Penguin
Recent Changes
Blame: SambaErrorMessages
EditPageHistoryDiffInfoLikePages
Annotated edit history of SambaErrorMessages version 20, including all changes. View license author blame.
Rev Author # Line
9 CraigBox 1 !!Incorrect Parameter
2 When logging into a Samba 2.2 or 3.0 PDC from a windows desktop, you can sometimes get the error message "Incorrect Parameter". We've found two reasons for this:
3
4 Samba 2.2, affects all users. This error message can occur if the permissions on your login script are incorrect.
5
6 Samba 3.0alpha, affects one machine only. Not really a Samba issue, as much as that type of problem classifed as [PEBKAC]. Check that your "domain" field in the login prompt is actually correct and doesn't, for example, contain extra spaces after the domain name. "Foo" is slightly different to "Foo ".
16 DanielLawson 7
8 !! Cannot change password - "Permission denied" error
9 !! smbd/chgpasswd.c:findpty(73): findpty: Unable to create master/slave pty pair
10
11 Make sure that /dev/pts is mounted properly. This will vary depending on your server distribution
12
9 CraigBox 13
14 !!Password has expired
15 This normally means your password has expired. However, it may not always be obvious why..
16
17 I have a Samba 3.0a PDC setup, authenticating out of LDAP. My LDAP entities have posixAccount, shadowAccount, and sambaAccount objetclasses, amongst others. If you have 'obey pam restrictions = yes' in your smb.conf (version 3.x and later 2.2 only) then if pam thinks your shadow passwords have expired, samba will insist you need to change your password - even if your samba password expiry is correct.
18
19 suggested solutions:
20 # Tell Samba to not obey pam restrictions
21 # Reset your [UNIX] password at the same time you reset your Samba password
22 # Disable forced password changes in pam(7).
23
24 !!Another password has expired problem
25 I have a Samba 3.0.1 PDC setup, authenticating with tdbsam. When I exported to XML, erased the database, and imported from the database, suddenly all my passwords had expired, with a kick date at the beginning of Unix time - somewhere in 1970. I had to recreate all of the accounts. So beware of using the XML format as a backup of your password database until this bug is corrected.
26
27 !!Check the user account status
10 CraigBox 28 Use the command <tt>pdbedit username -c "~[X ]"</tt> to set password expiry off for the user.
16 DanielLawson 29
30 !!Account disabled
31 If an account is locked after too many failed login attempts, use <tt>pdbedit username -z</tt> to unlock the account.
9 CraigBox 32
33 !! smbclient -L host says 'protocol negotiation failed'
34 Check that the host you are trying to connect to has its loopback interface (lo) correctly configured and up
35
36 !!make_server_info_info3: pdb_init_sam failed!
37
38 According to Google this is a very common error, usually overlooked on the Samba mailing list. I gather, from reading the few posts that do have replies, that this error could be due to various things; the reason I was getting it was that I hadn't included the following in /etc/nsswitch.conf:
39
11 EwenMcNeill 40 <pre>
9 CraigBox 41 passwd: compat winbind
42 group: compat winbind
11 EwenMcNeill 43 </pre>
9 CraigBox 44
45 [This post|http://lists.samba.org/archive/samba/2005-January/098470.html] helped a bit.
11 EwenMcNeill 46
47 ~EwenMcNeill: From what I can tell the underlying cause of this error is that the authentication of the user worked, but it wasn't possible to load in their account information. Not having set up nsswitch.conf properly is one cause of that; having set up nsswitch.conf but not having restarted nscd (the caching daemon) is another cause. (The most obvious symptom for "not having restarted nscd" is that "getent passwd | grep USER" finds the user, but "getent passwd USER" doesn't, because the former doesn't seem to go through nscd, but the latter does -- and the latter is the same sort of call as Samba is making. If you see those symptoms check for nscd even if you didn't think you had it installed.)
