j.koopmann
Cadet
- Joined
- Jan 9, 2012
- Messages
- 1
Hi,
I am in the process of installing a FreeNAS 8.0.3 server using OpenLDP and CIFS. OpenLDP seems to work. When I try using AFP shares the authentication works without problems. Moreover in the GUI I can see all LDAP users and groups. However logging in via CIFS fails:
[2012/01/09 19:05:10.724699, 2] smbd/sesssetup.c:1279(setup_new_vc_session)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2012/01/09 19:05:10.724716, 3] smbd/sesssetup.c:1065(reply_sesssetup_and_X_spnego)
Doing spnego session setup
[2012/01/09 19:05:10.724737, 3] smbd/sesssetup.c:1107(reply_sesssetup_and_X_spnego)
NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2012/01/09 19:05:10.724786, 3] ../libcli/auth/ntlmssp_server.c:348(ntlmssp_server_preauth)
Got user=[jan-peter.koopmann] domain=[NFON] workstation=[JPKWIN7] len1=24 len2=230
[2012/01/09 19:05:10.724926, 3] auth/auth.c:219(check_ntlm_password)
check_ntlm_password: Checking password for unmapped user [NFON]\[jan-peter.koopmann]@[JPKWIN7] with the new password interface
[2012/01/09 19:05:10.724985, 3] auth/auth.c:222(check_ntlm_password)
check_ntlm_password: mapped user is: [FREENAS]\[jan-peter.koopmann]@[JPKWIN7]
[2012/01/09 19:05:10.725365, 2] lib/smbldap.c:1018(smbldap_open_connection)
smbldap_open_connection: connection opened
[2012/01/09 19:05:10.842444, 3] lib/smbldap.c:1240(smbldap_connect_system)
ldap_connect_system: successful connection to the LDAP server
[2012/01/09 19:05:10.891620, 2] passdb/pdb_ldap.c:553(init_sam_from_ldap)
init_sam_from_ldap: Entry found for user: jan-peter.koopmann
[2012/01/09 19:05:10.979499, 3] passdb/pdb_ldap.c:5196(ldapsam_gid_to_sid)
"
[2012/01/09 19:05:10.979578, 3] passdb/lookup_sid.c:1737(get_primary_group_sid)
Forcing Primary Group to 'Domain Users' for jan-peter.koopmann
[2012/01/09 19:05:11.014710, 3] ../libcli/auth/ntlm_check.c:392(ntlm_password_check)
ntlm_password_check: NTLMv2 password check failed
[2012/01/09 19:05:11.014767, 3] ../libcli/auth/ntlm_check.c:437(ntlm_password_check)
ntlm_password_check: Lanman passwords NOT PERMITTED for user jan-peter.koopmann
[2012/01/09 19:05:11.014952, 3] ../libcli/auth/ntlm_check.c:585(ntlm_password_check)
ntlm_password_check: LM password, NT MD4 password in LM field and LMv2 failed for user jan-peter.koopmann
[2012/01/09 19:05:11.051542, 2] passdb/pdb_ldap.c:1180(init_ldap_from_sam)
init_ldap_from_sam: Setting entry for user: jan-peter.koopmann
[2012/01/09 19:05:11.051655, 2] auth/auth.c:319(check_ntlm_password)
check_ntlm_password: Authentication for user [jan-peter.koopmann] -> [jan-peter.koopmann] FAILED with error NT_STATUS_WRONG_PASSWORD
Not sure whether or not the "ERROR: Got 0 entries for gid 65534, expected one" is responsible for it but it looks like a side-issue to me. The LDAP Server logs state "success" for every call. I checked and double-checked the password. It is correct. I tried with Mac OSX and Win7 as clients. No clue what the problem could be. Any idea of how to solve this?
Kind regards,
JP
I am in the process of installing a FreeNAS 8.0.3 server using OpenLDP and CIFS. OpenLDP seems to work. When I try using AFP shares the authentication works without problems. Moreover in the GUI I can see all LDAP users and groups. However logging in via CIFS fails:
[2012/01/09 19:05:10.724699, 2] smbd/sesssetup.c:1279(setup_new_vc_session)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2012/01/09 19:05:10.724716, 3] smbd/sesssetup.c:1065(reply_sesssetup_and_X_spnego)
Doing spnego session setup
[2012/01/09 19:05:10.724737, 3] smbd/sesssetup.c:1107(reply_sesssetup_and_X_spnego)
NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2012/01/09 19:05:10.724786, 3] ../libcli/auth/ntlmssp_server.c:348(ntlmssp_server_preauth)
Got user=[jan-peter.koopmann] domain=[NFON] workstation=[JPKWIN7] len1=24 len2=230
[2012/01/09 19:05:10.724926, 3] auth/auth.c:219(check_ntlm_password)
check_ntlm_password: Checking password for unmapped user [NFON]\[jan-peter.koopmann]@[JPKWIN7] with the new password interface
[2012/01/09 19:05:10.724985, 3] auth/auth.c:222(check_ntlm_password)
check_ntlm_password: mapped user is: [FREENAS]\[jan-peter.koopmann]@[JPKWIN7]
[2012/01/09 19:05:10.725365, 2] lib/smbldap.c:1018(smbldap_open_connection)
smbldap_open_connection: connection opened
[2012/01/09 19:05:10.842444, 3] lib/smbldap.c:1240(smbldap_connect_system)
ldap_connect_system: successful connection to the LDAP server
[2012/01/09 19:05:10.891620, 2] passdb/pdb_ldap.c:553(init_sam_from_ldap)
init_sam_from_ldap: Entry found for user: jan-peter.koopmann
[2012/01/09 19:05:10.979499, 3] passdb/pdb_ldap.c:5196(ldapsam_gid_to_sid)
"
[2012/01/09 19:05:10.979578, 3] passdb/lookup_sid.c:1737(get_primary_group_sid)
Forcing Primary Group to 'Domain Users' for jan-peter.koopmann
[2012/01/09 19:05:11.014710, 3] ../libcli/auth/ntlm_check.c:392(ntlm_password_check)
ntlm_password_check: NTLMv2 password check failed
[2012/01/09 19:05:11.014767, 3] ../libcli/auth/ntlm_check.c:437(ntlm_password_check)
ntlm_password_check: Lanman passwords NOT PERMITTED for user jan-peter.koopmann
[2012/01/09 19:05:11.014952, 3] ../libcli/auth/ntlm_check.c:585(ntlm_password_check)
ntlm_password_check: LM password, NT MD4 password in LM field and LMv2 failed for user jan-peter.koopmann
[2012/01/09 19:05:11.051542, 2] passdb/pdb_ldap.c:1180(init_ldap_from_sam)
init_ldap_from_sam: Setting entry for user: jan-peter.koopmann
[2012/01/09 19:05:11.051655, 2] auth/auth.c:319(check_ntlm_password)
check_ntlm_password: Authentication for user [jan-peter.koopmann] -> [jan-peter.koopmann] FAILED with error NT_STATUS_WRONG_PASSWORD
Not sure whether or not the "ERROR: Got 0 entries for gid 65534, expected one" is responsible for it but it looks like a side-issue to me. The LDAP Server logs state "success" for every call. I checked and double-checked the password. It is correct. I tried with Mac OSX and Win7 as clients. No clue what the problem could be. Any idea of how to solve this?
Kind regards,
JP