Hi

I am experiencing a problem which might be a kerberos one. After setting up a share and setting acl and share rights, I can access the share via http, but not using explorer in XP or win7. When trying to do so I am asked to enter username+password, but doing so even using superuser account access ist denied.

I found some log entries which might be helpfull

this is one log from a client trying to connect (log.nb00055)

[2010/08/31 22:46:17.323639, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/08/31 22:46:17.367474, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/08/31 22:46:17.682350, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/08/31 22:46:17.718116, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/08/31 22:46:17.819133, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/08/31 22:46:17.859239, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/08/31 22:46:17.957929, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/08/31 22:46:18.008444, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/08/31 22:46:18.083136, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/08/31 22:46:18.119421, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/08/31 22:46:18.198333, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/08/31 22:46:18.233292, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/08/31 22:46:18.318727, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/08/31 22:46:30.588456, 0] lib/util_sock.c:474(read_fd_with_timeout)
[2010/08/31 22:46:30.588526, 0] lib/util_sock.c:1432(get_peer_addr_internal)
getpeername failed. Error was Transport endpoint is not connected
read_fd_with_timeout: client 0.0.0.0 read error = Connection reset by peer.
[2010/09/01 09:42:47.552924, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/09/01 09:42:47.553570, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/09/01 09:42:47.559988, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/09/01 09:42:47.560221, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/09/01 09:42:47.560826, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/09/01 09:42:47.561052, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/09/01 09:42:47.561626, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/09/01 09:42:47.561857, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/09/01 09:42:47.563070, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/09/01 09:42:59.006370, 1] smbd/service.c:678(make_connection_snum)
create_connection_server_info failed: NT_STATUS_ACCESS_DENIED
[2010/09/01 09:43:09.408084, 0] lib/util_sock.c:474(read_fd_with_timeout)
[2010/09/01 09:43:09.408176, 0] lib/util_sock.c:1432(get_peer_addr_internal)
getpeername failed. Error was Transport endpoint is not connected
read_fd_with_timeout: client 0.0.0.0 read error = Connection reset by peer.
[2010/09/01 09:43:27.403413, 0] lib/util_sock.c:474(read_fd_with_timeout)
[2010/09/01 09:43:27.403495, 0] lib/util_sock.c:1432(get_peer_addr_internal)
getpeername failed. Error was Transport endpoint is not connected
read_fd_with_timeout: client 0.0.0.0 read error = Connection reset by peer.

log.winbindd

[2010/09/01 07:48:49.539402, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 07:53:49.546278, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 07:58:49.543281, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 08:03:49.557657, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 08:08:49.557461, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 08:13:49.574163, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 08:18:49.572585, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 08:23:49.568132, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 08:28:49.603503, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 08:33:49.589726, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 08:38:49.618020, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 08:43:49.607676, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 08:48:49.611956, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 08:53:49.624944, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 08:58:49.625383, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 09:03:49.671783, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 09:08:49.637051, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 09:13:49.663709, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 09:18:49.642997, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 09:23:49.664131, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 09:28:49.668801, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 09:33:49.680189, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 09:38:49.759855, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 09:43:50.053280, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 09:48:49.706589, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 09:53:49.723718, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 09:58:49.717172, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms
[2010/09/01 10:03:49.712081, 1] winbindd/winbindd_util.c:289(trustdom_recv)
Could not receive trustdoms

I am not sure, if it is really a problem with kerberos. Are there any other logs/information you need?

Open-e DSS v6 ist connected to our ADS 2003 Domain, which is in native mode. I have set up a hostA record for the iscsi storage in DNS and DNS ist setup correctly in open-e

Thanks for any solution.

Regards, Heinzelrumpel