CIFS and LDAP problem

Status
Not open for further replies.

j.koopmann

Cadet
Joined
Jan 9, 2012
Messages
1
Hi,

I am in the process of installing a FreeNAS 8.0.3 server using OpenLDP and CIFS. OpenLDP seems to work. When I try using AFP shares the authentication works without problems. Moreover in the GUI I can see all LDAP users and groups. However logging in via CIFS fails:

[2012/01/09 19:05:10.724699, 2] smbd/sesssetup.c:1279(setup_new_vc_session)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2012/01/09 19:05:10.724716, 3] smbd/sesssetup.c:1065(reply_sesssetup_and_X_spnego)
Doing spnego session setup
[2012/01/09 19:05:10.724737, 3] smbd/sesssetup.c:1107(reply_sesssetup_and_X_spnego)
NativeOS=[] NativeLanMan=[] PrimaryDomain=[]
[2012/01/09 19:05:10.724786, 3] ../libcli/auth/ntlmssp_server.c:348(ntlmssp_server_preauth)
Got user=[jan-peter.koopmann] domain=[NFON] workstation=[JPKWIN7] len1=24 len2=230
[2012/01/09 19:05:10.724926, 3] auth/auth.c:219(check_ntlm_password)
check_ntlm_password: Checking password for unmapped user [NFON]\[jan-peter.koopmann]@[JPKWIN7] with the new password interface
[2012/01/09 19:05:10.724985, 3] auth/auth.c:222(check_ntlm_password)
check_ntlm_password: mapped user is: [FREENAS]\[jan-peter.koopmann]@[JPKWIN7]
[2012/01/09 19:05:10.725365, 2] lib/smbldap.c:1018(smbldap_open_connection)
smbldap_open_connection: connection opened
[2012/01/09 19:05:10.842444, 3] lib/smbldap.c:1240(smbldap_connect_system)
ldap_connect_system: successful connection to the LDAP server
[2012/01/09 19:05:10.891620, 2] passdb/pdb_ldap.c:553(init_sam_from_ldap)
init_sam_from_ldap: Entry found for user: jan-peter.koopmann
[2012/01/09 19:05:10.979499, 3] passdb/pdb_ldap.c:5196(ldapsam_gid_to_sid)
"
[2012/01/09 19:05:10.979578, 3] passdb/lookup_sid.c:1737(get_primary_group_sid)
Forcing Primary Group to 'Domain Users' for jan-peter.koopmann
[2012/01/09 19:05:11.014710, 3] ../libcli/auth/ntlm_check.c:392(ntlm_password_check)
ntlm_password_check: NTLMv2 password check failed
[2012/01/09 19:05:11.014767, 3] ../libcli/auth/ntlm_check.c:437(ntlm_password_check)
ntlm_password_check: Lanman passwords NOT PERMITTED for user jan-peter.koopmann
[2012/01/09 19:05:11.014952, 3] ../libcli/auth/ntlm_check.c:585(ntlm_password_check)
ntlm_password_check: LM password, NT MD4 password in LM field and LMv2 failed for user jan-peter.koopmann
[2012/01/09 19:05:11.051542, 2] passdb/pdb_ldap.c:1180(init_ldap_from_sam)
init_ldap_from_sam: Setting entry for user: jan-peter.koopmann
[2012/01/09 19:05:11.051655, 2] auth/auth.c:319(check_ntlm_password)
check_ntlm_password: Authentication for user [jan-peter.koopmann] -> [jan-peter.koopmann] FAILED with error NT_STATUS_WRONG_PASSWORD


Not sure whether or not the "ERROR: Got 0 entries for gid 65534, expected one" is responsible for it but it looks like a side-issue to me. The LDAP Server logs state "success" for every call. I checked and double-checked the password. It is correct. I tried with Mac OSX and Win7 as clients. No clue what the problem could be. Any idea of how to solve this?

Kind regards,
JP
 
Status
Not open for further replies.
Top