samba handles nt logon restrictions wrong

Heinz Christian Christian.Heinz at nbg9.siemens.de
Wed Feb 23 19:36:29 GMT 2000


we use samba as member servers with security=domain pointing towards a WinNT4 PDC.
accounts that have workstation logon restrictions are unable to connect to samba shared ressources
but are able to connect to windows nt shared ressources as they should.
normally, workstation logon restriction should deny only interactive logons.

the 2.0.5 logfile entry:
----------------------------------------------------
[2000/02/23 18:49:41, 0] rpc_client/cli_netlogon.c:cli_net_sam_logon(392)
  cli_net_sam_logon: NT_STATUS_WRONG_PASSWORD
[2000/02/23 18:49:41, 0] smbd/password.c:domain_client_validate(1369)
  domain_client_validate: unable to validate password for user XXXXXXXX in domain YYYYYYY to Domain controller ZZZZZZZZZ. Error was NT_STATUS_WRONG_PASSWORD.
[2000/02/23 18:49:41, 1] smbd/password.c:pass_check_smb(532)
----------------------------------------------------

the 2.0.6 logfile entry:
----------------------------------------------------
[2000/02/23 19:14:24, 0] rpc_client/cli_netlogon.c:cli_net_sam_logon(392)
  cli_net_sam_logon: NT_STATUS_INVALID_WORKSTATION
[2000/02/23 19:14:24, 0] smbd/password.c:domain_client_validate(1431)
  domain_client_validate: unable to validate password for user XXXXXXXXXX in domain YYYYYYYYYY to Domain controller ZZZZZZZZZ. Error was NT_STATUS_INVALID_WORKSTATION.
----------------------------------------------------

as long as the mentioned logon restriction is in place, no connection can be made (against 2.0.5 and 2.0.6) - but the error message from 2.0.6 sounds a little better ...

is this a known issue (i didn´t find anything in the archives)?


greetings,

Christian Heinz
100750.65 at compuserve.com


More information about the samba mailing list