Windows login problems.

jacobp · 08-14-2005, 09:59 PM

I have a problem that I hope someone can solve... I have our new Mac Tiger Server, pulling user accounts from Active Directory. Its used solely as a file depository.

AD users can connect from a mac to the tiger server without any problems.

AD users can't connect from a windows (XP & 2000) machine to the tiger server. It just asks for the username/password again. Users local on the server have no problems.

I've noticed this isn't just our tiger server, our 10.2.8 server is the same.

Does anyone have any suggestions? I can't find support for the error codes on the 'net, nor the error description. I've tried this with users who are the owner of the share and users who are in the same group. Its not a permissions thing, as far as I can tell. The samba error log is at the bottom of this

Cheers
J

[2005/08/15 12:57:53, 0] /SourceCache/samba/samba-92.9/samba/source/auth/auth_domain.c:check_ntdomain_security(257)
check_ntdomain_security: Configuration error! Cannot use ntdomain auth method when not a member of a domain.
[2005/08/15 12:57:54, 0] pdb_ods.c:get_records(1010)
dsGetRecordList error (-14130)dsGetRecordList error (-14130)User "Administrator" failed to authenticate with "dsAuthMethodStandard:dsAuthSMBNTKey" (-14091)

[2005/08/15 12:57:54, 1] auth_ods.c

pendirectory_smb_pwd_check_ntlmv1(427)
opendirectory_smb_pwd_check_ntlmv1: [-14091]opendirectory_auth_user
[2005/08/15 12:57:54, 0] /SourceCache/samba/samba-92.9/samba/source/auth/auth_domain.c:check_ntdomain_security(257)
check_ntdomain_security: Configuration error! Cannot use ntdomain auth method when not a member of a domain.
[2005/08/15 12:57:54, 0] pdb_ods.c:get_records(1010)
dsGetRecordList error (-14130)dsGetRecordList error (-14130)User "Administrator" failed to authenticate with "dsAuthMethodStandard:dsAuthSMBNTKey" (-14091)

[2005/08/15 12:57:54, 1] auth_ods.c

pendirectory_smb_pwd_check_ntlmv1(427)
opendirectory_smb_pwd_check_ntlmv1: [-14091]opendirectory_auth_user
[2005/08/15 12:58:01, 0] /SourceCache/samba/samba-92.9/samba/source/auth/auth_domain.c:check_ntdomain_security(257)
check_ntdomain_security: Configuration error! Cannot use ntdomain auth method when not a member of a domain.
[2005/08/15 12:58:01, 0] pdb_ods.c:get_records(1010)
dsGetRecordList error (-14130)dsGetRecordList error (-14130)User "jacobp" failed to authenticate with "dsAuthMethodStandard:dsAuthSMBNTKey" (-14091)

[2005/08/15 12:58:01, 1] auth_ods.c

pendirectory_smb_pwd_check_ntlmv1(427)
opendirectory_smb_pwd_check_ntlmv1: [-14091]opendirectory_auth_user
[2005/08/15 12:58:05, 0] /SourceCache/samba/samba-92.9/samba/source/auth/auth_domain.c:check_ntdomain_security(257)
check_ntdomain_security: Configuration error! Cannot use ntdomain auth method when not a member of a domain.
[2005/08/15 12:58:05, 0] pdb_ods.c:get_records(1010)
dsGetRecordList error (-14130)dsGetRecordList error (-14130)User "jacobp" failed to authenticate with "dsAuthMethodStandard:dsAuthSMBNTKey" (-14091)

[2005/08/15 12:58:05, 1] auth_ods.c

pendirectory_smb_pwd_check_ntlmv1(427)
opendirectory_smb_pwd_check_ntlmv1: [-14091]opendirectory_auth_user

elektro · 09-01-2006, 09:45 AM

Hey J,

is it possible, that your server is not really a member of your Domain?
Did you use /Application/Utlilies/Directory Service to get your Server into the AD??

Cheers!

cotatech · 09-12-2006, 06:53 PM

is SMB on your tiger server configured to allow MS-CHAP (not v2) ? I've found that xp doesn't like to talk to tiger server if you only allow ms-chap v2.

just a thought, it probably won't help. just sounds like an encryption thing, kind of like this one too:

http://forums.macosxhints.com/showth...t=52348&page=2

I realise that's backwards of your problem, but it sounds like the same type of thing.

Good luck!