19 AndrewRoss 48
49 If both invocations of gentent work, make sure you've restarted samba since adding winbind to /etc/nsswitch.conf
12 CodyJacobsen 50
51 Another thing to check (esp on Solaris) is that the libnss_winbind.so is in /lib and there are a bunch of symbolic links to it in /lib:
52 libnss_winbind.so.1
53 libnss_winbind.so.2
54 nss_winbind.so.1
55 nss_winbind.so.2
56 getent tends not to work if it can't find one of these (I don't know which specifically)
57 (libnss_winbind.so is in the samba/source/nsswitch subfolder. See the Samba winbind manual chapter 23 for other details. http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/winbind.html)
58
9 CraigBox 59
60 !!error code was NT_STATUS_PIPE_NOT_AVAILABLE (0xc00000ac)
61
62 If you get this error running wbinfo -t, try setting <tt>client schannel = no</tt> in your smb.conf.
13 ChrisLucas 63
64 !!When using wbinfo to test operability <i>Error looking up domain users</i> is returned plus only the <i>builtin</i> groups returned on test
65 I had a lot of trouble finding a solution to this problem and found that once the time was set on the system (ntpd) and the winbind / samba databases were recreated that all worked (this problem first occoured on a VM, hence why the time issue may have triggered the situation).
66
14 ChrisLucas 67 The databases can be recreated by:
68 *Stopping the samba and winbind services
69 *Backing up the samba database (just in case of course)
70 *Rejoining the domain
71 *Restart the samba and winbind services
72 *Reset the Samba authentication (wbinfo --set-auth-user user%password)
13 ChrisLucas 73
14 ChrisLucas 74 At this point all started working again. However, please note, <br>
75 A) Time is very important to Active Directory (hence ntpdate or ntpd is important)<br>
15 ChrisLucas 76 B) VM's dont work so well with time, hence, not so well with directories (install the vm tools - a service is added to ensure that time is taken from the host system more correctly)<br>
17 CraigBox 77
78 !!"get_domain_master_name_node_status_fail" and "Cannot get workgroup name" in log.nmbd
79
80 You have cached some IP addresses you no longer have, so Samba can't participate in browser elections on those domains. Stop Samba and remove the entries from /var/lib/samba/wins.dat and /var/lib/samba/namelist.debug. Thanks to [Zeros Subs|http://zerosub.no-ip.com/blogs/index.php/2005/08/12/samba_cache] for the answer.
18 RafalStanilewicz 81
82 !!"protocol negotiation failed"
83 ~RafalStanilewicz: I had problem with Samba 3.0.22. Clients could not connect, both remote and from the same machine:
84 <pre>
85 #smbclient -L localhost
86 protocol negotiation failed.
87 </pre>
88 I tried to restart samba, even the whole machine. Interfaces were up and running fine. Testparm didn't detected anything suspicious. Ports were listening.
89 After some debugging, I revealed the cause: it was hanged up cupsd, because of some malformed print job. It got 100% of processor time (visible in 'top'), however the rest of the system was running fine, even the Xwindow. After cleaning of queue and restart cupsys, everything worked as expected.
90
91 (I know this sounds like primitive and trivial case, but I couldn't find a clue for hours, maybe someone will take advantage of this simple advice.
92 Please edit as you wish, but don't delete.)
20 CraigBox 93
94 !!Failed to set servicePrincipalNames. Please ensure that the DNS domain of this server matches the AD domain
95
96 <pre>
97 Using short domain name -- EXAMPLE
98 Failed to set servicePrincipalNames. Please ensure that
99 the DNS domain of this server matches the AD domain,
100 Or rejoin with using Domain Admin credentials.
101 Disabled account for 'MACHINE' in realm 'EXAMPLE.COM'
102 </pre>
103
104 Does <tt>hostname --fqdn</tt> read machine.example.com? If not, edit ''/etc/hosts'' and start again. You should have a line like:
105
106 <pre>
107 10.11.12.13 machine.example.com machine
108 </pre>