Cannot use NT authentication

[jabba]

Hi All,

I am having a rather unusual problem. I have a PC running Samba as a PDC for
my network. Right now, all of my XP client PC's can login just fine and
there are no problems at all.

However, recently I purchased a Thecus N5200 and want to use the NT domain to grant users access to the shares.

When I join the NAS to the domain, it tells me the operation has been
successful. However, when any of the clients try to access the NAS shares,
they get the message "There are currently no logon servers available to
service the logon request".

When I look in the samba log file on the PDC, I notice that the following
error message is shown when the NAS attempts to join the domain:

[2007/10/10 21:14:16, 0] rpc_server/srv_netlog_nt.c:_net_auth_2(478)
_net_auth2: creds_server_check failed. Rejecting auth request from client
NAS machine account NAS$

Note: that the NAS reports that it successfully joined the domain, but the
above message seems to indicate a problem?

The samba version running on the PDC is 3.0.23c-4.

I would be very grateful for anyones suggestions or thoughts on other things
I might try to resolve this.

Thanks!

[Thecus - Yvon]

Dear Sir,

Due to we have no much experience with PDC, we would like to what the firmware version on the N5200 now, and following suggestion about the join AD for your reference:

1. Is there any other trust AD with this AD?
2. Does this AD have alias name?
3. Does Netlogon service is enabled?
4. Does Windows Time service is enabled?

Additionally, I would recommend diagnostic DC through Domain Controller Diagnostics Tool (dcdiag.exe)

http://technet2.microsoft.com/window....mspx?mfr=true

in case the problem still exist, please enable System Log through below URL

http://<N5200_IP>/adm/getform.html?name=syslog

After the System Log service is enabled, please try join to AD again, those login log will save into “tmp” folder under Nsync folder.

Please send the config.bin and all files & folders under Nsync folder. The config.bin can be downloaded from [System / Mgmt] page and then press [Download] button.


Yvon.

[jabba]

Hi, the following is the log output that I get:

