Samba Returns Access Denied

[Rakesh Shah]

I have Linux Server 7.0 running Samba with 1 nic ip 199.168.1.2 and the 
Win2k server with 2 Nic one having the DHCP ip from the DSL and other being 
my internal 199.168.1.1, Now I installed samba and setup a smb.conf file 
smbd and nmbd runs fine  also testparam doe's not show any errors and when I 
run the smbclient on the same machine It's authenticates fine, but when I 
try to access via Win2k server it returns this error "Not Authorised to 
logon from this Station" I have lists both the NiC's Ips in hosts allow 
under global Section as below

is my smb.conf file:

[global]
   netbios name = net-lab01
   workgroup = workgroup
   server string = Samba Server
   printcap name = /etc/printcap
   load printers = yes
   log file = /var/log/samba/log.%m
   max log size = 50
   security = user
#   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
   hosts        allow = 65.X.X.X  127. 199.168.1.

[public]
path = /home/rshah
read only = no


[homes]
   comment = Home Directories
   browseable = no
   writable = yes


[myshare]
   comment =  Rakesh Stuff
    path = /home/rshah
    public = yes
    writable = yes
    create mask = 0765

Now when I run smbclient from the same host is get this :

[root at net-lab01 samba]# smbclient //199.168.1.2/myshare -U rshah%balh
added interface ip=199.168.1.2 bcast=199.168.1.255 nmask=255.255.255.0
Domain=[WORKGROUP] OS=[Unix] Server=[Samba 2.2.0]
smb: \>
smb: \>


Meaning the User and Password is fine and validates the access
Now when I give :

nbtstat -a 199.168.1.2

Local Area Connection:
Node IpAddress: [199.168.1.1] Scope Id: []

           NetBIOS Remote Machine Name Table

       Name               Type         Status
    ---------------------------------------------
    NET-LAB01      <00>  UNIQUE      Registered
    NET-LAB01      <03>  UNIQUE      Registered
    NET-LAB01      <20>  UNIQUE      Registered
    ..__MSBROWSE__.<01>  GROUP       Registered
    WORKGROUP      <00>  GROUP       Registered
    WORKGROUP      <1D>  UNIQUE      Registered
    WORKGROUP      <1E>  GROUP       Registered

    MAC Address = 00-00-00-00-00-00


Local Area Connection 2:
Node IpAddress: [65.x.y.z] Scope Id: []

           NetBIOS Remote Machine Name Table

       Name               Type         Status
    ---------------------------------------------
    NET-LAB01      <00>  UNIQUE      Registered
    NET-LAB01      <03>  UNIQUE      Registered
    NET-LAB01      <20>  UNIQUE      Registered
    ..__MSBROWSE__.<01>  GROUP       Registered
    WORKGROUP      <00>  GROUP       Registered
    WORKGROUP      <1D>  UNIQUE      Registered
    WORKGROUP      <1E>  GROUP       Registered

    MAC Address = 00-00-00-00-00-00


Now when I try to access the same from Win2k server  using


d:\home\rshah>net use \\net-lab01\myshare /user:rshah%blah
System error 1240 has occurred.

The account is not authorized to log in from this station.

===
Can some one explain why?
In smb.conf I have entry that allows both the interface in the list then why 
it is returning this error also the  logs I see gives this
error's

-->log.smbd

[root at net-lab01 samba]# tail -f  /var/log/samba/log.smbd
[2001/12/20 00:19:32, 0] lib/util_sock.c:set_socket_options(165)
  Failed to set socket option SO_KEEPALIVE (Error Bad file descriptor)
[2001/12/20 00:19:32, 0] lib/util_sock.c:set_socket_options(165)
  Failed to set socket option TCP_NODELAY (Error Bad file descriptor)
[2001/12/20 00:19:32, 0] lib/util_sock.c:set_socket_options(165)
  Failed to set socket option SO_RCVBUF (Error Bad file descriptor)
[2001/12/20 00:19:32, 0] lib/util_sock.c:set_socket_options(165)
  Failed to set socket option SO_SNDBUF (Error Bad file descriptor)
[2001/12/20 00:28:21, 0] passdb/pampass.c:pam_passcheck(405)
  PAM: System Validation Failed - Rejecting User!
===================
However When I try to search for the Computer on win2k for this Linux box it 
does appear on the List on same workgroup meaninig that nmbd is reconising 
this as a server but fail's to authenticate.

Win2K server is also belong to workgroup called workgroup.

Please help I can be reached at srakesh28 at hotmail.com

Thank you in advance


Rakesh Shah


_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp.