CIFS error messages

[Jens Ebert]

HP-Support fails to resolve the following error we get in our syslog:

Dec 19 14:39:35 server3 smbd[23817]: pid:23817 - getpwnam.c:313:ldapent_to_pwent(): No valid user name.

We have installed:
B8725AA A.01.10 HP CIFS Server
J4269AA B.03.10 LDAP-UX Integration

While migrating our PC's to Win-2000 the messages started to show up (MANY times the hour).

Any idea?

[Jeff Schussele]

Hi Jens,

Appears to me that you have an authentication problem.
How does this HP system authenticate - LDAP or the passwd file?
Make sure that LDAP access is good & that all users accessing the system are in the LDAP file.

Rgds,
Jeff

[RAC_1]

Also make sure the all users who wants access to samba are there in sambpasswd.

If not use command smbpasswd -a "user_name" to add.

Also check encrypt password parameter in smb.conf file.

[Jens Ebert]

Our nsswitch.conf looks like this:
#
# /etc/nsswitch.files:
#
# An example file that could be copied over to /etc/nsswitch.conf; it
# does not use any name services.
#
passwd: files ldap
group: files ldap
hosts: files

So I would expect that HP-UX will only ask LDAP if a user can not be found in /etc/passwd and that LDAP is an extension of the password file.

[Darren Prior]

Hi Jens,

If this is the only error you have to go on, it might be useful to turn up the debug level a little and check the logs under /var/opt/samba.

What type of security are you using within CIFS? Is this using LDAP too?

I'd also suggest that you re-open the call with HP and ask for them to investigate further.

regards,

Darren.

[Jens Ebert]

We get the errors on our HP-UX Systems. Our PDC is running Linux and Samba 3.0, the LDAP server on the sam box.
On HP-UX the ldap_ux_client is supposed to have contact to the LDAP server for the nsswitch.conf resolution.

We have a "mixed" security scheme, as we have Win-95 (SHARE) and Win-2000 (DOMAIN) PC's. We manage this by an include in the smb.conf:
security = SHARE
include = /etc/opt/samba/w2k/%m

where in the w2k directory a symbolic link
pc_xxy -> ../smb.conf.w2k
exists. The file smb.conf.w2k looks like this:
security = DOMAIN
password server = *
encrypt passwords = yes
username map = /etc/opt/samba/username.map

Maybe this ti too complex for a forum discussion ...

HP should have the CIFS source code to investigate, but they say "not supported" whatever this means.

[Darren Prior]

Hmmm - I've never come across anyone else using includes to create mixed authentication!

As for supported vs unsupported - HP will test certain configurations before supporting them. Unsupported doesn't necessarily mean that it won't work, but HP won't be able to provide assistance on it.

regards,

Darren.