UNIX for Dummies Questions & Answers

Hi all,

You may have seen my recent topic, where I asked for help getting some samba shares to work on our network.

Now that these are working, I move on to the next hurdle!

We have a few externally hosted (Windows Server 2008 R2) web servers which are not on our domain, but can still communicate with our network.

I can successfully browse to the samba shares on the existing (soon to be retired) solaris server from these webservers.

These web servers can successfully ping the new solaris server, but I cannot browse to the shares whether I use the server name or the IP address.

I have added the new solaris server/ip address to the Hosts file on the webservers, but this has not made a difference.

This morning I have changed the logging detail in smb.conf and have some further information, it looks to be an authentication problem.....

Example log when connecting as me from my PC (on the domain):

Code:

[2014/09/30 09:37:50.140615,  2] auth/auth.c:309(check_ntlm_password)
  check_ntlm_password:  authentication for user [myusername] -> [myusername] -> [myusername] succeede

Example log when connecting from the webserver (MYWEBSERVER) while logged on as user WEBUSER

Code:

check_ntlm_password:  Authentication for user [WEBUSER] -> [WEBUSER] FAILED with error NT_STATUS_NO_SUCH_USER
[2014/09/30 10:12:21.161315,  0] auth/auth_domain.c:331(domain_client_validate)
  domain_client_validate: unable to validate password for user WEBUSER in domain MYWEBSERVER to Domain controller MY.INTERNAL.DOMAIN.COM. Error was NT_STATUS_NO_SUCH_USER.
[2014/09/30 10:12:21.161877,  2] auth/auth.c:319(check_ntlm_password)
  check_ntlm_password:  Authentication for user [WEBUSER] -> [WEBUSER] FAILED with error NT_STATUS_NO_SUCH_USER

As I understand it, on the existing Solaris server the webservers bypass the authentication and connect to the shares as the guest user “web”. However, this doesn't seem to be working on the new server.

I did read about adding the line “map untrusted to domain = yes” to the smb.conf, but this doesn't seem to have made any difference.

Can anyone help please?