[Samba] Two questions: 'wbinfo -a' & NT/2k APW

Andrew Bartlett abartlet at pcug.org.au
Sat Apr 13 16:14:01 GMT 2002

Manuel Gomez wrote:
> Greetings,
> Brief preamble: this list is a fantastic resource.  I've been lurking and
> have learned a lot, but I haven't seen anyone ask the following:
> First, my environment: a single Debian Linux (kernel 2.2.18) Samba server
> (version 2.2.2debian-2) in the midst of an NT 4 domain.  I have successfully
> configured Winbindd such that my NT domain user names and groups are able to
> be used for all things Samba, and for console logon, as well.
> One problem is that when I try to use 'wbinfo -a' to test the domain
> password validation, I see the following:
>     plaintext password authentication succeeded
>     challenge/response password authentication failed
>     Could not authenticate user DOMAIN+User%password with challenge/response
> Does anyone know why this may be?  Or perhaps this is normal, and my lack of
> experience prevents me from seeing it as such?  

This is normal.  The challage-response mode presents a security risk and
has been disabled until it is 'secured' as a root-only resource.

Andrew Bartlett

Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net

More information about the samba mailing list