08-14-2005, 09:59 PM	#1
jacobp Registered User Join Date: Aug 2005 Posts: 1	Windows login problems. I have a problem that I hope someone can solve... I have our new Mac Tiger Server, pulling user accounts from Active Directory. Its used solely as a file depository. AD users can connect from a mac to the tiger server without any problems. AD users can't connect from a windows (XP & 2000) machine to the tiger server. It just asks for the username/password again. Users local on the server have no problems. I've noticed this isn't just our tiger server, our 10.2.8 server is the same. Does anyone have any suggestions? I can't find support for the error codes on the 'net, nor the error description. I've tried this with users who are the owner of the share and users who are in the same group. Its not a permissions thing, as far as I can tell. The samba error log is at the bottom of this Cheers J [2005/08/15 12:57:53, 0] /SourceCache/samba/samba-92.9/samba/source/auth/auth_domain.c:check_ntdomain_security(257) check_ntdomain_security: Configuration error! Cannot use ntdomain auth method when not a member of a domain. [2005/08/15 12:57:54, 0] pdb_ods.c:get_records(1010) dsGetRecordList error (-14130)dsGetRecordList error (-14130)User "Administrator" failed to authenticate with "dsAuthMethodStandard:dsAuthSMBNTKey" (-14091) [2005/08/15 12:57:54, 1] auth_ods.cpendirectory_smb_pwd_check_ntlmv1(427) opendirectory_smb_pwd_check_ntlmv1: [-14091]opendirectory_auth_user [2005/08/15 12:57:54, 0] /SourceCache/samba/samba-92.9/samba/source/auth/auth_domain.c:check_ntdomain_security(257) check_ntdomain_security: Configuration error! Cannot use ntdomain auth method when not a member of a domain. [2005/08/15 12:57:54, 0] pdb_ods.c:get_records(1010) dsGetRecordList error (-14130)dsGetRecordList error (-14130)User "Administrator" failed to authenticate with "dsAuthMethodStandard:dsAuthSMBNTKey" (-14091) [2005/08/15 12:57:54, 1] auth_ods.cpendirectory_smb_pwd_check_ntlmv1(427) opendirectory_smb_pwd_check_ntlmv1: [-14091]opendirectory_auth_user [2005/08/15 12:58:01, 0] /SourceCache/samba/samba-92.9/samba/source/auth/auth_domain.c:check_ntdomain_security(257) check_ntdomain_security: Configuration error! Cannot use ntdomain auth method when not a member of a domain. [2005/08/15 12:58:01, 0] pdb_ods.c:get_records(1010) dsGetRecordList error (-14130)dsGetRecordList error (-14130)User "jacobp" failed to authenticate with "dsAuthMethodStandard:dsAuthSMBNTKey" (-14091) [2005/08/15 12:58:01, 1] auth_ods.cpendirectory_smb_pwd_check_ntlmv1(427) opendirectory_smb_pwd_check_ntlmv1: [-14091]opendirectory_auth_user [2005/08/15 12:58:05, 0] /SourceCache/samba/samba-92.9/samba/source/auth/auth_domain.c:check_ntdomain_security(257) check_ntdomain_security: Configuration error! Cannot use ntdomain auth method when not a member of a domain. [2005/08/15 12:58:05, 0] pdb_ods.c:get_records(1010) dsGetRecordList error (-14130)dsGetRecordList error (-14130)User "jacobp" failed to authenticate with "dsAuthMethodStandard:dsAuthSMBNTKey" (-14091) [2005/08/15 12:58:05, 1] auth_ods.cpendirectory_smb_pwd_check_ntlmv1(427) opendirectory_smb_pwd_check_ntlmv1: [-14091]opendirectory_auth_user

Thread Tools
Show Printable Version Email this Page
Display Modes	Rate This Thread
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode	Rate This Thread:

09-01-2006, 09:45 AM	#2
elektro Registered User Join Date: Sep 2006 Posts: 1	Hey J, is it possible, that your server is not really a member of your Domain? Did you use /Application/Utlilies/Directory Service to get your Server into the AD?? Cheers!

09-12-2006, 06:53 PM	#3
cotatech Prospect Join Date: Aug 2006 Posts: 4	is SMB on your tiger server configured to allow MS-CHAP (not v2) ? I've found that xp doesn't like to talk to tiger server if you only allow ms-chap v2. just a thought, it probably won't help. just sounds like an encryption thing, kind of like this one too: http://forums.macosxhints.com/showth...t=52348&page=2 I realise that's backwards of your problem, but it sounds like the same type of thing. Good luck!