【问题标题】:Problems accessing samba share from sharepoint web part从 sharepoint Web 部件访问 samba 共享时出现问题
【发布时间】:2011-11-03 10:17:18
【问题描述】:

我正在使用 System.IO.File.Copy 将文件从本地 windows/sharepoint 服务器复制到 samba 共享。但我遇到了一个例外:

Logon failure: unknown user name or bad password.
:    at System.IO.__Error.WinIOError(Int32 errorCode, String maybeFullPath)
  at System.IO.File.InternalCopy(String sourceFileName, String destFileName, Boolean overwrite)
  at System.IO.File.Copy(String sourceFileName, String destFileName, Boolean overwrite)

我登录的用户确实有权访问该共享。 IE。我可以从本地共享点服务器手动将驱动器映射到它。

如果我还授予运行共享点的服务帐户访问共享的权限,则 System.IO.File.Copy 操作正常。

从 Samba 日志中,我发现 sharepoint/windows 没有将我的用户名传递给 Samba。请参阅下面的 FAILED 日志下的: (check_ntlm_password: Checking password for unmapped user [][]@[FODV-SHRPT-01] )。

(我相信这些是 samba 日志的相关部分)第一个成功的服务帐户具有提升的权限,第二个失败的登录:

如果有人能对此有所了解,我将不胜感激。 成功:

 get_dc_list: preferred server list: "COPP-DC-01, copp-dc-01"
[2011/11/02 11:01:27, 3] libsmb/namequery_dc.c:rpc_dc_name(117)
  rpc_dc_name: Returning DC COPP-DC-01 (172.16.11.205) for domain OAKS
[2011/11/02 11:01:27, 3] libsmb/cliconnect.c:cli_start_connection(1417)
  Connecting to host=COPP-DC-01
[2011/11/02 11:01:27, 3] lib/util_sock.c:open_socket_out(874)
  Connecting to 172.16.11.205 at port 445
[2011/11/02 11:01:27, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081)
  rpc_pipe_bind: Remote machine COPP-DC-01 pipe \lsarpc fnum 0x8005 bind request returned ok.
[2011/11/02 11:01:27, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(224)
  lsa_io_sec_qos: length c does not match size 8
[2011/11/02 11:01:27, 3] auth/auth.c:check_ntlm_password(221)
  check_ntlm_password:  Checking password for unmapped user [OAKS]\[dev_shrpt_app]@[FODV-SHRPT-01] with the new password interface
[2011/11/02 11:01:27, 3] auth/auth.c:check_ntlm_password(224)
  check_ntlm_password:  mapped user is: [OAKS]\[dev_shrpt_app]@[FODV-SHRPT-01]
[2011/11/02 11:01:27, 3] smbd/sec_ctx.c:push_sec_ctx(208)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2011/11/02 11:01:27, 3] smbd/uid.c:push_conn_ctx(345)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2011/11/02 11:01:27, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2011/11/02 11:01:27, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2011/11/02 11:01:27, 3] libsmb/namequery.c:get_dc_list(1426)
  get_dc_list: preferred server list: "COPP-DC-01, copp-dc-01"
[2011/11/02 11:01:27, 3] libsmb/namequery_dc.c:rpc_dc_name(117)
  rpc_dc_name: Returning DC COPP-DC-01 (172.16.11.205) for domain OAKS
[2011/11/02 11:01:27, 3] libsmb/cliconnect.c:cli_start_connection(1417)
  Connecting to host=COPP-DC-01
[2011/11/02 11:01:27, 3] lib/util_sock.c:open_socket_out(874)
  Connecting to 172.16.11.205 at port 445
[2011/11/02 11:01:27, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081)
  rpc_pipe_bind: Remote machine COPP-DC-01 pipe \NETLOGON fnum 0x8016 bind request returned ok.
[2011/11/02 11:01:27, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081)
  rpc_pipe_bind: Remote machine COPP-DC-01 pipe \NETLOGON fnum 0x8017 bind request returned ok.
[2011/11/02 11:01:27, 3] auth/auth.c:check_ntlm_password(270)
  check_ntlm_password: winbind authentication for user [dev_shrpt_app] succeeded

