cvs 980930 problem with NT password server

thwartedefforts at wonky.org thwartedefforts at wonky.org
Thu Oct 1 20:01:12 GMT 1998


Using source from 98-09-30, I get the following in the logs (debug level = 1, unfortunately I had to revert to a previous version because folks decided they wanted to use the system all of a sudden; if necessary, I'll get a better log file, let me know):

[1998/10/01 15:05:32, 1] smbd/password.c:server_cryptkey(976)
  MERCURY.REAC.COM rejected the session
[1998/10/01 15:05:34, 1] smbd/password.c:server_validate(1012)
  password server  is not connected
[1998/10/01 15:05:34, 0] smbd/reply.c:reply_sesssetup_and_X(655)
  NT Password did not match ! Defaulting to Lanman
[1998/10/01 15:05:39, 1] smbd/password.c:server_cryptkey(976)
  MERCURY.REAC.COM rejected the session
[1998/10/01 15:05:41, 1] smbd/password.c:server_validate(1012)
  password server  is not connected
[1998/10/01 15:05:41, 0] smbd/reply.c:reply_sesssetup_and_X(655)
  NT Password did not match ! Defaulting to Lanman
[1998/10/01 15:10:39, 1] smbd/password.c:server_cryptkey(976)
  MERCURY.REAC.COM rejected the session
[1998/10/01 15:10:41, 1] smbd/password.c:server_validate(1012)
  password server  is not connected
[1998/10/01 15:10:41, 0] smbd/reply.c:reply_sesssetup_and_X(655)
  NT Password did not match ! Defaulting to Lanman

The previous version I was using was from cvs 98-09-09 and worked perfectly.
Here are the revelant portions of my conf file, which did not change between
the versions:

        security = server
        password server = mercury.reac.com
        username map = /etc/smb.usermap
        workgroup = REAC
        encrypt passwords = yes

The exact setup is kind of interesting.  I have one samba server sitting on a Linux RH5.1 box named jupiter.  It is net bios aliased as uranus also.  Using includes, if the machine is accessed as uranus, then it uses the security = server and workgroup = REAC as above.  If it's accessed as jupiter, it's a domain controller for the domain REACNET (this has caused some oddities with browsing, but that's far down on my list of things to worry about :) ).  Essentially, uranus uses a password server, and jupiter does password auth (and domain logons) itself.  This strangeness is to ease the transition to a pure samba controlled domain (does anyone else have something similar setup?).

With the cvs 98-09-30, when NT clients (and smbclient) access uranus, it always outputs, into the log, the log clip from above and access through the uranus alias is always denied.  I'm using the same command line and options when using smbclient with the cvs 98-09-09 build and the cvs 98-09-30 build.  

As jupiter, it's fine.

All the NT machines, the clients and the NT Server mercury, are SP3.  After reverting to the 09-09 code, it goes back to working.

Event log on mercury shows successful logins from jupiter when I run smbclient, but it also shows failed logons (could be because smbclient is trying different kinds of mixed case) this is the same for both versions of the code.

Seeing as how it's already a day later though, this may be fixed, so I'll download and give another try. :)

I notice that some people say they are using version 2.0.0-alpha8 or something like that of samba.  Where is that 8 coming from?  I'm not all that well versed in cvs, so I may be missing some label or something in the download.

Andy Bakun.
thwartedefforts at wonky.org


More information about the samba-ntdom mailing list