Administrace komentářů

zadaný příkaz vypíše:

       auth methods =
        encrypt passwords = Yes
        update encrypted = No
        lanman auth = No
        ntlm auth = Yes
        client NTLMv2 auth = No
        client lanman auth = Yes
        client plaintext auth = Yes

Zkoušel jsem i změnit lanman auth na Yes, ale stále se nové pc přidává s lanmanheslem místo křížků. Zkoušel jsem přidat do domény i jiné pc a chová se to úplně stejně. Do domény přidat lze, ale pak ho nejde přihlásit. Systém windows vás nemůže přihlásit, protože řadič domény není spuštěn nebo je z jiného důvodu nedostupný, nebo protože nebyl nalezen účet tohoto počítače.

Zkoušel jsem změnit úroveň logování a po pokusu o přihlášení se v logu objeví toto: (sorry, je to trochu delší)

[2009/03/30 09:29:29, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/03/30 09:29:29, 3] smbd/uid.c:push_conn_ctx(365)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/03/30 09:29:29, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/03/30 09:29:29, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/30 09:29:29, 3] auth/auth.c:check_ntlm_password(219)
  check_ntlm_password:  Checking password for unmapped user []\[]@[NBHANKA] with the new password interface
[2009/03/30 09:29:29, 3] auth/auth.c:check_ntlm_password(222)
  check_ntlm_password:  mapped user is: [GYZAMB]\[]@[NBHANKA]
[2009/03/30 09:29:29, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/03/30 09:29:29, 3] smbd/uid.c:push_conn_ctx(365)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/03/30 09:29:29, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/03/30 09:29:29, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/30 09:29:29, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/03/30 09:29:29, 3] smbd/uid.c:push_conn_ctx(365)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/03/30 09:29:29, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/03/30 09:29:29, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/30 09:29:29, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2009/03/30 09:29:29, 3] smbd/uid.c:push_conn_ctx(365)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2009/03/30 09:29:29, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/03/30 09:29:29, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/30 09:29:29, 3] auth/auth.c:check_ntlm_password(268)
  check_ntlm_password: guest authentication for user [] succeeded
[2009/03/30 09:29:29, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(319)
  NTLMSSP Sign/Seal - Initialising with flags:
[2009/03/30 09:29:29, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
  Got NTLMSSP neg_flags=0x60088215
    NTLMSSP_NEGOTIATE_UNICODE
    NTLMSSP_REQUEST_TARGET
    NTLMSSP_NEGOTIATE_SIGN
    NTLMSSP_NEGOTIATE_NTLM
    NTLMSSP_NEGOTIATE_ALWAYS_SIGN
    NTLMSSP_NEGOTIATE_NTLM2
    NTLMSSP_NEGOTIATE_128
    NTLMSSP_NEGOTIATE_KEY_EXCH
[2009/03/30 09:29:29, 3] smbd/password.c:register_vuid(222)
  User name: nobody    Real name: nobody
[2009/03/30 09:29:29, 3] smbd/password.c:register_vuid(241)
  UNIX uid 65534 is UNIX user nobody, and will be vuid 100
[2009/03/30 09:29:29, 3] smbd/process.c:process_smb(1091)
  Transaction 3 of length 78
[2009/03/30 09:29:29, 3] smbd/process.c:switch_message(886)
  switch message SMBtconX (pid 22064) conn 0x0
[2009/03/30 09:29:29, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/30 09:29:29, 4] smbd/reply.c:reply_tcon_and_X(408)
  Client requested device type [?????] for share [IPC$]
[2009/03/30 09:29:29, 3] smbd/service.c:make_connection_snum(472)
  Connect path is '/tmp' for service [IPC$]
[2009/03/30 09:29:29, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217)
  get_share_security: using default secdesc for IPC$
[2009/03/30 09:29:29, 3] lib/util_seaccess.c:se_access_check(251)
