Pls. HELP : v1.9.18p10 much more robust with security=server than v2.04

CAD-Superuser cad at nbgm.siemens.de
Wed Jun 16 18:52:45 GMT 1999


Hello samba-list-reader,

why is samba v2.0x worse than v1.9.18p10 with respect to
NT-authentification with security=server ?

I have exactly the same smb.conf on two servers, one running samba v2.04b
and the other running samba v1.9.18p10 (Sun Solaris2.6).

With v1.9.18p10 everything works fine since months. 

On the server running v2.0x in about 10% of all NT-authentification-tries
(with net use m: \\sambaserver_v2.0\sharename, win95 and NTSP3/4)
my users get a 'unvalid password'-message. In the samba-logfile I see

'password server NTPDC rejected the password'

That appears a few times in the logfile. That is not always a problem,
but in about 10% of all cases.

Very ugly is the fact, that iif this happened after a few password-tries
the NT-useraccount is locked out. Than I have to phone the NT-admins to
unlock the account, the samba-user cries ("Where are my datas!"), etc.

I use 'security=server' and NTPDC is the NT-server, which validates the
password. The users can login to the network with the original
NT-session without problems.

With samba v1.9.18p10 that was never a problem. I switched the samba-versions
between the two servers, but nothing changed (no hardware-dependencies).
The server with v2.0x has always the problem.

Maybe there are some network-latencies, but it seems to me, that v1.9.18p10 
is much more robust against that.

I think 'security=domain' could solve the problem, but I am not the NT-domain-
admininstrator, so I cannot make my samba-server a member of my working-domain.
My NT-admin doesn't like that. 

Question : Are there some smb.conf-parameters or timeout-constants in the C-sources
           which gives me the same password-validation-behaviour in v2.0 like
	   in v1.9.18p10 ?

	   Why has the 'security=server'-mechanism changed in such a worse way ?
           
	   What can I do beside setting 'security=domain' ?


	   Please help !!!!!


Thanks a lot in advance to all who will answer !


##################################################################
Peter Pellkofer
Siemens AG, A&D GT 23
Gleiwitzer Str. 555
90475 Nuernberg-Moorenbrunn
peter.pellkofer at nbgm.siemens.de
Tel. 0911/895-3021
Fax 0911/895-3762
PGP-Fingerprint : D4 B6 B6 33 D8 81 D4 47 B5 53 B4 1D D2 D4 07 01
##################################################################



More information about the samba mailing list