Hi, 

I have 'user_fully_qualified_name =True' in sssd.conf

I have attached the full log contents generated after smbclient -k



On 24 March 2017 at 09:50, Sumit Bose <sbose@redhat.com> wrote:
On Fri, Mar 24, 2017 at 09:19:10AM -0000, Martin Scott wrote:
> Hi,
>
> I have Debian 9 samba installed with sssd.
>
> Samba Version 4.5.6-Debian
> SSSD 1.15.0
>
> I have configured samba to use the sssd libwbclient but keep get a login failure for valid user name and password when using smbclient -k
>
> I can't work out why this is happening, any help would be greatly appreciated.
>
> Log snippet below

I think the actual issues happens before, please check if you see any
errors related to find a UID or GID by a SID or a name.

A typical reason for failures is a missing 'use_fully_qualified_names =
True' in sssd.conf. This is currently required to make SSSD's
libwbclient work as expected.

HTH

bye,
Sumit

>
> [2017/03/24 09:03:00.756770,  5, pid=1814, effective(0, 0), real(0, 0)] ../libcli/security/security_token.c:53(security_token_debug)
>   Security token: (NULL)
> [2017/03/24 09:03:00.756775,  5, pid=1814, effective(0, 0), real(0, 0)] ../source3/auth/token_util.c:639(debug_unix_user_token)
>   UNIX token of user 0
>   Primary group is 0 and contains 0 supplementary groups
> [2017/03/24 09:03:00.756785,  4, pid=1814, effective(0, 0), real(0, 0)] ../source3/smbd/sec_ctx.c:439(pop_sec_ctx)
>   pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
> [2017/03/24 09:03:00.756790,  1, pid=1814, effective(0, 0), real(0, 0)] ../source3/smbd/sesssetup.c:290(reply_sesssetup_and_X_spnego)
>   Failed to generate session_info (user and group token) for session setup: NT_STATUS_LOGON_FAILURE
> [2017/03/24 09:03:00.756803,  5, pid=1814, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:159(dbwrap_check_lock_order)
>   check lock order 1 for smbXsrv_session_global.tdb
> [2017/03/24 09:03:00.756808, 10, pid=1814, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order)
>   lock order:  1:smbXsrv_session_global.tdb 2:<none> 3:<none>
> [2017/03/24 09:03:00.756817, 10, pid=1814, effective(0, 0), real(0, 0)] ../source3/lib/dbwrap/dbwrap_ctdb.c:1064(fetch_locked_internal)
>   Locking db 1795596909 key 18669855
> [2017/03/24 09:03:00.756832, 10, pid=1814, effective(0, 0), real(0, 0)] ../source3/lib/ctdbd_conn.c:617(ctdbd_control)
>   ctdbd_control: Sending ctdb packet reqid=84, vnn=4026531841, opcode=128, srvid=1795596909
>   len=100, magic=43544442, vers=1, gen=0, op=7, reqid=84
> [2017/03/24 09:03:00.756854,  5, pid=1814, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:127(dbwrap_lock_order_state_destructor)
>   release lock order 1 for smbXsrv_session_global.tdb
> [2017/03/24 09:03:00.756860, 10, pid=1814, effective(0, 0), real(0, 0)] ../lib/dbwrap/dbwrap.c:114(debug_lock_order)
>   lock order:  1:<none> 2:<none> 3:<none>
> [2017/03/24 09:03:00.756865, 10, pid=1814, effective(0, 0), real(0, 0)] ../source3/lib/dbwrap/dbwrap_ctdb.c:932(db_ctdb_record_destr)
>   Unlocking db 1795596909 key 18669855
> [2017/03/24 09:03:00.756891,  3, pid=1814, effective(0, 0), real(0, 0)] ../source3/smbd/error.c:82(error_packet_set)
>   NT error packet at ../source3/smbd/sesssetup.c(293) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE
> _______________________________________________
> sssd-users mailing list -- sssd-users@lists.fedorahosted.org
> To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org
_______________________________________________
sssd-users mailing list -- sssd-users@lists.fedorahosted.org
To unsubscribe send an email to sssd-users-leave@lists.fedorahosted.org