Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

this is what I have done so far as far as config is concerned



workgroup = WS1
realm = WS1.LOCAL
netbios name = smb-svr
server string = %h server (Samba %v, Ubuntu)
dns proxy = no
log level = 4
log file = /var/log/samba/log.%m
max log size = 1000
syslog = 0
panic action = /usr/share/samba/panic-action %d
security = ADS
domain master = no
idmap uid = 10000-20000
idmap gid = 10000-20000
template shell = /bin/bash
template homedir = /home/%D/%U
winbind enum groups = yes
winbind enum users = yes
winbind use default domain = yes
winbind separator = +
usershare allow guests = yes
map untrusted to domain = yes

comment = Home Directories
path = /home/WS1/%U
browseable = yes
root preexec = mkdir %H && chown %U:%G %H 
valid users = %S
read only = no


default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log

dns_lookup_realm = true
dns_lookup_kdc = true
ticket_lifetime = 24h
forwardable = yes
default_realm = WS1.LOCAL

pam = {
   debug = false
   ticket_lifetime = 36000
   renew_lifetime = 36000
   forwardable = true
   krb4_convert = false

        WS1.LOCAL = {
                kdc = dc1.ws1.local
                admin_server = dc1.ws1.local
                default_domain = ws1.local

        .ws1.local = WS1.LOCAL
        ws1.local = WS1.LOCAL


@include common-auth
@include common-account
@include common-session-noninteractive


auth    [success=3 default=ignore]  pam_unix.so nullok_secure
auth    [success=2 default=ignore]  pam_winbind.so krb5_auth krb5_ccache_type=FILE cached_login try_first_pass
auth    [success=1 default=ignore]  pam_ldap.so use_first_pass
auth    requisite           pam_deny.so
auth    required            pam_permit.so
auth    sufficient          pam_winbind.so
auth    sufficient          pam_unix.so nullok_secure use_first_pass
auth    required            pam_deny.so


account [success=3 new_authtok_reqd=done default=ignore]    pam_unix.so 
account [success=2 new_authtok_reqd=done default=ignore]    pam_winbind.so 
account [success=1 default=ignore]  pam_ldap.so 
account requisite           pam_deny.so
account required            pam_permit.so
account sufficient          pam_winbind.so
account required            pam_unix.so


session [default=1]         pam_permit.so
session requisite           pam_deny.so
session required            pam_permit.so
session optional            pam_umask.so
session required    pam_unix.so 
session optional            pam_winbind.so 
session required                        pam_mkhomedir.so umask=0022 skel=/etc/skel
session optional            pam_ldap.so 

when I do below from ubuntu client

mount -t cifs //smb-svr/ -o username=<username> /media/samba/

I get

Retrying with upper case share name
mount error(6): No such device or address
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)

or when I do below from ubuntu client

smbclient //smb-svr/home -U <username> -W WS1
Enter <username> password: 
Domain=[WS1] OS=[Unix] Server=[Samba 3.6.6]
tree connect failed: NT_STATUS_ACCESS_DENIED

What am I missing in my configs? Any help is greatly appreciated

share|improve this question
add comment

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.