![Samba 似乎无法保持与 Active Directory 域的连接](https://linux22.com/image/671843/Samba%20%E4%BC%BC%E4%B9%8E%E6%97%A0%E6%B3%95%E4%BF%9D%E6%8C%81%E4%B8%8E%20Active%20Directory%20%E5%9F%9F%E7%9A%84%E8%BF%9E%E6%8E%A5.png)
我最初可以使用以下命令将 Linux 机器加入到域中:
sudo kinit [email protected]
sudo net ads join -k
几个小时后或第二天,发生了以下情况:
user@host:~$ sudo wbinfo -a administrator Enter administrator's password: plaintext password authentication failed Could not authenticate user administrator with plaintext password Enter administrator's password: challenge/response password authentication failed error code was NT_STATUS_ACCESS_DENIED (0xc0000022) error message was: Access denied Could not authenticate user administrator with challenge/response
这些命令始终按预期工作:
sudo wbinfo -t sudo wbinfo -u sudo wbinfo -g sudo wbinfo -i administrator
Samba 版本 4.2.5-SerNet-Ubuntu-8.trusty,这是我的 smb.conf
[global] workgroup=WINDOWS security=ads realm=WINDOWS.x.x.COM domain master=no local master=no preferred master=no load printers=no printing=bsd printcap name=/dev/null disable spoolss=yes idmap backend=tdb idmap uid=10000-99999 idmap gid=10000-99999 idmap config WINDOWS:backend=rid idmap config WINDOWS:range=10000-9999 winbind enum users=yes winbind enum groups=yes winbind use default domain=yes winbind nested groups=yes winbind refresh tickets=yes winbind offline logon=yes template shell=/bin/false client use spnego=yes client ntlmv2 auth=yes encrypt passwords=yes restrict anonymous=2 log file=/var/log/samba/samba.log log level=2 dcerpc endpoint servers=remote
日志中没有任何有用的信息:(
[2015/11/25 15:26:23.524927, 2] ../source3/libsmb/cliconnect.c:1306(cli_session_setup_kerberos_send) Doing kerberos session setup [2015/11/25 15:26:23.532756, 2] ../source3/winbindd/winbindd_pam.c:2016(winbind_dual_SamLogon) NTLM CRAP authentication for user [WINDOWS]\[administrator] returned NT_STATUS_ACCESS_DENIED
任何帮助表示感谢