LINUX.ORG.RU
решено ФорумAdmin

Присоединение windows 7 к домену SAMBA+LDAP


0

1

Доброго времени суток. Не могу включить машину windows 7 в домен samba. Windows дает ошибку: Перед первым входом в систему пользователь должен сменить свой пароль. В логах самбы следующее:

[2012/01/27 15:31:02,  3] smbd/uid.c:push_conn_ctx(440)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/01/27 15:31:02,  3] smbd/sec_ctx.c:set_sec_ctx(324)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/01/27 15:31:02,  3] smbd/sec_ctx.c:pop_sec_ctx(432)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/01/27 15:31:02,  0] passdb/pdb_get_set.c:pdb_get_group_sid(210)
  pdb_get_group_sid: Failed to find Unix account for vinner
[2012/01/27 15:31:02,  3] smbd/sec_ctx.c:push_sec_ctx(224)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2012/01/27 15:31:02,  3] smbd/uid.c:push_conn_ctx(440)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/01/27 15:31:02,  3] smbd/sec_ctx.c:set_sec_ctx(324)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/01/27 15:31:02,  3] smbd/sec_ctx.c:pop_sec_ctx(432)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/01/27 15:31:02,  3] smbd/sec_ctx.c:push_sec_ctx(224)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2012/01/27 15:31:02,  3] smbd/uid.c:push_conn_ctx(440)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2012/01/27 15:31:02,  3] smbd/sec_ctx.c:set_sec_ctx(324)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2012/01/27 15:31:02,  3] smbd/sec_ctx.c:pop_sec_ctx(432)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2012/01/27 15:31:02,  3] smbd/sec_ctx.c:pop_sec_ctx(432)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/01/27 15:31:02,  1] auth/auth_sam.c:sam_account_ok(172)
  sam_account_ok: Account for user 'vinner' password must change!.
[2012/01/27 15:31:02,  3] auth/auth_winbind.c:check_winbind_security(54)
  check_winbind_security: Not using winbind, requested domain [tango.ua] was for this SAM.
[2012/01/27 15:31:02,  2] auth/auth.c:check_ntlm_password(318)
  check_ntlm_password:  Authentication for user [vinner] -> [vinner] FAILED with error NT_STATUS_PASSWORD_MUST_CHANGE
[2012/01/27 15:31:02,  3] smbd/error.c:error_packet_set(61)
  error packet at smbd/sesssetup.c(127) cmd=115 (SMBsesssetupX) NT_STATUS_PASSWORD_MUST_CHANGE
[2012/01/27 15:31:12,  0] lib/util_sock.c:read_socket_with_timeout(939)
[2012/01/27 15:31:12,  0] lib/util_sock.c:get_peer_addr_internal(1683)
  getpeername failed. Error was Transport endpoint is not connected
  read_socket_with_timeout: client 0.0.0.0 read error = Connection reset by peer.
[2012/01/27 15:31:12,  3] smbd/process.c:smbd_process(1964)
  receive_message_or_smb failed: NT_STATUS_ACCESS_DENIED, exiting
[2012/01/27 15:31:12,  3] smbd/sec_ctx.c:set_sec_ctx(324)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2012/01/27 15:31:12,  3] smbd/connection.c:yield_connection(31)
  Yielding connection to
[2012/01/27 15:31:12,  3] smbd/server.c:exit_server_common(993)
  Server exit (normal exit)

Пользователя создал через PHPLDAPAdmin и включил в группу DomainAdmins. Подскажите, пожалуйста куда копать?

Вы не можете добавлять комментарии в эту тему. Тема перемещена в архив.