Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

this is what I have done so far as far as config is concerned

smb.conf

[global]


workgroup = WS1
realm = WS1.LOCAL
netbios name = smb-svr
server string = %h server (Samba %v, Ubuntu)
dns proxy = no
log level = 4
log file = /var/log/samba/log.%m
max log size = 1000
syslog = 0
panic action = /usr/share/samba/panic-action %d
security = ADS
domain master = no
idmap uid = 10000-20000
idmap gid = 10000-20000
template shell = /bin/bash
template homedir = /home/%D/%U
winbind enum groups = yes
winbind enum users = yes
winbind use default domain = yes
winbind separator = +
usershare allow guests = yes
map untrusted to domain = yes

[home]
comment = Home Directories
path = /home/WS1/%U
browseable = yes
root preexec = mkdir %H && chown %U:%G %H 
valid users = %S
read only = no

krb5.conf

[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log

[libdefaults]
dns_lookup_realm = true
dns_lookup_kdc = true
ticket_lifetime = 24h
forwardable = yes
default_realm = WS1.LOCAL

[appdefaults]
pam = {
   debug = false
   ticket_lifetime = 36000
   renew_lifetime = 36000
   forwardable = true
   krb4_convert = false
}


[realms]
        WS1.LOCAL = {
                kdc = dc1.ws1.local
                admin_server = dc1.ws1.local
                default_domain = ws1.local
        }

[domain_realm]
        .ws1.local = WS1.LOCAL
        ws1.local = WS1.LOCAL

etc/pam.d/samba

@include common-auth
@include common-account
@include common-session-noninteractive

/etc/pam.d/common-auth

auth    [success=3 default=ignore]  pam_unix.so nullok_secure
auth    [success=2 default=ignore]  pam_winbind.so krb5_auth krb5_ccache_type=FILE cached_login try_first_pass
auth    [success=1 default=ignore]  pam_ldap.so use_first_pass
auth    requisite           pam_deny.so
auth    required            pam_permit.so
auth    sufficient          pam_winbind.so
auth    sufficient          pam_unix.so nullok_secure use_first_pass
auth    required            pam_deny.so

/etc/pam.d/common-account

account [success=3 new_authtok_reqd=done default=ignore]    pam_unix.so 
account [success=2 new_authtok_reqd=done default=ignore]    pam_winbind.so 
account [success=1 default=ignore]  pam_ldap.so 
account requisite           pam_deny.so
account required            pam_permit.so
account sufficient          pam_winbind.so
account required            pam_unix.so

/etc/pam.d/common-session-noninteractive

session [default=1]         pam_permit.so
session requisite           pam_deny.so
session required            pam_permit.so
session optional            pam_umask.so
session required    pam_unix.so 
session optional            pam_winbind.so 
session required                        pam_mkhomedir.so umask=0022 skel=/etc/skel
session optional            pam_ldap.so 

when I do below from ubuntu client

mount -t cifs //smb-svr/ -o username=<username> /media/samba/

I get

Retrying with upper case share name
mount error(6): No such device or address
Refer to the mount.cifs(8) manual page (e.g. man mount.cifs)

or when I do below from ubuntu client

smbclient //smb-svr/home -U <username> -W WS1
Enter <username> password: 
Domain=[WS1] OS=[Unix] Server=[Samba 3.6.6]
tree connect failed: NT_STATUS_ACCESS_DENIED

What am I missing in my configs? Any help is greatly appreciated

share|improve this question
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.