[2009/03/30 09:29:29, 3] lib/util_seaccess.c:se_access_check(252)
  se_access_check: user sid is S-1-5-21-48993241-991782442-3224724291-501
  se_access_check: also S-1-5-21-48993241-991782442-3224724291-514
  se_access_check: also S-1-1-0
  se_access_check: also S-1-5-2
  se_access_check: also S-1-5-32-546
  se_access_check: also S-1-5-21-48993241-991782442-3224724291-132069
[2009/03/30 09:29:29, 3] smbd/vfs.c:vfs_init_default(203)
  Initialising default vfs hooks
[2009/03/30 09:29:29, 4] rpc_server/srv_srvsvc_nt.c:get_share_security(217)
  get_share_security: using default secdesc for IPC$
[2009/03/30 09:29:29, 3] lib/util_seaccess.c:se_access_check(251)
[2009/03/30 09:29:29, 3] lib/util_seaccess.c:se_access_check(252)
  se_access_check: user sid is S-1-5-21-48993241-991782442-3224724291-501
  se_access_check: also S-1-5-21-48993241-991782442-3224724291-514
  se_access_check: also S-1-1-0
  se_access_check: also S-1-5-2
  se_access_check: also S-1-5-32-546
  se_access_check: also S-1-5-21-48993241-991782442-3224724291-132069
[2009/03/30 09:29:29, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/03/30 09:29:29, 3] smbd/service.c:make_connection_snum(648)
  nbhanka (192.168.2.65) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 22064)
[2009/03/30 09:29:29, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/30 09:29:29, 3] smbd/reply.c:reply_tcon_and_X(456)
  tconX service=IPC$
[2009/03/30 09:29:29, 3] smbd/process.c:process_smb(1091)
  Transaction 4 of length 108
[2009/03/30 09:29:29, 3] smbd/process.c:switch_message(886)
  switch message SMBntcreateX (pid 22064) conn 0x8392df0
[2009/03/30 09:29:29, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/03/30 09:29:29, 4] smbd/vfs.c:vfs_ChDir(654)
  vfs_ChDir to /tmp
[2009/03/30 09:29:29, 4] smbd/nttrans.c:nt_open_pipe(497)
  nt_open_pipe: Opening pipe \NETLOGON.
[2009/03/30 09:29:29, 3] smbd/nttrans.c:nt_open_pipe(514)
  nt_open_pipe: Known pipe NETLOGON opening.
[2009/03/30 09:29:29, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(178)
  Open pipe requested NETLOGON (pipes_open=0)
[2009/03/30 09:29:29, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(278)
  Create pipe requested NETLOGON
[2009/03/30 09:29:29, 4] rpc_server/srv_pipe_hnd.c:make_internal_rpc_pipe_p(370)
  Created internal pipe NETLOGON (pipes_open=0)
[2009/03/30 09:29:29, 4] rpc_server/srv_pipe_hnd.c:open_rpc_pipe_p(257)
  Opened pipe NETLOGON with handle 72e9 (pipes_open=1)
[2009/03/30 09:29:29, 3] smbd/process.c:process_smb(1091)
  Transaction 5 of length 140
[2009/03/30 09:29:29, 3] smbd/process.c:switch_message(886)
  switch message SMBwriteX (pid 22064) conn 0x8392df0
[2009/03/30 09:29:29, 4] smbd/uid.c:change_to_user(194)
  change_to_user: Skipping user change - already user
[2009/03/30 09:29:29, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
  search for pipe pnum=72e9
[2009/03/30 09:29:29, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(887)
  api_pipe_bind_req: \PIPE\NETLOGON -> \PIPE\lsass
[2009/03/30 09:29:29, 3] rpc_server/srv_pipe.c:check_bind_req(762)
  check_bind_req for \PIPE\NETLOGON
[2009/03/30 09:29:29, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
  writeX-IPC pnum=72e9 nwritten=72
[2009/03/30 09:29:29, 3] smbd/process.c:process_smb(1091)
  Transaction 6 of length 63
[2009/03/30 09:29:29, 3] smbd/process.c:switch_message(886)
  switch message SMBreadX (pid 22064) conn 0x8392df0
[2009/03/30 09:29:29, 4] smbd/uid.c:change_to_user(194)
  change_to_user: Skipping user change - already user
[2009/03/30 09:29:29, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
  search for pipe pnum=72e9
[2009/03/30 09:29:29, 3] smbd/pipes.c:reply_pipe_read_and_X(242)
  readX-IPC pnum=72e9 min=1024 max=1024 nread=68
