[Samba] samba 3.0.24 works - samba 3.0.25 fails

[Michael Folsom]

Folks:

I've got several systems attached to a 2003 domain where we use
kerberos to authenticate.

When I upgraded a system to the latest greatest samba things stopped
working.  Just to find where it happened in the different versions of
samba I downloaded, built, & ran 3.0.23d to 3.0.25c using the same
smb.conf file.  Turns out the 2.0.23d and 3.0.24 works but from 3.0.25
on it fails.  When it fails it prompts users to login and the system
isn't in the proper domain any more so not sure where the issue is.
I've looked at the 25 change log but frankly don't see anything
obvious that would have caused this......

Here's the globals section of my smb.conf file:

[global]
workgroup = XYZ
interfaces = 1xx.2xx.9.5/24
comment = Timmy, Samba Server version %v
#status = yes
browseable = yes
guest account = nobody
invalid users = root, daemon
hosts allow = 1xx.2xx. 127.
lock directory = /var/lock/subsys/smb
log file = /var/log/samba/%m.log
syslog = 1
getwd cache = yes
socket options = TCP_NODELAY
keep alive = 3600
dead time = 30
locking = yes
security = server
#
ntlm auth = no
lanman auth = no
client lanmn auth = no
client ntlmv2 auth = yes
#
password server = xxxxxx.yyy.zzzzz.org
local master = no
os level = 33
domain master = no
preferred master = no
wins support = no
wins server = 1xx.2xx.181.100
dns proxy = no
#client code page = 437
netbios aliases = timmy

-----------------------------------------------------------------------------------------------
>From the log files..........
/var/log/samba/winxpclient.log file:

....when it works ......
[2008/01/16 17:21:13, 1] smbd/service.c:make_connection_snum(950)
  jarosa (1xx.2xx.9.58) connect to service MWFOLSOM initially as user
mwfolsom (uid=4231, gid=100) (pid 2914)
[2008/01/16 17:21:39, 1] smbd/service.c:close_cnum(1150)
  jarosa (1xx.2xx.9.58) closed connection to service MWFOLSOM
....when it fails .....
[2008/01/16 17:35:47, 1] auth/auth_server.c:check_smbserver_security(362)
  password server XXXXXX.YYY.ZZZZZZ.ORG rejected the password:
NT_STATUS_LOGON_FAILURE
[2008/01/16 17:35:47, 1] auth/auth_server.c:check_smbserver_security(362)
  password server XXXXXX.YYY.ZZZZZZ.ORG rejected the password:
NT_STATUS_LOGON_FAILURE
[2008/01/16 17:35:50, 1] auth/auth_server.c:check_smbserver_security(362)
  password server XXXXXX.YYY.ZZZZZZ.ORG rejected the password:
NT_STATUS_LOGON_FAILURE
[2008/01/16 17:35:50, 1] auth/auth_server.c:check_smbserver_security(362)
  password server XXXXXX.YYY.ZZZZZZ.ORG rejected the password:
NT_STATUS_LOGON_FAILURE
[2008/01/16 17:35:50, 1] auth/auth_server.c:check_smbserver_security(362)
  password server XXXXXX.YYY.ZZZZZZ.ORG rejected the password:
NT_STATUS_LOGON_FAILURE
[2008/01/16 17:35:50, 1] auth/auth_server.c:check_smbserver_security(362)
  password server XXXXXX.YYY.ZZZZZZ.ORG rejected the password:
NT_STATUS_LOGON_FAILURE
[2008/01/16 17:35:50, 1] auth/auth_server.c:check_smbserver_security(362)
  password server XXXXXX.YYY.ZZZZZZ.ORG rejected the password:
NT_STATUS_LOGON_FAILURE
[2008/01/16 17:35:50, 1] auth/auth_server.c:check_smbserver_security(362)
  password server XXXXXX.YYY.ZZZZZZ.ORG rejected the password:
NT_STATUS_ACCOUNT_LOCKED_OUT
[2008/01/16 17:36:00, 1] auth/auth_server.c:check_smbserver_security(362)
  password server XXXXXX.YYY.ZZZZZZ.ORG rejected the password:
NT_STATUS_ACCOUNT_LOCKED_OUT
[2008/01/16 17:36:00, 1] auth/auth_server.c:check_smbserver_security(362)
  password server XXXXXX.YYY.ZZZZZZ.ORG rejected the password:
NT_STATUS_ACCOUNT_LOCKED_OUT

/var/log/smbd.log
[2008/01/16 17:34:39, 0] smbd/server.c:main(986)
  standard input is not a socket, assuming -D option
[2008/01/16 17:34:40, 0] passdb/pdb_smbpasswd.c:startsmbfilepwent(241)
  startsmbfilepwent_internal: file /usr/local/samba/private/smbpasswd
did not exist. File successfully created.


Any and all help much appreciated!



Michael