Samba - Workaround for "The account is not authorized to log in from this station."

[Gerald Carter]

On Wed, 11 Apr 2001 23:28:48 Karsten Breivik (cybercity) wrote:
> 
> Problem:
> --------
> On the client mascines I get the msg: "The account is not 
> authorized to log in from this station."
..
> > Win98 sends session setup with username but at the 
> > same position where the CLEARTEXT PASSWORD was in the Win95 
> > frame now is just "USERNAME DOMAIN"
> >
> > I assume this so that samba can initiate validating the 
> > user's domain security token with the PDC.

Karsten,

A little additional information that you need here.  The bahavior is
this....

The problem you are experiencing is that the Samba server did not
set the "I support encrypted passwords" bit in the negprot response
packet.  The win98 client by default will not downgrade to
clear text passwords.  Win2000 is the same way as if Windows NT 
4.0 SP3+ and Win95 with the network redirector update installed.

This is a very common scenario and has been covered in lots 
of documentation distributed with Samba as well as in the 
mailing list archives.  Sorry you lost time on it.






Cheers, jerry
----------------------------------------------------------------------
   /\  Gerald (Jerry) Carter                     Professional Services
 \/    http://www.valinux.com/  VA Linux Systems   gcarter at valinux.com
       http://www.samba.org/       SAMBA Team          jerry at samba.org
       http://www.plainjoe.org/                     jerry at plainjoe.org

       "...a hundred billion castaways looking for a home."
                                - Sting "Message in a Bottle" ( 1979 )