Bug in DOMAIN authentication

Selcuk Ozturk sozturk at fdch.com
Fri Jan 14 13:54:26 GMT 2000


I think I found a bug in Samba v2.0.6. Here's what happened:

I have a Samba 2.0.6 running on Linux 2.2.10 (Suse 6.2). I have
'security' set to 'DOMAIN' and have three NT servers listed as
password servers. A few days ago, a program running on the
first listed NT server ran wild and consumed all of virtual memory
on that server. After that, users could not login to the Samba 
server anymore. Samba, instead of trying the second password
server, was giving up when the first one failed. The typical
error messages in the logs were like these:

[2000/01/11 06:37:57, 0] rpc_client/cli_pipe.c:rpc_api_pipe(346)
  cli_pipe: return critical error. Error was ERRDOS - ERRbadpipe (Pipe
invalid.)
[2000/01/11 06:37:57, 0] rpc_client/cli_pipe.c:rpc_api_pipe(346)
  cli_pipe: return critical error. Error was ERRDOS - ERRbadpipe (Pipe
invalid.)
[2000/01/11 06:37:57, 0] rpc_client/cli_login.c:cli_nt_setup_creds(49)
  cli_nt_setup_creds: request challenge failed
[2000/01/11 06:37:57, 0] smbd/password.c:domain_client_validate(1413)
  domain_client_validate: unable to setup the PDC credentials to machine
FDCH_NT
1. Error was : ERRDOS - ERRbadpipe (Pipe invalid.).
[2000/01/11 06:37:57, 0] passdb/smbpass.c:startsmbfilepwent(50)
  startsmbfilepwent: unable to open file
/usr/local/samba/private/smbpasswd
[2000/01/11 06:37:57, 0] passdb/passdb.c:iterate_getsmbpwnam(149)
  unable to open smb password database.
[2000/01/11 06:37:57, 1] smbd/password.c:pass_check_smb(505)
  Couldn't find user 'cnnvidcap1' in smb_passwd file.
[2000/01/11 06:37:57, 0] passdb/smbpass.c:startsmbfilepwent(50)
  startsmbfilepwent: unable to open file
/usr/local/samba/private/smbpasswd
[2000/01/11 06:37:57, 0] passdb/passdb.c:iterate_getsmbpwnam(149)
  unable to open smb password database.
[2000/01/11 06:37:57, 1] smbd/password.c:pass_check_smb(505)
  Couldn't find user 'cnnvidcap1' in smb_passwd file.
[2000/01/11 06:37:57, 1] smbd/reply.c:reply_sesssetup_and_X(909)
  Rejecting user 'cnnvidcap1': authentication failed


Regards,
Selcuk

<=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=>
< Selcuk Ozturk               <+>                                   >
< MIS Deputy Director         <+>                                   >
<=============================<#>===================================>
< Phone  : (301)883-2482      <+>    FDCH                           >
< Fax    : (301)883-9754      <+>    1100 Mercantile Lane, Ste 119  >
< E-mail : sozturk at fdch.com   <+>    Largo, MD 20774                >
<=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=><=>




More information about the samba-technical mailing list