[Samba] Users with changed passwords can't log on remotely (but
can locally)
Ed Holden
eholden at mclean.harvard.edu
Wed Jan 19 18:46:13 GMT 2005
OK, Tomek, here it is. Debug level is 7; let me know if that's OK.
What's happening in these logs is this: I am twice connecting to DMC1,
the Samba server, from a remote machine using smbclient. First I use
the username "nrladmin," which is an account that works, and I get a
list of shares. Then I connect as "oisacson," which has had its
password changed, and get a "session setup failed:
NT_STATUS_LOGON_FAILURE" error. (However on the server itself I can
connect with this user to 127.0.0.1.)
I have output from the main samba log, the client-specific log, and then
the smb.conf. Here we go ...
Here is the log.smbd output:
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_KEEPALIVE = 1
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_REUSEADDR = 1
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_BROADCAST = 0
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option TCP_NODELAY = 1
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option IPTOS_LOWDELAY = 0
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option IPTOS_THROUGHPUT = 0
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_SNDBUF = 16384
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_RCVBUF = 16384
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_SNDLOWAT = 1
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_RCVLOWAT = 1
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_SNDTIMEO = 0
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_RCVTIMEO = 0
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_KEEPALIVE = 1
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_REUSEADDR = 1
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_BROADCAST = 0
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option TCP_NODELAY = 1
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option IPTOS_LOWDELAY = 0
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option IPTOS_THROUGHPUT = 0
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_SNDBUF = 16384
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_RCVBUF = 16384
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_SNDLOWAT = 1
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_RCVLOWAT = 1
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_SNDTIMEO = 0
[2005/01/19 13:27:06, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_RCVTIMEO = 0
[2005/01/19 13:27:06, 5] lib/gencache.c:gencache_init(59)
Opening cache file at /var/cache/samba/gencache.tdb
[2005/01/19 13:27:06, 5] libsmb/namecache.c:namecache_enable(58)
namecache_enable: enabling netbios namecache, timeout 660 seconds
[2005/01/19 13:27:06, 5] passdb/pdb_interface.c:make_pdb_context_list(602)
Trying to load: smbpasswd
[2005/01/19 13:27:06, 5] passdb/pdb_interface.c:smb_register_passdb(93)
Attempting to register passdb backend ldapsam
[2005/01/19 13:27:06, 5] passdb/pdb_interface.c:smb_register_passdb(106)
Successfully added passdb backend 'ldapsam'
[2005/01/19 13:27:06, 5] passdb/pdb_interface.c:smb_register_passdb(93)
Attempting to register passdb backend ldapsam_compat
[2005/01/19 13:27:06, 5] passdb/pdb_interface.c:smb_register_passdb(106)
Successfully added passdb backend 'ldapsam_compat'
[2005/01/19 13:27:06, 5] passdb/pdb_interface.c:smb_register_passdb(93)
Attempting to register passdb backend smbpasswd
[2005/01/19 13:27:06, 5] passdb/pdb_interface.c:smb_register_passdb(106)
Successfully added passdb backend 'smbpasswd'
[2005/01/19 13:27:06, 5] passdb/pdb_interface.c:smb_register_passdb(93)
Attempting to register passdb backend tdbsam
[2005/01/19 13:27:06, 5] passdb/pdb_interface.c:smb_register_passdb(106)
Successfully added passdb backend 'tdbsam'
[2005/01/19 13:27:06, 5] passdb/pdb_interface.c:smb_register_passdb(93)
Attempting to register passdb backend guest
[2005/01/19 13:27:06, 5] passdb/pdb_interface.c:smb_register_passdb(106)
Successfully added passdb backend 'guest'
[2005/01/19 13:27:06, 5] passdb/pdb_interface.c:make_pdb_methods_name(498)
Attempting to find an passdb backend to match smbpasswd (smbpasswd)
[2005/01/19 13:27:06, 5] passdb/pdb_interface.c:make_pdb_methods_name(519)
Found pdb backend smbpasswd
[2005/01/19 13:27:06, 5] passdb/pdb_interface.c:make_pdb_methods_name(522)
pdb backend smbpasswd has a valid init
[2005/01/19 13:27:06, 5] passdb/pdb_interface.c:make_pdb_methods_name(498)
Attempting to find an passdb backend to match guest (guest)
[2005/01/19 13:27:06, 5] passdb/pdb_interface.c:make_pdb_methods_name(519)
