[Samba] windows authentication problem?

[Soo Hom]

Hello,

I have samba + windbind running on red hat linux 8.0.   I can ssh to the
samba server but windows clients can't connect.

>From the log it looks like windows is not reading the user as  CVRR2+soo
and only using soo.

Any ideas on how to fix this problem?

Here is my smb.conf:


#
#======================= Global Settings
=====================================
[global]

# workgroup = NT-Domain-Name or Workgroup-Name
   workgroup = CVRR2

# server string is the equivalent of the NT Description field
   server string = Samba Server

# This option is important for security. It allows you to restrict
# connections to machines which are on your local network. The
# following example restricts access to two C class networks and
# the "loopback" interface. For more examples of the syntax see
# the smb.conf man page
;   hosts allow = 192.168.1. 192.168.2. 127.

# if you want to automatically load your printer list rather
# than setting them up individually then you'll need this
   printcap name = /etc/printcap
   load printers = yes

# It should not be necessary to spell out the print system type unless
# yours is non-standard. Currently supported print systems include:
# bsd, sysv, plp, lprng, aix, hpux, qnx
   printing = lprng

# Uncomment this if you want a guest account, you must add this to
/etc/passwd
# otherwise the user "nobody" is used
;  guest account = pcguest

# this tells Samba to use a separate log file for each machine
# that connects
   log file = /var/log/samba/%m.log

# Put a capping on the size of the log files (in Kb).
   max log size = 0

# Security mode. Most people will want user level security. See
# security_level.txt for details.
   security = domain

# Use password server option only with security = server
# The argument list may include:
#   password server = My_PDC_Name [My_BDC_Name] [My_Next_BDC_Name]
# or to auto-locate the domain controller/s
#   password server = *
;   password server = <NT-Server-Name>
   password server = ostrich

# Password Level allows matching of _n_ characters of the password for
# all combinations of upper and lower case.
;  password level = 8
;  username level = 8

# You may wish to use password encryption. Please read
# ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
# Do not enable this option unless you have read those documents
   encrypt passwords = yes
   smb passwd file = /etc/samba/smbpasswd

# The following is needed to keep smbclient from spouting spurious errors
# when Samba is built with support for SSL.
;   ssl CA certFile = /usr/share/ssl/certs/ca-bundle.crt

# The following are needed to allow password changing from Windows to
# update the Linux system password also.
# NOTE: Use these with 'encrypt passwords' and 'smb passwd file' above.
# NOTE2: You do NOT need these to allow workstations to change only
#        the encrypted SMB passwords. They allow the Unix password
#        to be kept in sync with the SMB password.
   unix password sync = Yes
   passwd program = /usr/bin/passwd %u
   passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*

# You can use PAM's password change control flag for Samba. If
# enabled, then PAM will be used for password changes when requested
# by an SMB client instead of the program listed in passwd program.
# It should be possible to enable this without changing your passwd
# chat parameter for most setups.

   pam password change = yes



  obey pam restrictions = yes




;winbind stuff

    winbind separator = +
    winbind cache time = 60
    template shell = /bin/bash
   template homedir = /home/%D/%U
    winbind uid = 10000-20000
    winbind gid = 10000-20000

#============================ Share Definitions
==============================
[homes]
   comment = Home Directories
   browseable = no
   writable = yes
   valid users = %S
   create mode = 0664
   directory mode = 0775
# If you want users samba doesn't recognize to be mapped to a guest user
; map to guest = bad user

[test]
path = /home/CVRR2
read only = no
create mask = 0777
directory mask = 0777
browseable = yes
guest ok = no
"Valid users = CVRR2+username"





# NOTE: If you have a BSD-style print system there is no need to 
# specifically define each individual printer
[printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = no
# Set public = yes to allow user 'guest account' to print
   guest ok = no
   writable = no
   printable = yes






Here is the samba log:
[2003/01/23 09:46:00, 3] smbd/reply.c:reply_sesssetup_and_X(868)
  sesssetupX:name=[soo]
[2003/01/23 09:46:00, 3] libsmb/namequery.c:resolve_lmhosts(768)
  resolve_lmhosts: Attempting lmhosts lookup for name OSTRICH<0x20>
[2003/01/23 09:46:00, 3] libsmb/namequery.c:resolve_hosts(808)
  resolve_hosts: Attempting host lookup for name OSTRICH<0x20>
[2003/01/23 09:46:00, 3] lib/util_sock.c:open_socket_out(845)
  Connecting to 132.239.223.171 at port 445
[2003/01/23 09:46:00, 0]
rpc_client/cli_netlogon.c:cli_net_sam_logon_internal(406)
  cli_net_sam_logon_internal: NT_STATUS_NO_SUCH_USER
[2003/01/23 09:46:00, 0] smbd/password.c:domain_client_validate(1619)
  domain_client_validate: unable to validate password for user soo in
domain ROSEBUD to Domain controller ostrich. Error was
NT_STATUS_NO_SUCH_USER.
[2003/01/23 09:46:00, 1] smbd/password.c:pass_check_smb(545)
  Couldn't find user 'soo' in passdb.
[2003/01/23 09:46:00, 2] smbd/reply.c:reply_sesssetup_and_X(975)
  NT Password did not match for user 'soo'!
[2003/01/23 09:46:00, 2] smbd/reply.c:reply_sesssetup_and_X(985)
  Defaulting to Lanman password for soo
[2003/01/23 09:46:00, 1] smbd/password.c:pass_check_smb(545)
  Couldn't find user 'soo' in passdb.
[2003/01/23 09:46:00, 1] smbd/reply.c:reply_sesssetup_and_X(1001)
  Rejecting user 'soo': authentication failed
[2003/01/23 09:46:00, 3] smbd/error.c:error_packet(113)
  error packet at smbd/reply.c(1003) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
[2003/01/23 09:46:00, 3] smbd/process.c:timeout_processing(1098)
  end of file from client