Mail delivery failed: returning message to sender

[Mail Delivery System]

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to all of its recipients. The
following address(es) failed:

  tc-wedel.de!monscheu at s023250.tk.tc-wedel.de:
    SMTP error from remote mailer after RCPT TO:
    <tc-wedel.de!monscheu at s023250.tk.tc-wedel.de>:
    host 195.222.202.30 [195.222.202.30]:
    550 relaying to <tc-wedel.de!monscheu at s023250.tk.tc-wedel.de> prohibited by administrator

------ This is a copy of the message, including all the headers. ------

Return-path: <samba-ntdom at samba.org>
Received: from zwitter-nt.hamburg.pop.de ([192.168.1.3] helo=smtpshield.pop.de)
	by virus.pop.de with smtp (Exim 3.02 #1)
	id 13QtKA-0000jX-00
	for tc-wedel.de!monscheu at s023250.tk.tc-wedel.de; Mon, 21 Aug 2000 17:17:18 +0200
Received: FROM virus.pop.de BY smtpshield.pop.de ; Fri Aug 21 17:19:07 1998 +0100
Received: from [195.222.210.68] (helo=uucp.hamburg.pop.de)
	by virus.pop.de with esmtp (Exim 3.02 #1)
	id 13QtK9-0000jV-00
	for tc-wedel.de!monscheu at s023250.tk.tc-wedel.de; Mon, 21 Aug 2000 17:17:17 +0200
Received: from [203.17.0.92] (helo=samba.org)
	by uucp.hamburg.pop.de with esmtp (Exim 2.054 #1)
	id 13QtK3-0000bj-00
	for tc-wedel.de!monscheu at s023250.tk.tc-wedel.de; Mon, 21 Aug 2000 17:17:13 +0200
Received: from localhost ([127.0.0.1]:12801 "HELO ") by samba.org with SMTP
	id <S27794185AbQHUPSu>; Tue, 22 Aug 2000 01:18:50 +1000
Message-Id: <CF113269FDACD311AA8C009027DE9D04030751DF at conmsx01.conway.acxiom.com>
Errors-To: listproc-errors at samba.org
Reply-To: cevans at acxiom.com
Originator: samba-ntdom at samba.org
Sender: samba-ntdom at samba.org
Precedence: bulk
From:   cevans - Chris Evans <cevans at acxiom.com>
To:     Multiple recipients of list SAMBA-NTDOM <samba-ntdom at samba.org>
Subject: NT4 and SAMBA - User Account being locked out
MIME-Version: 1.0
Content-Type: text/plain;
	charset="iso-8859-1"
X-Listprocessor-Version: 6.0d -- ListProcessor by Anastasios Kotsikonas
X-URL:  http://lists.samba.org/
X-Comment: Discussion of NT domain controller support in Samba
X-Mailer: Internet Mail Service (5.5.2650.21)
Date:   Tue, 22 Aug 2000 01:18:50 +1000

Hello all, I have a situation that I hope one of you UNIX experts can help
with. We have an NT4 domain with the majority of clients and servers NT4,
But we do have several Unix servers running SAMBA, all different versions.
One of our NT Admin user accounts that we use for starting services etc..
keeps getting locked out repeatedly. When I look at our NT event logs on the
NT4 PDC I see several events claiming a bad password attempt on this Service
account from these Unix boxes. What's weird is that the first event will be
a bad password attempt and the second will be a successful logon attempt. I
have verified that these servers are using the correct password server. Has
anyone seen this before? Thanks for any help I receive am attaching the
events. 

 Successful Logon:
 	User Name:	SERVICE
 	Domain:		CONWAY
 	Logon ID:		(0x0,0x66B69F8)
 	Logon Type:	3
 	Logon Process:	KSecDD
 	Authentication Package:	MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
 	Workstation Name:	\\MENTOR 

Logon Failure:
 	Reason:		Unknown user name or bad password
 	User Name:	SERVICE
 	Domain:		
 	Logon Type:	3
 	Logon Process:	KSecDD
 	Authentication Package:	MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
 	Workstation Name:	\\MENTOR