Found pdb backend guest
[2005/01/19 13:27:06, 5] passdb/pdb_interface.c:make_pdb_methods_name(522)
pdb backend guest has a valid init
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_KEEPALIVE = 1
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_REUSEADDR = 1
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_BROADCAST = 0
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option TCP_NODELAY = 1
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option IPTOS_LOWDELAY = 0
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option IPTOS_THROUGHPUT = 0
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_SNDBUF = 16384
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_RCVBUF = 16384
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_SNDLOWAT = 1
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_RCVLOWAT = 1
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_SNDTIMEO = 0
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_RCVTIMEO = 0
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_KEEPALIVE = 1
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_REUSEADDR = 1
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_BROADCAST = 0
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option TCP_NODELAY = 1
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option IPTOS_LOWDELAY = 0
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option IPTOS_THROUGHPUT = 0
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_SNDBUF = 16384
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_RCVBUF = 16384
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_SNDLOWAT = 1
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_RCVLOWAT = 1
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_SNDTIMEO = 0
[2005/01/19 13:27:10, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_RCVTIMEO = 0
[2005/01/19 13:27:10, 5] lib/gencache.c:gencache_init(59)
Opening cache file at /var/cache/samba/gencache.tdb
[2005/01/19 13:27:10, 5] libsmb/namecache.c:namecache_enable(58)
namecache_enable: enabling netbios namecache, timeout 660 seconds
[2005/01/19 13:27:10, 5] passdb/pdb_interface.c:make_pdb_context_list(602)
Trying to load: smbpasswd
[2005/01/19 13:27:10, 5] passdb/pdb_interface.c:smb_register_passdb(93)
Attempting to register passdb backend ldapsam
[2005/01/19 13:27:10, 5] passdb/pdb_interface.c:smb_register_passdb(106)
Successfully added passdb backend 'ldapsam'
[2005/01/19 13:27:10, 5] passdb/pdb_interface.c:smb_register_passdb(93)
Attempting to register passdb backend ldapsam_compat
[2005/01/19 13:27:10, 5] passdb/pdb_interface.c:smb_register_passdb(106)
Successfully added passdb backend 'ldapsam_compat'
[2005/01/19 13:27:10, 5] passdb/pdb_interface.c:smb_register_passdb(93)
Attempting to register passdb backend smbpasswd
[2005/01/19 13:27:10, 5] passdb/pdb_interface.c:smb_register_passdb(106)
Successfully added passdb backend 'smbpasswd'
[2005/01/19 13:27:10, 5] passdb/pdb_interface.c:smb_register_passdb(93)
Attempting to register passdb backend tdbsam
[2005/01/19 13:27:10, 5] passdb/pdb_interface.c:smb_register_passdb(106)
Successfully added passdb backend 'tdbsam'
[2005/01/19 13:27:10, 5] passdb/pdb_interface.c:smb_register_passdb(93)
Attempting to register passdb backend guest
[2005/01/19 13:27:10, 5] passdb/pdb_interface.c:smb_register_passdb(106)
Successfully added passdb backend 'guest'
[2005/01/19 13:27:10, 5] passdb/pdb_interface.c:make_pdb_methods_name(498)
Attempting to find an passdb backend to match smbpasswd (smbpasswd)
[2005/01/19 13:27:10, 5] passdb/pdb_interface.c:make_pdb_methods_name(519)
Found pdb backend smbpasswd
[2005/01/19 13:27:10, 5] passdb/pdb_interface.c:make_pdb_methods_name(522)
pdb backend smbpasswd has a valid init
[2005/01/19 13:27:10, 5] passdb/pdb_interface.c:make_pdb_methods_name(498)
Attempting to find an passdb backend to match guest (guest)
[2005/01/19 13:27:10, 5] passdb/pdb_interface.c:make_pdb_methods_name(519)
Found pdb backend guest
[2005/01/19 13:27:10, 5] passdb/pdb_interface.c:make_pdb_methods_name(522)
pdb backend guest has a valid init
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_KEEPALIVE = 1
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_REUSEADDR = 1
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_BROADCAST = 0
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option TCP_NODELAY = 1
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option IPTOS_LOWDELAY = 0
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option IPTOS_THROUGHPUT = 0
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_SNDBUF = 16384