失败:

[2011/11/02 11:05:36, 3] libsmb/namequery.c:get_dc_list(1426)
  get_dc_list: preferred server list: "COPP-DC-01, copp-dc-01"
[2011/11/02 11:05:36, 3] libsmb/namequery_dc.c:rpc_dc_name(117)
  rpc_dc_name: Returning DC COPP-DC-01 (172.16.11.205) for domain OAKS
[2011/11/02 11:05:36, 3] libsmb/cliconnect.c:cli_start_connection(1417)
  Connecting to host=COPP-DC-01
[2011/11/02 11:05:36, 3] lib/util_sock.c:open_socket_out(874)
  Connecting to 172.16.11.205 at port 445
[2011/11/02 11:05:36, 3] rpc_client/cli_pipe.c:rpc_pipe_bind(2081)
  rpc_pipe_bind: Remote machine COPP-DC-01 pipe \lsarpc fnum 0x8016 bind request returned ok.
[2011/11/02 11:05:36, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(224)
  lsa_io_sec_qos: length c does not match size 8
[2011/11/02 11:05:36, 3] auth/auth.c:check_ntlm_password(221)
  check_ntlm_password:  Checking password for unmapped user []\[]@[FODV-SHRPT-01] with the new password interface
[2011/11/02 11:05:36, 3] auth/auth.c:check_ntlm_password(224)
  check_ntlm_password:  mapped user is: [OAKS]\[]@[FODV-SHRPT-01]
[2011/11/02 11:05:36, 3] smbd/sec_ctx.c:push_sec_ctx(208)
  push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2011/11/02 11:05:36, 3] smbd/uid.c:push_conn_ctx(345)
  push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2011/11/02 11:05:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2011/11/02 11:05:36, 3] smbd/sec_ctx.c:pop_sec_ctx(339)
  pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2011/11/02 11:05:36, 3] auth/auth.c:check_ntlm_password(270)
  check_ntlm_password: guest authentication for user [] succeeded
[2011/11/02 11:05:36, 3] smbd/sec_ctx.c:push_sec_ctx(208)
SNIP
SNIP
SNIP  
[2011/11/02 11:05:36, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to expest
[2011/11/02 11:05:36, 3] smbd/error.c:error_packet(146)
  error packet at smbd/reply.c(676) cmd=117 (SMBtconX) NT_STATUS_LOGON_FAILURE
[2011/11/02 11:05:36, 3] smbd/process.c:process_smb(1110)
  Transaction 4 of length 43
[2011/11/02 11:05:36, 3] smbd/process.c:switch_message(914)
  switch message SMBulogoffX (pid 3748242) conn 0x0
[2011/11/02 11:05:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2011/11/02 11:05:36, 3] smbd/reply.c:reply_ulogoffX(1618)
  ulogoffX vuid=101
[2011/11/02 11:05:36, 3] smbd/process.c:timeout_processing(1359)
  timeout_processing: End of file from client (client has disconnected).
[2011/11/02 11:05:36, 3] smbd/sec_ctx.c:set_sec_ctx(241)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2011/11/02 11:05:36, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to 
[2011/11/02 11:05:36, 3] smbd/server.c:exit_server_common(675)
  Server exit (normal exit)

【问题讨论】:

    标签: sharepoint authentication samba


    【解决方案1】:

    Double hop issue?否则,这是您的 SharePoint 代码未在用户上下文中运行的问题。

    SharePoint 将模拟用户,除非您在 SPSecurity.RunWithElevatedPrivileges 委托中。

    【讨论】:

      猜你喜欢
      • 2013-11-20
      • 2011-02-08
      • 2011-03-03
      • 2010-10-24
      • 1970-01-01
      • 2015-06-28
      • 1970-01-01
      • 1970-01-01
      • 1970-01-01
      相关资源
      最近更新 更多