountcheck: PAM: Account Validation Failed - Rejecting User mikec!
can anyone shed any light?
regards
Mike