SMB login error

May 2nd, 2007 by ktula

With my Thecus N2100 finally back up and running, i attempted to do a way due network backup of my work laptop. The backup program was unable to get past the network login prompt and further attempts in trying to login manually failed. I also tried to login using SMB from my Mac and that was unsuccessful as well.

I turned up logging for SMB on the N2100, by editing the /app/etc/samba/smb.conf (which is a symbolic link to /raid/sys/smb.conf) file, changing “log level” from 0 to 2. After restarting SMB, i noticed these errors in the SMB log file located in /var/log/samba:

[2007/05/02 12:30:33, 2] auth/auth.c:check_ntlm_password(319)
check_ntlm_password: Authentication for user [KTULA] -> [KTULA] FAILED with error NT_STATUS_NO_SUCH_USER
[2007/05/02 12:30:33, 2] smbd/service.c:make_connection_snum(560)
guest user (from session setup) not permitted to access this share (thinkpadbackup)

I knew as a fact that i could mount the shared folders using AFP but not SMB. So something was wrong with the authentication portion of SMB. The most likely culprit was probably the authentication DB used by SMB. I found a few files under /app/etc/samba/private that were of interest to me:

passwd.tdb
secrets.tdb
smbpasswd

Out of the three files, only the passwd.tdb has been recently updated. Since i didn’t know what format the passwd.tdb file is, i decided to add a test user. Using the test user, i was able to mount the shared folder using SMB. This told me that something was wrong with the user account that i was trying to login with.

From the N2100 web admin interface, i tried to redo the ACL (access control list) by removing the problem user account from the shared folder and adding it back. This did not work. So i resorted to remove the problem user account. After adding the user back and reconfiguring the ACL, the shared folder mounted without any problem.

Related posts

  • No Related Post

0 Responses to “SMB login error”

  1. No Comments

Leave a Response

Yes, I would like to receive notification on incoming comments!

*
To prove you're a person (not a spam script), type the security word shown in the picture. Click on the picture to hear an audio file of the word.
Click to hear an audio file of the anti-spam word