[2009/03/30 09:29:30, 3] smbd/process.c:process_smb(1091)
  Transaction 7 of length 160
[2009/03/30 09:29:30, 3] smbd/process.c:switch_message(886)
  switch message SMBwriteX (pid 22064) conn 0x8392df0
[2009/03/30 09:29:30, 4] smbd/uid.c:change_to_user(194)
  change_to_user: Skipping user change - already user
[2009/03/30 09:29:30, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
  search for pipe pnum=72e9
[2009/03/30 09:29:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
  free_pipe_context: destroying talloc pool of size 0
[2009/03/30 09:29:30, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531)
  api_rpcTNP: NETLOGON op 0x4 - api_rpcTNP: rpc command: NET_REQCHAL
[2009/03/30 09:29:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
  free_pipe_context: destroying talloc pool of size 30
[2009/03/30 09:29:30, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
  writeX-IPC pnum=72e9 nwritten=92
[2009/03/30 09:29:30, 3] smbd/process.c:process_smb(1091)
  Transaction 8 of length 63
[2009/03/30 09:29:30, 3] smbd/process.c:switch_message(886)
  switch message SMBreadX (pid 22064) conn 0x8392df0
[2009/03/30 09:29:30, 4] smbd/uid.c:change_to_user(194)
  change_to_user: Skipping user change - already user
[2009/03/30 09:29:30, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
  search for pipe pnum=72e9
[2009/03/30 09:29:30, 3] smbd/pipes.c:reply_pipe_read_and_X(242)
  readX-IPC pnum=72e9 min=1024 max=1024 nread=36
[2009/03/30 09:29:30, 3] smbd/process.c:process_smb(1091)
  Transaction 9 of length 196
[2009/03/30 09:29:30, 3] smbd/process.c:switch_message(886)
  switch message SMBwriteX (pid 22064) conn 0x8392df0
[2009/03/30 09:29:30, 4] smbd/uid.c:change_to_user(194)
  change_to_user: Skipping user change - already user
[2009/03/30 09:29:30, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
  search for pipe pnum=72e9
[2009/03/30 09:29:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
  free_pipe_context: destroying talloc pool of size 0
[2009/03/30 09:29:30, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531)
  api_rpcTNP: NETLOGON op 0x1a - unknown
[2009/03/30 09:29:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
  free_pipe_context: destroying talloc pool of size 0
[2009/03/30 09:29:30, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
  writeX-IPC pnum=72e9 nwritten=128
[2009/03/30 09:29:30, 3] smbd/process.c:process_smb(1091)
  Transaction 10 of length 63
[2009/03/30 09:29:30, 3] smbd/process.c:switch_message(886)
  switch message SMBreadX (pid 22064) conn 0x8392df0
[2009/03/30 09:29:30, 4] smbd/uid.c:change_to_user(194)
  change_to_user: Skipping user change - already user
[2009/03/30 09:29:30, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
  search for pipe pnum=72e9
[2009/03/30 09:29:30, 3] smbd/pipes.c:reply_pipe_read_and_X(242)
  readX-IPC pnum=72e9 min=1024 max=1024 nread=32
[2009/03/30 09:29:30, 3] smbd/process.c:process_smb(1091)
  Transaction 11 of length 196
[2009/03/30 09:29:30, 3] smbd/process.c:switch_message(886)
  switch message SMBwriteX (pid 22064) conn 0x8392df0
[2009/03/30 09:29:30, 4] smbd/uid.c:change_to_user(194)
  change_to_user: Skipping user change - already user
[2009/03/30 09:29:30, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
  search for pipe pnum=72e9
[2009/03/30 09:29:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
  free_pipe_context: destroying talloc pool of size 0
[2009/03/30 09:29:30, 4] rpc_server/srv_pipe.c:api_rpcTNP(1531)
  api_rpcTNP: NETLOGON op 0xf - api_rpcTNP: rpc command: NET_AUTH2
[2009/03/30 09:29:30, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
[2009/03/30 09:29:30, 3] smbd/uid.c:push_conn_ctx(365)
