[Samba] Samba "unable to validate password" error

[Mike Stewart]

have you created the new user accounts in Unix and also in smbpasswd ?

Mike

----- Original Message -----
From: "Carolyn Mayr" <carolyn at usna.edu>
To: <samba at lists.samba.org>
Cc: <carolyn at cs.usna.edu>
Sent: Friday, November 15, 2002 3:21 PM
Subject: [Samba] Samba "unable to validate password" error


> I sent the following to sunmanagers at sunmanagers.org and I'm also
forwarding
> this to the samba list.  I hope you can help:
>
> ------------- Begin Forwarded Message -------------
> I have an emergency and am at the end of my resources and hope you can
help.
> I'm a samba newbie and hope you can point me to an answer.
>
> Our Samba2.0.5 server is a Sun Enterprise 450 (Solaris 7).  Our PDC
> is an NT machine called warrior.  The warrior is the smbpasswd server
> and the domain is CSDEPARTMENT.
>
> We've been running samba for the past 2 years with no problem.  Now we
> are seeing a problem with new users in the CSDEPARTMENT domain when a
> user tries to log in from their PC to our samba server:
>
>   [2002/11/15 07:53:51, 0] smbd/password.c:(1470)
>     domain_client_validate: unable to validate password for user velazque
in
> domain CSDEPARTMENT to Domain controller WARRIOR. Error was code 0.
>   [2002/11/15 07:53:51, 1] smbd/password.c:(500)
>     Couldn't find user 'velazque' in smb_passwd file.
>   [2002/11/15 07:53:51, 1] smbd/password.c:(500)
>     Couldn't find user 'velazque' in smb_passwd file.
>   [2002/11/15 07:53:51, 1] smbd/reply.c:(925)
>     Rejecting user 'velazque': authentication failed
>   [2002/11/15 07:53:51, 1] smbd/server.c:(641)
>     smbd version 2.0.7 started.
>
>
> I don't know what is causing this.  I reviewed my smb.conf file using the
> Samba Unleashed book and according to the book, it's correct.
>
> I thought maybe the problem was with the PDC credentials so I tried this:
>
> #/opt/samba/bin/smbpasswd -j CSDEPARTMENT -r warrior
>
>    cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
>    cli_nt_setup_creds: auth2 challenge failed
>    modify_trust_password: unable to setup the PDC credentials to machine
> WARRIOR.   Error was : NT_STATUS_ACCESS_DENIED.
>    2002/11/15 09:34:55 : change_trust_account_password: Failed to change
> password for domain CSDEPARTMENT.
>    Unable to join domain CSDEPARTMENT.
>
> Could this be why I'm having the user validation problem?  BTW, we do have
> an /etc/opt/samba/private directory with some old files:
>
> -rw-r--r--   1 root     root          40 Aug 17  2000 MACHINE.SID
> -rw-------   1 root     root         127 Apr 30  2001 smbpasswd
> -rw-r--r--   1 root     other         25 Aug 18  2000 smbpasswd.junk
>
>
> Please help!!!!
>
>
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
=
> Carolyn A. Mayr (UNIX System Administrator)  Voice: (410) 293-6808
(sec-6800)
> Computer Science Department, DivMath&Sci     Email: carolyn at usna.edu
> 572 Holloway Road, Chauvenet Hall, Stop 9F   FAX:   (410) 293-2686
> U.S. Naval Academy                           WWW:   http://www.cs.usna.edu
> Annapolis, MD  21402-5002                    USNA:  (410) 293-1000
>
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
=
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>
>