SWAT not working

[Xavier Gutierrez_2]

Hi everyone.

I have just downloaded and installed the new version of CIFS server (A.02.01.01).

I tried using SWAT to configure it with no luck... it always says authentication error. Finally I set it up to demo mode for configuration purposes but that's not secure at all...

Any clues?

Regards,
Xavier.

[Xavier Gutierrez_2]

I think it was not clear enough...

I got Samba to work by setting swat to demo mode.

Even though, if I set swat back to normal mode I cannot seem to authenticate.


Xavier.

[Steven E. Protter]

I would suggest the following:

1) Newer version: http://software.hp.com/portal/swdepot/displayProductInfo.do?productNumber=B8725AA
Based on Samba 3.0.7


2) looking at the /etc/opt/samba/smb.log file(name is set in smb.conf folr error messages. Post them or search itrc for the text

3) Set up a special user for this.

4) Make sure the smbnull user has not been deleted. CIFS/Samba needs that user to be present.

SEP

[Xavier Gutierrez_2]

The problem is not with samba, which is working fine.

The problem is with the SWAT administration tool: Everytime I try to point my web browser to it I get the "Error 401: Bad Authentication" message.

BTW, that's the CIFS version I'm using. I have lots of servers running prior versions and for which SWAT works perfectly.

Cheers,

Xavier.

[Xavier Gutierrez_2]

This is the error message I get on /var/opt/samba/log.swat:

[2005/02/22 15:30:44, 0] auth/pampass.c:smb_pam_account(576) smb_pam_account: PAM: UNKNOWN PAM ERROR (32) during Account Management for User: root
[2005/02/22 15:30:44, 0] auth/pampass.c:smb_pam_passcheck(819)smb_pam_passcheck: PAM: smb_pam_account failed - Rejecting User root !

Cheers.

[Robert Bennett_3]

Is swat setup in /etc/services?

shoulde be a line like this:

swat 901/tcp

is there a line in /etc/inetd.conf like -

swat stream tcp nowait.400 root /usr/local/samba/bin/swat swat

If you don't have these - then you may want to add them and restart inetd.

[Xavier Gutierrez_2]

Hi again.

As I wrote before, I made SWAT work in demo mode. How could I have done that without those two lines in place?

The problem seems to be with authentication within SWAT. No problems within Samba, which is working *great*.

I have tried setting up both root and my personal username in smbpasswd (even though this was not necessary with prior samba versions) with identical luck.

For now I'm clueless, I posted the question.

Regards,

Xavier.

[Rainer von Bongartz]

Is your system in trusted mode ???

SWAT is currently not working on trusted systems.

Regards
Rainer

[Andrew Cowan]

The answer lies in the PAM error message, the mechanism it is using to authenticate the username password is being rejected. Look in the "/etc/pam.conf" and see if there are any rules for SWAT. Another compatability trick that sometimes works is:

cp "/etc/pam.con" "/etc/pam.d"

[Darren Prior]

Hi Xavier,

Have you tried connecting to SWAT from a different browser in case it has cached a previous password?

regards,

Darren.

[Xavier Gutierrez_2]

Hi,

Darren: Yes, I tried Mozilla and IE and tried clearing cache too on both... no success.

Rainer: You are correct... We tested on a box that is not trusted and SWAT works... Once we converted the box to trusted mode y stopped working.

So, (and this is related to what Andrew said) it seems that enhancing the security of the system prevents SWAT from working and it seems to have something to do with PAM authentication.

There are no clear references to SWAT or root user in /etc/pam.conf but I'll dig around to see if I acn make it work.

Any suggestions on how to do this will be appreciated.

Best regards,

Xavier.

[Rainer von Bongartz · Accepted solution]

Xavier,

an enhancement request has alread been issued for this broken feature
SEE:
http://www4.itrc.hp.com/service/cki/docDisplay.do?docLocale=en_US&docId=200000077312328


Regards
Rainer

[Xavier Gutierrez_2]

OK, so no solution till they give us the patch... I close the thread.