FW: smbc_open error

Fri Aug 6 13:36:54 MDT 2010

I do have tcpdump files. Will that help? I am using libsmbclient. 

The new target server is Windows 2008 and the old one that does work as WORKGROUP/token_administrator is Windows 2003. 

Thanks for the info...I will look through it. 

Thanks,
Liz

-----Original Message-----
From: Christopher R. Hertel [mailto:crh at ubiqx.mn.org] 
Sent: Friday, August 06, 2010 2:07 PM
To: Rechtien, Elizabeth J
Cc: samba-technical at lists.samba.org
Subject: Re: FW: smbc_open error

Rechtien, Elizabeth J wrote:
> Can you give me some help on the question below?
> 
> When using Samba from a C program to an NT server I give it the login token_administrator and it logs in as WORKGROUP/token_administrator

Is the target server actually a Windows NT 4 system?

> and then I go to a 2008 server I give it token_administrator and it attempts to login as anonymous.
> Does the smb.conf have anything to do with that? See below...

If you are trying to connect to a server then you are using an SMB client,
probably calling libsmbclient from your C program or possibly calling out to
the smbclient program.

I'll assume for now that you're calling libsmbclient...

When libsmbclient is talking to an NT server, the server will not negotiate
"extended security", because NT doesn't support that feature.  W2K and above
does support extended security.  Right away there are different security
protocols in play.  There may also be different authentication requirements
enforced by the Windows2008.

I don't know why, in particular, libsmbclient would fall back to anonymous
authentication.  Do you have packet captures?

I can tell you that there is a known issue with Windows2008 and older-style
authentication methods:

  http://support.microsoft.com/kb/957441/

Hope that helps.

Chris -)-----

> Thanks,
> 
> Liz Rechtien
> Lead Integration Analyst
> St. Luke's Hospital
> Phone:  314-576-2469
> Fax:  314-576-2355
> Email: <mailto:elizabeth.rechtien at stlukes-stl.com>
> 
> 
> From: derrell.lipman at gmail.com [mailto:derrell.lipman at gmail.com] On Behalf Of Derrell Lipman
> Sent: Wednesday, August 04, 2010 8:26 PM
> To: Rechtien, Elizabeth J
> Cc: Penn, Terry
> Subject: Re: smbc_open error
> 
> On Wed, Aug 4, 2010 at 18:39, Rechtien, Elizabeth J <Elizabeth.Rechtien at stlukes-stl.com<mailto:Elizabeth.Rechtien at stlukes-stl.com>> wrote:
> How does the smb.conf fit in?  Something is putting the Workgroup/ before the token_administrator login for the .17 login. Does this have anything to do with that? Is there some setting for the Windows 2008 servers?
> 
> ;======================= Global Settings =====================================
> [global]
> 
> ; workgroup = NT-Domain-Name or Workgroup-Name, eg: REDHAT4
> ;   workgroup = Integration
>    workgroup = UNITY
> 
> This and related questions would best be sent back to the mailing list. I don't think there's any difference from the user perspective when talking to Win2008, but I'm not an expert in that area.
> 
> Derrell
> 
> DISCLAIMER:  The contents of this e-mail, including any attachments, contain information which may be confidential, legally privileged, proprietary in nature, or otherwise protected by law from disclosure, and is solely for the use of the intended recipient(s). If you are not the intended recipient, any use, disclosure or copying of this e-mail, including any attachments, is unauthorized and strictly prohibited. If you have received this e-mail in error, please notify us via return e-mail and immediately delete all copies of it from your system. Any opinions either expressed or implied in this e-mail and all attachments, are those of its author only, and do not necessarily reflect those of St. Luke's Hospital.

-- 
"Implementing CIFS - the Common Internet FileSystem" ISBN: 013047116X
Samba Team -- http://www.samba.org/     -)-----   Christopher R. Hertel
jCIFS Team -- http://jcifs.samba.org/   -)-----   ubiqx development, uninq.
ubiqx Team -- http://www.ubiqx.org/     -)-----   crh at ubiqx.mn.org
OnLineBook -- http://ubiqx.org/cifs/    -)-----   crh at ubiqx.org
DISCLAIMER:  The contents of this e-mail, including any attachments, contain information which may be confidential, legally privileged, proprietary in nature, or otherwise protected by law from disclosure, and is solely for the use of the intended recipient(s). If you are not the intended recipient, any use, disclosure or copying of this e-mail, including any attachments, is unauthorized and strictly prohibited. If you have received this e-mail in error, please notify us via return e-mail and immediately delete all copies of it from your system. Any opinions either expressed or implied in this e-mail and all attachments, are those of its author only, and do not necessarily reflect those of St. Luke's Hospital.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smb_output.17
Type: application/octet-stream
Size: 1292622 bytes
Desc: smb_output.17
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20100806/fd46ef60/attachment-0002.obj>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smb_output.6
Type: application/octet-stream
Size: 275988 bytes
Desc: smb_output.6
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20100806/fd46ef60/attachment-0003.obj>