  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2009/03/30 09:29:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/03/30 09:29:30, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2009/03/30 09:29:30, 3] smbd/uid.c:push_conn_ctx(365)
  push_conn_ctx(100) : conn_ctx_stack_ndx = 1
[2009/03/30 09:29:30, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2009/03/30 09:29:30, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2009/03/30 09:29:30, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2009/03/30 09:29:30, 4] libsmb/credentials.c:cred_session_key(59)
  cred_session_key
[2009/03/30 09:29:30, 4] libsmb/credentials.c:cred_create(90)
  cred_create
[2009/03/30 09:29:30, 4] libsmb/credentials.c:cred_assert(121)
  cred_assert
[2009/03/30 09:29:30, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
  free_pipe_context: destroying talloc pool of size 48
[2009/03/30 09:29:30, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
  writeX-IPC pnum=72e9 nwritten=128
[2009/03/30 09:29:30, 3] smbd/process.c:process_smb(1091)
  Transaction 12 of length 63
[2009/03/30 09:29:30, 3] smbd/process.c:switch_message(886)
  switch message SMBreadX (pid 22064) conn 0x8392df0
[2009/03/30 09:29:30, 4] smbd/uid.c:change_to_user(194)
  change_to_user: Skipping user change - already user
[2009/03/30 09:29:30, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
  search for pipe pnum=72e9
[2009/03/30 09:29:30, 3] smbd/pipes.c:reply_pipe_read_and_X(242)
  readX-IPC pnum=72e9 min=1024 max=1024 nread=40
[2009/03/30 09:29:30, 3] smbd/process.c:process_smb(1091)
  Transaction 13 of length 45
[2009/03/30 09:29:30, 3] smbd/process.c:switch_message(886)
  switch message SMBclose (pid 22064) conn 0x8392df0
[2009/03/30 09:29:30, 4] smbd/uid.c:change_to_user(194)
  change_to_user: Skipping user change - already user
[2009/03/30 09:29:30, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1168)
  search for pipe pnum=72e9
[2009/03/30 09:29:30, 4] rpc_server/srv_pipe_hnd.c:close_rpc_pipe_hnd(1081)
  closed pipe name NETLOGON pnum=72e9 (pipes_open=0)
[2009/03/30 09:29:41, 3] smbd/process.c:process_smb(1091)
  Transaction 14 of length 43
[2009/03/30 09:29:41, 3] smbd/process.c:switch_message(886)
  switch message SMBulogoffX (pid 22064) conn 0x0
[2009/03/30 09:29:41, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/30 09:29:41, 3] smbd/reply.c:reply_ulogoffX(1249)
  ulogoffX vuid=100
[2009/03/30 09:29:41, 3] smbd/process.c:process_smb(1091)
  Transaction 15 of length 39
[2009/03/30 09:29:41, 3] smbd/process.c:switch_message(886)
  switch message SMBtdis (pid 22064) conn 0x8392df0
[2009/03/30 09:29:41, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/30 09:29:41, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/30 09:29:41, 3] smbd/service.c:close_cnum(836)
  nbhanka (192.168.2.65) closed connection to service IPC$
[2009/03/30 09:29:41, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to IPC$
[2009/03/30 09:29:41, 4] smbd/vfs.c:vfs_ChDir(654)
  vfs_ChDir to /
[2009/03/30 09:29:41, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/30 09:29:41, 3] smbd/process.c:timeout_processing(1336)
  timeout_processing: End of file from client (client has disconnected).
[2009/03/30 09:29:41, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2009/03/30 09:29:41, 2] smbd/server.c:exit_server(571)
  Closing connections
[2009/03/30 09:29:41, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to
[2009/03/30 09:29:41, 3] smbd/connection.c:yield_connection(76)
  yield_connection: tdb_delete for name  failed with error Record does not exist.
[2009/03/30 09:29:41, 3] smbd/server.c:exit_server(614)
  Server exit (normal exit)

Vzhledem k tomu, že už mám druhý počítač, který nejde připojit, tak mám pocit, že bude chyba opravdu na straně samby. NAvíc mě mate, proč to zakládá lanman hash, když to dřív nedělalo.