More than one password server?

[Luke Kenneth Casson Leighton]

On 7 Nov 1997, Matt Foster wrote:

> 
> OkDokie
> 
> I guess you meant password.c :)

um... yes!
 
> Here we go, put the pw server for the domain I'm not in first.
> And don't get authenticated :(

right.  the reason is because the loop in server_cryptkey() is checking 
for a "valid password server", not a "valid password server and also 
checking the password".

so, some more mods are needed.  namely, to combine the server_cryptkey() 
and server_validate() functionality in some simple way.

matt, can you send a detailed report to samba-bugs at samba.anu.edu.au with 
a request to this effect?  even better, send in a patch :-)

lukes



> Here is the debug from log.smb
> (I've blanked IP addresses)
> 
> netbios connect: name1=CHARITY          name2=TWILIGHT       
> 11/07/97 16:23:38 Transaction 1 of length 174
> switch message SMBnegprot (pid 6179)
> Requested protocol [PC NETWORK PROGRAM 1.0]
> Requested protocol [XENIX CORE]
> Requested protocol [MICROSOFT NETWORKS 1.03]
> Requested protocol [LANMAN1.0]
> Requested protocol [Windows for Workgroups 3.1a]
> Requested protocol [LM1.2X002]
> Requested protocol [LANMAN2.1]
> Requested protocol [NT LM 0.12]
> server_cryptkey: trying pw server TCC-DL01 <- The debug code added
> Connecting to X.X.X.X at port 139
> connected to password server tcc-dl01
> got session
> password server OK
> using password server validation
> Selected protocol NT LM 0.12
> 11/07/97 16:23:38 Transaction 2 of length 196
> switch message SMBsesssetupX (pid 6179)
> Domain=[DLV-MASTER]  NativeOS=[Windows NT 1381] NativeLanMan=[]
> sesssetupX:name=[fm2503]
> password server TCC-DL01 rejected the password
> Checking password for user fm2503 (l=24)
> 11/07/97 16:23:41 error packet at line 537 cmd=115 (SMBsesssetupX) eclass=2 ecod
> e=2
> end of file from client
> Closing connections
> 
> -----Original Message-----
> From:   lkcl at switchboard.net 
> Sent:   Friday, November 07, 1997 2:51 PM
> To:     Matt Foster
> Cc:     samba at samba.anu.edu.au
> Subject:        Re: More than one password server?
> 
> 
> ok, try adding some debug info inside server.c:server_cryptkey(), and see
> if it actually tries both password servers, ok?
> 
> like this:
> 
> @server.c some_context_diff_stuff:-)
> 
>   standard_sub_basic(desthost);
>   strupper(desthost);
> 
> + DEBUG(4,("server_cryptkey: attempt connection to password server %s\n",
>           desthost));
> 
>   dest_ip = *interpret_addr2(desthost);
> 
> 
> <a href="mailto:lkcl at switchboard.net"  > Luke Kenneth Casson Leighton </a>
> <a href="http://mailhost.cb1.com/~lkcl"> Lynx2.7-friendly Home Page   </a>
> <br><b> "Apply the Laws of Nature to your environment because your
>          environment applies the Laws of Nature to you"               </b>
> 

<a href="mailto:lkcl at switchboard.net"  > Luke Kenneth Casson Leighton </a>
<a href="http://mailhost.cb1.com/~lkcl"> Lynx2.7-friendly Home Page   </a>
<br><b> "Apply the Laws of Nature to your environment because your
         environment applies the Laws of Nature to you"               </b>