samba 2.0.6 breaks domain validation (for me)

[reinout.wijnveen at philips.com]

Hi,

Recently i moved from samba 2.0.5a to Samba 2.0.6 on 4 machines. Samba 2.0.5a ran quite smooth except for oplocking problems, so i decided to upgrade.
I compiled both releases myself and used the same ./configure options both times (but i compiled on different machines: v 2.0.5a was compiled on a HP 9000/715/50, 2.0.6 was compiled on a  HP 9000/800/K360)
I used binutils 2.9.1 and gcc 2.8.1 on HP-UX 10.20.

One machine is running fine, three others are producing error messages like those below. The account referenced (support) is defined in a resource domain, while the user's accounts are created in an account domain. From a users point of view everything 
works fine. As we do all validation against NT we do not have any accounts or passwords defined on samba, we only have synchronized all NT and Unix usernames.

At first i thought the machine account's password was out out of sync so i removed the machine account, created a new one and rejoined the domain. But that interpretation doesn't seem to be correct and the message that really worries me is this: "auth2 
challenge failed".

Can someone advise me in what to try/where to look next?

Thanks!


Excerpt from the logs (samba):

[2000/02/15 07:29:58, 0] rpc_client/cli_netlogon.c:cli_net_auth2(160)
  cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
[2000/02/15 07:29:58, 0] rpc_client/cli_login.c:cli_nt_setup_creds(72)
  cli_nt_setup_creds: auth2 challenge failed
[2000/02/15 07:29:58, 0] smbd/password.c:domain_client_validate(1413)
  domain_client_validate: unable to setup the PDC credentials to machine TESLA. Error was : NT_STATUS_ACCESS_DENIED.
[2000/02/15 07:29:58, 0] passdb/smbpass.c:startsmbfilepwent(50)
  startsmbfilepwent: unable to open file /opt/samba/private/smbpasswd
[2000/02/15 07:29:58, 0] passdb/passdb.c:iterate_getsmbpwnam(149)
  unable to open smb password database.
[2000/02/15 07:29:58, 1] smbd/password.c:pass_check_smb(505)
  Couldn't find user 'support' in smb_passwd file.
[2000/02/15 07:29:58, 0] passdb/smbpass.c:startsmbfilepwent(50)
  startsmbfilepwent: unable to open file /opt/samba/private/smbpasswd
[2000/02/15 07:29:58, 0] passdb/passdb.c:iterate_getsmbpwnam(149)
  unable to open smb password database.
[2000/02/15 07:29:58, 1] smbd/password.c:pass_check_smb(505)
  Couldn't find user 'support' in smb_passwd file.
[2000/02/15 07:29:58, 1] smbd/reply.c:reply_sesssetup_and_X(909)
  Rejecting user 'support': authentication failed
[2000/02/15 07:29:59, 0] rpc_client/cli_netlogon.c:cli_net_auth2(160)
  cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
[2000/02/15 07:29:59, 0] rpc_client/cli_login.c:cli_nt_setup_creds(72)
  cli_nt_setup_creds: auth2 challenge failed
[2000/02/15 07:29:59, 0] smbd/password.c:domain_client_validate(1413)
  domain_client_validate: unable to setup the PDC credentials to machine TESLA. Error was : NT_STATUS_ACCESS_DENIED.
[2000/02/15 07:29:59, 0] passdb/smbpass.c:startsmbfilepwent(50)
  startsmbfilepwent: unable to open file /opt/samba/private/smbpasswd
[2000/02/15 07:29:59, 0] passdb/passdb.c:iterate_getsmbpwnam(149)
  unable to open smb password database.
[2000/02/15 07:29:59, 1] smbd/password.c:pass_check_smb(505)
  Couldn't find user 'support' in smb_passwd file.
[2000/02/15 07:29:59, 0] passdb/smbpass.c:startsmbfilepwent(50)
  startsmbfilepwent: unable to open file /opt/samba/private/smbpasswd
[2000/02/15 07:29:59, 0] passdb/passdb.c:iterate_getsmbpwnam(149)
  unable to open smb password database.
[2000/02/15 07:29:59, 1] smbd/password.c:pass_check_smb(505)
  Couldn't find user 'support' in smb_passwd file.
[2000/02/15 07:29:59, 1] smbd/reply.c:reply_sesssetup_and_X(909)
  Rejecting user 'support': authentication failed

NT logs this:

The session setup from the computer CICI06 failed to authenticate. The name of the account referenced in the security database is CICI06$.  The following error occurred: 
Access is denied.  




Regards,
Reinout Wijnveen

"All those who believe in psychokinesis raise my hand"

ICT-N/Philips Semiconductors Nijmegen
Address: AC 0.039, Gerstweg 2, 6534 AE Nijmegen