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_RCVBUF = 16384
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_SNDLOWAT = 1
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_RCVLOWAT = 1
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_SNDTIMEO = 0
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_RCVTIMEO = 0
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_KEEPALIVE = 1
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_REUSEADDR = 1
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_BROADCAST = 0
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option TCP_NODELAY = 1
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option IPTOS_LOWDELAY = 0
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option IPTOS_THROUGHPUT = 0
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_SNDBUF = 16384
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_RCVBUF = 16384
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_SNDLOWAT = 1
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_RCVLOWAT = 1
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_SNDTIMEO = 0
[2005/01/19 13:27:13, 5] lib/util_sock.c:print_socket_options(105)
socket option SO_RCVTIMEO = 0
[2005/01/19 13:27:13, 5] lib/gencache.c:gencache_init(59)
Opening cache file at /var/cache/samba/gencache.tdb
[2005/01/19 13:27:13, 5] libsmb/namecache.c:namecache_enable(58)
namecache_enable: enabling netbios namecache, timeout 660 seconds
[2005/01/19 13:27:13, 5] passdb/pdb_interface.c:make_pdb_context_list(602)
Trying to load: smbpasswd
[2005/01/19 13:27:13, 5] passdb/pdb_interface.c:smb_register_passdb(93)
Attempting to register passdb backend ldapsam
[2005/01/19 13:27:13, 5] passdb/pdb_interface.c:smb_register_passdb(106)
Successfully added passdb backend 'ldapsam'
[2005/01/19 13:27:13, 5] passdb/pdb_interface.c:smb_register_passdb(93)
Attempting to register passdb backend ldapsam_compat
[2005/01/19 13:27:13, 5] passdb/pdb_interface.c:smb_register_passdb(106)
Successfully added passdb backend 'ldapsam_compat'
[2005/01/19 13:27:13, 5] passdb/pdb_interface.c:smb_register_passdb(93)
Attempting to register passdb backend smbpasswd
[2005/01/19 13:27:13, 5] passdb/pdb_interface.c:smb_register_passdb(106)
Successfully added passdb backend 'smbpasswd'
[2005/01/19 13:27:13, 5] passdb/pdb_interface.c:smb_register_passdb(93)
Attempting to register passdb backend tdbsam
[2005/01/19 13:27:13, 5] passdb/pdb_interface.c:smb_register_passdb(106)
Successfully added passdb backend 'tdbsam'
[2005/01/19 13:27:13, 5] passdb/pdb_interface.c:smb_register_passdb(93)
Attempting to register passdb backend guest
[2005/01/19 13:27:13, 5] passdb/pdb_interface.c:smb_register_passdb(106)
Successfully added passdb backend 'guest'
[2005/01/19 13:27:13, 5] passdb/pdb_interface.c:make_pdb_methods_name(498)
Attempting to find an passdb backend to match smbpasswd (smbpasswd)
[2005/01/19 13:27:13, 5] passdb/pdb_interface.c:make_pdb_methods_name(519)
Found pdb backend smbpasswd
[2005/01/19 13:27:13, 5] passdb/pdb_interface.c:make_pdb_methods_name(522)
pdb backend smbpasswd has a valid init
[2005/01/19 13:27:13, 5] passdb/pdb_interface.c:make_pdb_methods_name(498)
Attempting to find an passdb backend to match guest (guest)
[2005/01/19 13:27:13, 5] passdb/pdb_interface.c:make_pdb_methods_name(519)
Found pdb backend guest
[2005/01/19 13:27:13, 5] passdb/pdb_interface.c:make_pdb_methods_name(522)
pdb backend guest has a valid init
OK, now here is the log for the specific client:
[2005/01/19 13:27:06, 3] smbd/oplock.c:init_oplocks(1226)
open_oplock_ipc: opening loopback UDP socket.
[2005/01/19 13:27:06, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(303)
Linux kernel oplocks enabled
[2005/01/19 13:27:06, 3] smbd/oplock.c:init_oplocks(1257)
open_oplock ipc: pid = 595, global_oplock_port = 32976
[2005/01/19 13:27:06, 4] lib/time.c:get_serverzone(122)
Serverzone is 18000
[2005/01/19 13:27:06, 6] smbd/process.c:process_smb(889)
got message type 0x81 of len 0x44
[2005/01/19 13:27:06, 3] smbd/process.c:process_smb(890)
Transaction 0 of length 72
[2005/01/19 13:27:06, 2] smbd/reply.c:reply_special(105)
netbios connect: name1=DMC1.MCLEAN.HAR name2=LOCALHOST
[2005/01/19 13:27:06, 2] smbd/reply.c:reply_special(112)
netbios connect: local=dmc1.mclean.har remote=localhost, name type = 0
[2005/01/19 13:27:10, 6] param/loadparm.c:lp_file_list_changed(2656)
lp_file_list_changed()
file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Thu
Jan 13 17:44:17 2005
[2005/01/19 13:27:10, 3] smbd/oplock.c:init_oplocks(1226)
open_oplock_ipc: opening loopback UDP socket.
