NT PDC as password server

[Alexander Werling]

Hello everybody,

I would like to set up our Samba server in a manner
that it does username/password checking against
a NT PDC on our network.

I tried the following in smb.conf:

[global]
          workgroup = DKFZ   # this is also the name of the domain the users are
in

          server string = Samba Server
          security = SERVER[1999/06/11 14:36:49, 3]
smbd/password.c:server_cryptkey(1000)

          encrypt passwords = Yes
          password server = ntpds
          username map = /usr/local/samba/lib/users.map
          socket options = TCP_NODELAY
          dns proxy = No
          hosts allow =  XXX.XXX.XXX.XXX

Unfortunately, username/passwd authentication fails although
the connection with the PDC has been estalished.

Has anybody in the Samba community done this before and could give some tips ?

thanks in advance
Alex




A level 3 debug log gives the following output:


  connected to password server NTPDS
[1999/06/11 14:36:49, 3] smbd/password.c:server_cryptkey(1028)
  got session
[1999/06/11 14:36:49, 3] smbd/password.c:server_cryptkey(1043)
  password server OK
[1999/06/11 14:36:49, 3] smbd/negprot.c:reply_nt1(185)
  using password server validation

[1999/06/11 14:36:49, 3] smbd/negprot.c:reply_negprot(409)
  Selected protocol NT LANMAN 1.0
[1999/06/11 14:36:52, 3] smbd/process.c:process_smb(615)
  Transaction 2 of length 137
[1999/06/11 14:36:52, 3] smbd/process.c:switch_message(448)
  switch message SMBsesssetupX (pid 6693)
[1999/06/11 14:36:52, 3] smbd/reply.c:reply_sesssetup_and_X(721)
  Domain=[DKFZ]  NativeOS=[Unix] NativeLanMan=[Samba]
[1999/06/11 14:36:52, 3] smbd/reply.c:reply_sesssetup_and_X(725)
  sesssetupX:name=[WERLING]
[1999/06/11 14:36:58, 1] smbd/password.c:server_validate(1131)
  password server NTPDS rejected the password