rejected passwords and locked domain accounts

[Kevin K. Sochacki]

Hi all,

I recently loaded Samba 2.0.3 on AIX 4.3.2, everything seem to be
working fine except that every now and then a user will be prompted that
the username/password was incorrect. After trying to enter the username
and password their domain accounts are locked.  Up until this point they
were connecting with out any problems.  They will have their account
reset and everything is ok again for a while.  Below is an extract of
one of the logs and smb.conf file:

[global]

   debuglevel = 3
   workgroup = FPE01
   server string = Samba Server
   hosts allow = xxx.xx.32. xxx.xx.35. xxx.xx.36. xxx.xx.37. xxx.xx.41.
xxx.xx.44.
   hosts deny = xxx.xx. xxx.xx.36.6 xxx.xx.32.222 xxx.xx.32.134
xxx.xx.33.45 xxx.xx.33.55 xxx.xx.33.68
   load printers = no
   getwd cache = yes
   read prediction = yes
   remote browse sync = xxx.xx.255.255
   remote announce = xxx.xx.32.255/FPE01 xxx.xx.35.255/FPE01
xxx.xx.36.255/FPE01 xxx.xx.37.255/FPE01 xxx.xx.41.255/FPE01
xxx.xx.44.255/FPE01
   socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE
   keep alive = 900
   log file = /usr/local/samba/var/log.%m
   max log size = 150
   security = server
   password server = FPE01PDC01
   encrypt passwords = yes
   interfaces = xxx.xx.32.25/255.255.240.0
   local master = no
   os level = 1
   domain master = no
   preferred master = no
   wins server = xxx.xx.37.12
   dns proxy = no

#=================== Share Definitions ===================
[homes]
   directory mode = 750
   create mode = 640
   comment = Home Directories
   browseable = no
   writable = yes

[root]
   create mode = 750
   comment = Public Stuff
   path = /
   public = no
   writable = yes
   printable = no

[1999/06/08 11:22:14, 3] smbd/negprot.c:(332)
  Requested protocol [Windows for Workgroups 3.1a]
[1999/06/08 11:22:14, 3] smbd/negprot.c:(332)
  Requested protocol [NT LM 0.12]
[1999/06/08 11:22:14, 3] libsmb/namequery.c:(546)
  resolve_name: Attempting lmhosts lookup for name FPE01PDC01<0x20>
[1999/06/08 11:22:14, 3] libsmb/namequery.c:(574)
  resolve_name: Attempting host lookup for name FPE01PDC01<0x20>
[1999/06/08 11:22:14, 3] lib/util_sock.c:(715)
  Connecting to 159.70.32.211 at port 139
[1999/06/08 11:22:15, 3] smbd/password.c:(996)
  connected to password server FPE01PDC01
[1999/06/08 11:22:15, 3] smbd/password.c:(1024)
  got session
[1999/06/08 11:22:15, 3] smbd/password.c:(1039)
  password server OK
[1999/06/08 11:22:15, 3] smbd/negprot.c:(185)
  using password server validation
[1999/06/08 11:22:15, 3] smbd/negprot.c:(409)
  Selected protocol NT LM 0.12
[1999/06/08 11:22:15, 3] smbd/process.c:(565)
  Transaction 2 of length 160
[1999/06/08 11:22:15, 3] smbd/process.c:(402)
  switch message SMBsesssetupX (pid 11476)
[1999/06/08 11:22:15, 3] smbd/reply.c:(675)
  Domain=[FPE01]  NativeOS=[Windows 4.0] NativeLanMan=[Windows 4.0]
[1999/06/08 11:22:15, 3] smbd/reply.c:(679)
  sesssetupX:name=[CHMINK]
[1999/06/08 11:22:15, 1] smbd/password.c:(1127)
  password server FPE01PDC01 rejected the password
[1999/06/08 11:22:15, 0] passdb/smbpass.c:(50)
  startsmbfilepwent: unable to open file
/usr/local/samba/private/smbpasswd
[1999/06/08 11:22:15, 0] passdb/passdb.c:(147)
  unable to open smb password database.
[1999/06/08 11:22:15, 1] smbd/password.c:(500)
  Couldn't find user 'chmink' in smb_passwd file.
[1999/06/08 11:22:15, 3] smbd/error.c:(138)
  error packet at line 781 cmd=115 (SMBsesssetupX) eclass=2 ecode=2
[1999/06/08 11:22:15, 3] smbd/error.c:(143)
  error string = No such file or directory
[1999/06/08 11:22:15, 3] smbd/process.c:(755)
  end of file from client
[1999/06/08 11:22:15, 2] smbd/server.c:(406)
  Closing connections
[1999/06/08 11:22:15, 3] smbd/server.c:(431)
  Server exit (normal exit)




TIA,


-- 
(...Later..:)
         _/_/_/_/_/_/_/_/_/_/_/_/_/_/
        _/                        _/ Exxon Research & Engineering
       _/ _/_/_/ _/_/     _/_/_/ _/ Kevin K. Sochacki
      _/ _/     _/  _/   _/     _/ ICS CB050 (908) 730-2911
     _/ _/_/_/ _/_/   & _/_/_/ _/ mailto:kksocha at erenj.com 
    _/ _/     _/ _/    _/     _/ PERSONAL 
   _/ _/_/_/ _/  _/   _/_/_/ _/ mailto:kks at superlink.net 
  _/                        _/ http://mars.superlink.net/kks
 _/_/_/_/_/_/_/_/_/_/_/_/_/_/