Oct 15 22:04:09 nas syslogd 1.4.1: restart.
Oct 15 22:04:25 nas net: [2007/10/15 22:04:25, 0] utils/net_ads.c:ads_startup(191)
Oct 15 22:04:25 nas net: ads_connect: Inappropriate ioctl for device
Oct 15 22:04:26 nas nmbd[4340]: [2007/10/15 22:04:26, 0] nmbd/nmbd.c:terminate(58)
Oct 15 22:04:26 nas nmbd[4340]: Got SIGTERM: going down...
Oct 15 22:04:31 nas smbd[20626]: [2007/10/15 22:04:31, 0] smbd/server.c:main(844)
Oct 15 22:04:31 nas smbd[20626]: standard input is not a socket, assuming -D option
Oct 15 22:04:31 nas nmbd[20628]: [2007/10/15 22:04:31, 0] nmbd/nmbd.c:main(746)
Oct 15 22:04:31 nas nmbd[20628]: standard input is not a socket, assuming -D option
Oct 15 22:04:32 nas winbindd[20631]: [2007/10/15 22:04:32, 0] sam/idmap_rid.c:rid_idmap_get_domains(175)
Oct 15 22:04:32 nas winbindd[20631]: rid_idmap_get_domains: failed to retrieve domain sid
Oct 15 22:04:32 nas winbindd[20631]: [2007/10/15 22:04:32, 0] sam/idmap_rid.c:rid_idmap_init(374)
Oct 15 22:04:32 nas winbindd[20631]: rid_idmap_init: cannot fetch sids for domain and/or trusted-domains from domain-controller.
Oct 15 22:04:32 nas winbindd[20631]: [2007/10/15 22:04:32, 0] sam/idmap.c:idmap_init(146)
Oct 15 22:04:32 nas winbindd[20631]: idmap_init: failed to initialize remote backend!
Oct 15 22:04:32 nas winbindd[20638]: [2007/10/15 22:04:32, 0] nsswitch/winbindd_util.c:init_domain_list(517)
Oct 15 22:04:32 nas winbindd[20638]: Could not fetch our SID - did we join?
Oct 15 22:04:32 nas winbindd[20638]: [2007/10/15 22:04:32, 0] nsswitch/winbindd.c:main(1071)
Oct 15 22:04:32 nas winbindd[20638]: unable to initialize domain list
Oct 15 22:04:33 nas net: [2007/10/15 22:04:33, 0] utils/net_ads.c:ads_startup(191)
Oct 15 22:04:33 nas net: ads_connect: Transport endpoint is not connected
Oct 15 22:05:45 nas smbd[21509]: [2007/10/15 22:05:45, 0] auth/auth_winbind.c:check_winbind_security(125)
Oct 15 22:05:45 nas smbd[21509]: check_winbind_security: ERROR! my_private_data == NULL!
Oct 15 22:06:02 nas net: [2007/10/15 22:06:02, 0] utils/net_ads.c:ads_startup(191)
Oct 15 22:06:02 nas net: ads_connect: Transport endpoint is not connected
Oct 15 22:06:03 nas nmbd[20629]: [2007/10/15 22:06:03, 0] nmbd/nmbd.c:terminate(58)
Oct 15 22:06:03 nas nmbd[20629]: Got SIGTERM: going down...
Oct 15 22:06:07 nas smbd[21713]: [2007/10/15 22:06:07, 0] smbd/server.c:main(844)
Oct 15 22:06:07 nas smbd[21713]: standard input is not a socket, assuming -D option
Oct 15 22:06:07 nas nmbd[21715]: [2007/10/15 22:06:07, 0] nmbd/nmbd.c:main(746)
Oct 15 22:06:07 nas nmbd[21715]: standard input is not a socket, assuming -D option
Oct 15 22:07:01 nas nmbd[21721]: [2007/10/15 22:07:01, 0] nmbd/nmbd.c:terminate(58)
Oct 15 22:07:01 nas nmbd[21721]: Got SIGTERM: going down...
Oct 15 22:07:06 nas smbd[22711]: [2007/10/15 22:07:06, 0] smbd/server.c:main(844)
Oct 15 22:07:06 nas smbd[22711]: standard input is not a socket, assuming -D option
Oct 15 22:07:06 nas nmbd[22714]: [2007/10/15 22:07:06, 0] nmbd/nmbd.c:main(746)
Oct 15 22:07:06 nas nmbd[22714]: standard input is not a socket, assuming -D option
Oct 15 22:07:06 nas System:

[jabba]

Hi,

Also, I am running the latest firmware 2.00.01.

How can I send you my config.bin file?...

Thanks,
Jabba

[Thecus - Yvon]

Dear Sir,

Current N5200 support the AD server mainly, in this case please provie us the CONF.BIN & System Log for us analysis, and would take to time to doing this.

Enable System Log through below URL
http://<N5200_IP>/adm/getform.html?name=syslog
After the System Log service is enabled, please try join to AD again, those login log will save into “tmp” folder under Nsync folder.


Yvon.

[bigwombat]

I am having the exact same problem using Thecus 5200Pro and Firmware 2.0.4 when trying to authenticate against a SUSE 10 Samba Server.

Did you ever get this problem resolved?

Hi All,

When I look in the samba log file on the PDC, I notice that the following
error message is shown when the NAS attempts to join the domain:

[2007/10/10 21:14:16, 0] rpc_server/srv_netlog_nt.c:_net_auth_2(478)
_net_auth2: creds_server_check failed. Rejecting auth request from client
NAS machine account NAS$

Note: that the NAS reports that it successfully joined the domain, but the
above message seems to indicate a problem?

[jabba]

Hi,

I am afraid not. I tried working through it with the thecus support, but any time I sent them the files that they requested, I never got a reply.

Very dissapointed having spent so much money on the product.

Let me know if you ever manage to get it solved either.

Cheers,
Jabba

[Thecus - Yvon]

Dear Sir,

Would you please specify which support acount you sent? or ticket ID for us tracking?

Yvon,

[ericlh]

the support staff is honest. they don't know a lot about PDC ...

@jabba, wombat, have you made any progress ?