Windows/Mac clients can’t authenticate to smb shares on OS X Server 10.6.4 on Active Directory

[carneym]

After several days of troubleshooting and reboots, I have fixed severe file copying problems with our xserve running OS X Server 10.6.4. In the process, somehow I have broken SMB logins to our Active Directory domain, which means that no Windows users can log in to our SMB shares. I have another OS X Server 10.5.8 serving SMB shares in the same AD domain without problems, so I now this is not a general AD domain problem. Mac users can’t log into these shares using SMB either. The shares appear but authentication fails.

I had thought at first that this was a kerberos problem, since that is how the Windows clients authenticate, but based on the entries in smb.log on the server shown below, it looks like smb authentication is altogether broken.

Can anyone point me in the right direction to fix this problem? I hope I can do so without breaking AFP authentication.

–Carney Mimms

—————————–
[2010/10/25 10:13:12, 0, pid=4647] /SourceCache/samba/samba-235.4/samba/source/auth/auth_odsam.c:opendirectory_opendirectory_ntlm_password_check(572)
opendirectory_smb_pwd_check_ntlmv2 gave -14090 [eDSAuthFailed]
[2010/10/25 10:13:20, 0, pid=4394] /SourceCache/samba/samba-235.4/samba/source/auth/auth_odsam.c:getusernode(85)
dsGetRecordEntry gave -14062 [eDSIndexOutOfRange]
[2010/10/25 10:13:20, 0, pid=4394] /SourceCache/samba/samba-235.4/samba/source/auth/auth_odsam.c:getusernode(85)
dsGetRecordEntry gave -14062 [eDSIndexOutOfRange]
[2010/10/25 10:13:22, 0, pid=4394] /SourceCache/samba/samba-235.4/samba/source/auth/auth_odsam.c:getusernode(85)
dsGetRecordEntry gave -14062 [eDSIndexOutOfRange]
[2010/10/25 10:13:22, 0, pid=4394] /SourceCache/samba/samba-235.4/samba/source/auth/auth_odsam.c:getusernode(85)
dsGetRecordEntry gave -14062 [eDSIndexOutOfRange]
[2010/10/25 10:13:22, 0, pid=4394] /SourceCache/samba/samba-235.4/samba/source/auth/auth_odsam.c:getusernode(85)
dsGetRecordEntry gave -14062 [eDSIndexOutOfRange]
[2010/10/25 10:13:22, 0, pid=4394] /SourceCache/samba/samba-235.4/samba/source/auth/auth_odsam.c:getusernode(85)
dsGetRecordEntry gave -14062 [eDSIndexOutOfRange]
[2010/10/25 10:13:22, 0, pid=4394] /SourceCache/samba/samba-235.4/samba/source/auth/auth_odsam.c:getusernode(85)
dsGetRecordEntry gave -14062 [eDSIndexOutOfRange]
[2010/10/25 10:13:22, 0, pid=4394] /SourceCache/samba/samba-235.4/samba/source/auth/auth_odsam.c:getusernode(85)
dsGetRecordEntry gave -14062 [eDSIndexOutOfRange]
[2010/10/25 10:13:25, 0, pid=4394] /SourceCache/samba/samba-235.4/samba/source/auth/auth_odsam.c:getusernode(85)
dsGetRecordEntry gave -14062 [eDSIndexOutOfRange]
[2010/10/25 10:13:25, 0, pid=4394] /SourceCache/samba/samba-235.4/samba/source/auth/auth_odsam.c:getusernode(85)
dsGetRecordEntry gave -14062 [eDSIndexOutOfRange]
[2010/10/25 10:13:25, 0, pid=4394] /SourceCache/samba/samba-235.4/samba/source/auth/auth_odsam.c:getusernode(85)
dsGetRecordEntry gave -14062 [eDSIndexOutOfRange]
[2010/10/25 10:13:25, 0, pid=4394] /SourceCache/samba/samba-235.4/samba/source/auth/auth_odsam.c:getusernode(85)
dsGetRecordEntry gave -14062 [eDSIndexOutOfRange]
[2010/10/25 10:13:25, 0, pid=4394] /SourceCache/samba/samba-235.4/samba/source/auth/auth_odsam.c:getusernode(85)
dsGetRecordEntry gave -14062 [eDSIndexOutOfRange]
[2010/10/25 10:13:25, 0, pid=4647] /SourceCache/samba/samba-235.4/samba/source/lib/util_sock.c:read_data(534)
read_data: read failure for 4 bytes to client 192.168.105.68. Error = Connection reset by peer

[Author]

Posts