Problem with NT account locking

Armin Amon aamon at mgm-edv.de
Thu Jan 14 12:44:50 GMT 1999


Hi,

we're running Samba 2.0.05beta on a Linux 2.0.36 box. We have problems
with authentification. Samba is running in security-mode 'SERVER'. About
20 users access this server. As a PDC we have NT 4.0 SP4.
Sometimes the PDC rejected the password:
NT Msg:

Logon Failure:
  Reason:  Unknown user name or bad password
  User Name: USERX
  Domain:  MGM
  Logon Type: 3
  Logon Process: KSecDD
  Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
  Workstation Name: \\MGM-FILE

About two times a day, this happens so often, that the NT User Account
is locked out:

User Account Locked Out:
  Target Account Name: USERX
  Target Account ID: S-1-5-21-2115134065-900400532-444732941-1330
  Caller Machine Name: \\MGM-FILE
  Caller User Name: SYSTEM
  Caller Domain: NT AUTHORITY
  Caller Logon ID: (0x0,0x3E7)

Then samba says:

[1999/01/14 10:26:54, 1] smbd/password.c:server_validate(1121)
  password server MGMS1 rejected the password
[1999/01/14 10:26:54, 0] smbd/reply.c:reply_sesssetup_and_X(771)
  NT Password did not match ! Defaulting to Lanman

This is OK, but why is the user locked out?
If you have any suggestions, please let me know.

Thanks Armin

PS: here is the global section of my smb.cnof

# Global parameters
        workgroup = MGM
        netbios name = MGM-FILE
        server string = MGM File Server
        interfaces = 192.168.0.7/255.255.254.0
        security = SERVER
        password server = MGMS1 MGMDB
        log file = /var/log/samba/samba-log.%m
        read bmpx = No
        nt smb support = No
        max mux = 500
        name resolve order = host lmhosts wins bcast
        change notify timeout = 120
        read size = 65536
        socket options = TCP_NODELAY
        load printers = No
        mangled stack = 100
        client code page = 437
        lm announce = False
        dns proxy = No
        create mask = 0755
        preserve case = No
        short preserve case = No
        share modes = No
        dos filetimes = Yes

-------------- next part --------------
A non-text attachment was scrubbed...
Name: vcard.vcf
Type: text/x-vcard
Size: 387 bytes
Desc: Card for Armin Amon
Url : http://lists.samba.org/archive/samba/attachments/19990114/c2c5b276/vcard.vcf


More information about the samba mailing list