Linux Enterprise Application-Linux server application information. For more information, see the following section. Yesterday I found that the machine that could access samba sent a TGS-REQ to the domain controller, and the domain controller sent the error code KRB5KDC_ERR_S_PRINCIPAL_UNKNOWN, which could not be accessed by samba sent a AS-REQ to the domain controller, the domain controller returns KRB5KDC_ERR_C_PRINCIPAL_UNKNOWN. After finding the error code, it finds that the former is the domain user of the domain where the client is sent, and the latter is the user of the samba server, I am wondering why "a nonexistent user name is displayed", but how does this user come from samba users in exchange with the domain controller. I think of it, the problem machine once successfully accessed samba, and later did not know why it caused the current problem, at that time access is the name of the AS-REQ, I would like to delete this user, I don't want to send this message to the domain controller any more. I can find a method to delete the LAN access user and password on the Internet, and then \ samba ip. Finally, the logon interface is displayed for a long time, enter the username and password to view samba sharing.
Looking back, I found that I had some experiences in solving this problem:
1. Configure samba in linux. At the beginning of configuration, it is best to set setup to disable the firewall first.
2. The shared directory permission is 555
3. the logon interface is displayed for xp access, but the user name and password entered cannot be accessed. The lmcompatibilitylevel is reduced to 1 or 0.
4. for some reason, xp cannot access samba again. It is possible that this account hosts domains on multiple computers at the same time. You can log out and log on to only one computer, and delete the LAN access records on the machine, the method is as follows:
A. click Start> control panel, double-click the "User Account" icon, and select the user name you are currently logged on to in the displayed window, click "Manage My network password", clear the Saved Password in the pop-up window, and restart the computer. When you access the computer again, the logon dialog box appears, enter another user name and password to access
B. Run rundll32.exe shell32.dll and Control_RunDLL keymgr. dll.
Delete the related password.
Note that deleting a password takes effect immediately without restarting the computer.
5. If any problem occurs, use etheral to capture packets and analyze the cause of the error.
6. There are a lot of good people on the Internet who have a lot of experience and are doing a good job. There is really no way to take a break and think about it.
7.support.microsoft.com is the best authority on the WINDOWS platform.
For samba, some people have written on the network to add samba machines to the xp Domain and enable ipvo authentication. This may be the best solution to this problem. For details, refer to the network documentation and samba Technical Manual.
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.
