From mboxrd@z Thu Jan  1 00:00:00 1970
From: "Dermot Paikkos" <dermot@sciencephoto.com>
Subject: Re: samba: unreachable - admin prohibited
Date: Fri, 29 Jul 2005 20:27:21 +0100
Message-ID: <42EA9129.22155.A6FB3F@localhost>
References: <42EA8470.10323.75475D@localhost>
Reply-To: dermot@sciencephoto.com
Mime-Version: 1.0
Content-Transfer-Encoding: 7BIT
Return-path: <linux-admin-owner@vger.kernel.org>
In-reply-to: <36047.10.0.0.114.1122663307.squirrel@admin.surefoot.com>
Content-description: Mail message body
Sender: linux-admin-owner@vger.kernel.org
List-Id: <linux-admin.vger.kernel.org>
Content-Type: text/plain; charset="us-ascii"
To: linux-admin@vger.kernel.org

On 29 Jul 2005 at 12:55, Jens Knoell wrote:

> On Fri, July 29, 2005 12:33 pm, Dermot Paikkos wrote:

> > I guess the next question is how do I add a rule for smb and nmb or
> > can I just turn it off to confirm that this is the source of the
> > problem?
> 
> Firewall rules are set in the "setup" program in your distro, if I
> recall correctly. To check if the firewall is indeed the culprit, try
> this: /usr/sbin/iptables -F
> 
> That will wipe the firewall temporarily, not including the NAT and
> mangle tables (in case your box works as a gateway). To clean the NAT
> and mangle tables too, use these: /usr/sbin/iptables -t nat -F
> /usr/sbin/iptables -t mangle -F


Well something has changed as I seem to be getting through;

[root@proxima ~]# smbclient -L polaris
Password:
session setup failed: NT_STATUS_CANT_ACCESS_DOMAIN_INFO

This looks like the samba server isn't communicting with the PDC. 
so then;

>net rpc join mydomain -U administrator%password
Joined domain SPL.
>[root@proxima ~]# smbclient -L polaris
Password:
session setup failed: NT_STATUS_LOGON_FAILURE

A better error. The windows client can finally see it.

Thanx Jens & Scott. I guess I'll have to rtfm to configure the 
iptables or turn them off.
Dp.