[2005/01/19 13:27:10, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(303)
Linux kernel oplocks enabled
[2005/01/19 13:27:10, 3] smbd/oplock.c:init_oplocks(1257)
open_oplock ipc: pid = 596, global_oplock_port = 32977
[2005/01/19 13:27:10, 4] lib/time.c:get_serverzone(122)
Serverzone is 18000
[2005/01/19 13:27:10, 6] smbd/process.c:process_smb(889)
got message type 0x81 of len 0x44
[2005/01/19 13:27:10, 3] smbd/process.c:process_smb(890)
Transaction 0 of length 72
[2005/01/19 13:27:10, 2] smbd/reply.c:reply_special(105)
netbios connect: name1=DMC1.MCLEAN.HAR name2=LOCALHOST
[2005/01/19 13:27:10, 2] smbd/reply.c:reply_special(112)
netbios connect: local=dmc1.mclean.har remote=localhost, name type = 0
[2005/01/19 13:27:13, 6] param/loadparm.c:lp_file_list_changed(2656)
lp_file_list_changed()
file /etc/samba/smb.conf -> /etc/samba/smb.conf last mod_time: Thu
Jan 13 17:44:17 2005
[2005/01/19 13:27:13, 3] smbd/oplock.c:init_oplocks(1226)
open_oplock_ipc: opening loopback UDP socket.
[2005/01/19 13:27:13, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(303)
Linux kernel oplocks enabled
[2005/01/19 13:27:13, 3] smbd/oplock.c:init_oplocks(1257)
open_oplock ipc: pid = 597, global_oplock_port = 32977
[2005/01/19 13:27:13, 4] lib/time.c:get_serverzone(122)
Serverzone is 18000
[2005/01/19 13:27:13, 6] smbd/process.c:process_smb(889)
got message type 0x81 of len 0x44
[2005/01/19 13:27:13, 3] smbd/process.c:process_smb(890)
Transaction 0 of length 72
[2005/01/19 13:27:13, 2] smbd/reply.c:reply_special(105)
netbios connect: name1=DMC1.MCLEAN.HAR name2=LOCALHOST
[2005/01/19 13:27:13, 2] smbd/reply.c:reply_special(112)
netbios connect: local=dmc1.mclean.har remote=localhost, name type = 0
Finally, here is smb.conf, minus the commented lines.
[global]
workgroup = RESEARCH
netbios name = DMC1
server string = Neuroregeneration Samba Server %v
log file = /var/log/samba/log.%m
max log size = 50
log level = 10
map to guest = bad user
security = user
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
username map = /etc/samba/smbusers
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
local master = yes
os level = 64
domain master = no
preferred master = yes
dns proxy = no
[NRL Folders]
comment = NRL Data Folders
browseable = yes
writeable = yes
path = /home/nrldata
create mask = 7777
directory mask = 7770
fstype = Samba
hide dot files = no
guest ok = no
Hope there's a clue in there somewhere. This configuration worked fine
on the old Samba server.
-Ed
:: Ed Holden
:: Administrator, Research Information Systems
:: McLean Hospital
:: Tel: (617) 855-2822
:: Web: http://research.mclean.harvard.edu/ris
Tomasz Chmielewski wrote:
> Ed Holden wrote:
>
>> Yeah, I've checked that. I have none of those settings enabled. I
>> did a diff between this smb.conf and the one on the old server, and
>> they are identical.
>
>
> shouldn't you at least specify hosts allow?
>
> it's getting late so my memory weakens... did you paste your config for
> that share here, and also samba logs when you try to browse this share
> (maybe with increased verbosity)?
>
>
> Tomek
Any information, including protected health information (PHI), transmitted
in this email is intended only for the person or entity to which it is
addressed and may contain information that is privileged, confidential and or
exempt from disclosure under applicable Federal or State law. Any review,
retransmission, dissemination or other use of or taking of any action in
reliance upon, protected health information (PHI) by persons or entities other
than the intended recipient is prohibited. If you received this email in error,
please contact the sender and delete the material from any computer.
More information about the samba
mailing list