Samba 3.6 on AIX 7.1 - Windows 10 Access to AIX file shares using Active Directory authentication Post: 303039911

Sponsored Content

Operating Systems AIX Samba 3.6 on AIX 7.1 - Windows 10 Access to AIX file shares using Active Directory authentication Post 303039911 by linuxsnake on Thursday 17th of October 2019 10:24:24 AM

10-17-2019

Registered User

UPDATE:

I've resolved the above issue after multiple changes to the samba config. In the end the issue was down to one entry in the smb.conf

kerberos method = system keytab

Solution - delete and it uses secret.

Now I've moved slightly further. I see the network share now. When I attempt to open the file share from windows checking samba.log I see these errors

Code:

[2019/10/17 09:08:43.441931,  3] ../../source3/auth/user_krb5.c:164(get_user_from_kerberos_info)
  get_user_from_kerberos_info: Username ROBOT\Joe.Bloggs is invalid on this system
[2019/10/17 09:08:43.441978,  3] ../../source3/auth/auth_generic.c:147(auth3_generate_session_info_pac)
  auth3_generate_session_info_pac: Failed to map kerberos principal to system user (NT_STATUS_LOGON_FAILURE)
[2019/10/17 09:08:43.442081,  3] ../../source3/smbd/smb2_server.c:3213(smbd_smb2_request_error_ex)
  smbd_smb2_request_error_ex: smbd_smb2_request_error_ex: idx[1] status[NT_STATUS_ACCESS_DENIED] || at ../../source3/smbd/smb2_sesssetup.c:146
[2019/10/17 09:08:43.443099,  3] ../../source3/smbd/server_exit.c:236(exit_server_common)
  Server exit (NT_STATUS_CONNECTION_RESET)

It's as if its expecting the windows username to exist on my AIX server. Do I need to manually add the user to my AIX box or is there a way to have AIX automatically log this user on regardless if they have an account on the AIX system. For example can I force them to logon as the oracle user?

linuxsnake

View Public Profile for linuxsnake

Find all posts by linuxsnake

9 More Discussions You Might Find Interesting

1. Linux

How to Unite Redhat 9 Linux with Windows 2003 Active Directory authentication

Dear All, How to configure a Redhat 9 client to windows 2003 server. I have windows 2003 server which act has domain controller in my office. I have been asked to use redhat 9 has client. how to configure so that redhat 9 can authenticate with windows 2003 server .I have username created in...

2. AIX

How to share a directory in AIX to access from Solaris and windows?

Hi All, I am basically new to this forum as well as AIX. To share some huge files between 2 servers I thought of creating a shared Directory in my AIX machine to access it in Solaris. I am very new to this AIX. Help me out how can u share a directory in AIX to access (mount) it on Solaris. Hope...

3. SCO

Authentication problems with Active Directory/Samba/Winbind/Pam

Hi all. I'm having real trouble authenticating users against active directory for my SCO UnixWare 7.1.4 box running samba 3.0.24 (installed via Maintenance pack 4). I can list AD users/groups (after overcoming several hiccups) with wbinfo -g / wbinfo -u. I can use id to get a view an ad user ie:...

4. UNIX for Advanced & Expert Users

Compiling Samba from Source on AIX, Active Directory, LDAP, Kerberos

Hello, I asked this question in the AIX subforum but never received an answer, probably because the AIX forum is not that heavily trafficked. Anyway, here it is.. I have never had any issues like this when compiling applications from source. When I try to compile samba-3.5.0pre2, configure runs...

5. UNIX for Dummies Questions & Answers

control permissions for Active Directory users on AIX

Hello, I've configured an user authentication against Active Directory (Windows Server 2008 R2) on AIX V6 with LDAP. It works fine. And here's my problem: How can I control ldap user permissions on the local AIX machine? E.g. an AD user should be able to write all files of local sys...

6. AIX

Authenticate AIX users from MS Active Directory

First, let me start off saying this is not spam. This is me trying to help out other AIX Admins with MS AD servers. If it is not applicable to you, someone else will find it useful. As long as the "KDC" service is running on your AD server, these steps should work. There should be no...

7. Solaris

solaris samba configuration without wins service from authentication window server/Active directory

Hi All, We are using solaris samba server for our company project to provide access to code to our development team.Recently our ICT has disabled wins service on Active directory due which user are not able to connect to samba share and they are getting error "No logon server available" as samba...

8. AIX

Samba 3.6.22 on AIX 7.1 with Windows AD (Kerberos and winbind)

Hi all, I have installed samba 3.6.22 on AIX 7.1 and join a windows AD with success. All seem to work fine, I have configured smb.conf, methods.cfg, kerberos, user .... the following command work fine wbinfo -u, wbinfo -g, wbinfo -i, wbinfo -s, wbinfo -S, lsuser, id... The unique...

9. AIX

AIX 7.1 - Samba 4 File Shares and Integration with Active Directory Issues

Hi. Ive recently upgraded Samba on an AIX server to Samba 4. The aim is to allow a specific group of Windows AD users to access some AIX file shares (with no requirement to enter passwords) - using AD to authenticate. Currently I have: Samba 4 installed ( and 3 daemons running) Installed...

LEARN ABOUT OSX

smbd

smbd(8) 						    BSD System Manager's Manual 						   smbd(8)

NAME

     smbd -- SMB server daemon

SYNOPSIS

     smbd [options]

DESCRIPTION

     smbd runs on a server machine to service SMB protocol requests from SMB client machines.

OPTIONS

     -debug   The service will log extensive debug information and may perform extra diagnostic checks. In debug mode, smbd will not exit when
	      idle.

     -help    Prints a usage message and exits.

     -ports list
	      The service will listen on each of the TCP ports specified in the comma-separated list. This option is typically only used for
	      debugging, since smbd is normally launched by launchd(8) on port 445.

     -stdout  Causes smbd to print log messages to standard output instead of the system log.

     -no-symlinks
	      In normal operation, smbd will respond to client symlink requests but will never follow symlinks itself. This flag causes smbd to
	      restrict client access to symlink operations and to always follow symlinks. In this case, clients will not be aware that symlinks
	      are in use because they will always be directed to the symlink target.

FILES

     /Library/Preferences/SystemConfiguration/com.apple.smb.server.plist
	      The primary configuration for the SMB stack. This file is updated by various system services and should not be edited by hand.

     /System/Library/LaunchDaemons/com.apple.smbd.plist
	      The smbd service's property list file for launchd(8).

SIGNALS

     SIGHUP   This signal causes smbd to re-read its configuration settings.

SEE ALSO

     launchd(8)

STANDARDS

     The SMB protocol is documented as part of the Microsoft Work Group Server Protocol Program (WSPP) technical documentation set, specifically

     MS-CIFS  Common Internet File System Specification

     MS-SMB   Server Message Block (SMB) Protocol Specification

HISTORY

     The smbd utility first appeared in Mac OS 10.7.

Darwin								   May 31, 2019 							    Darwin