We are running several OS X Server boxes, including one Intel XServe providing AFP and SMB shares. All the Mac servers are joined to the company’s Active Directory domain. The Intel XServe providing the shares runs OS X 10.4.11. Authentication to the SMB shares on this server has always been a little flaky, but was always fixed by restarting the SMB service, restarting the box, unbinding and rebinding to the AD domain or some combination of the three. Beginning last week, however, AD users cannot authenticate to the SMB shares and the problem is not fixed by the above remedies. The SMB shares can be mounted using local accounts on the server and AFP share authentication has never been affected, either using local server accounts or AD accounts
Because I have had name binding issues with smb in the past, I have checked and restarted the nmdb process, but this has not helped. I do now see the following error in log.smdb that may be a clue to authentication settings problems:
api_pipe_bind_req: unknown auth type 1 requested.
Can anyone give me some troubleshooting tips or resources to help em get AD authentication working again on the SMB shares? I have already deleted the smb.conf file under Apple’s direction and replaced it with a fresh copy, but I am willing to try changing the authentication settings if someone can point me in the right direction.
–Carney Mimms
.
.
Comments are closed