[Samba] Two questions: 'wbinfo -a' & NT/2k APW

Andrew Bartlett abartlet at pcug.org.au
Sat Apr 13 16:14:01 GMT 2002


Manuel Gomez wrote:
> 
> Greetings,
> 
> Brief preamble: this list is a fantastic resource.  I've been lurking and
> have learned a lot, but I haven't seen anyone ask the following:
> 
> First, my environment: a single Debian Linux (kernel 2.2.18) Samba server
> (version 2.2.2debian-2) in the midst of an NT 4 domain.  I have successfully
> configured Winbindd such that my NT domain user names and groups are able to
> be used for all things Samba, and for console logon, as well.
> 
> One problem is that when I try to use 'wbinfo -a' to test the domain
> password validation, I see the following:
> 
>     plaintext password authentication succeeded
>     challenge/response password authentication failed
>     Could not authenticate user DOMAIN+User%password with challenge/response
> 
> Does anyone know why this may be?  Or perhaps this is normal, and my lack of
> experience prevents me from seeing it as such?  

This is normal.  The challage-response mode presents a security risk and
has been disabled until it is 'secured' as a root-only resource.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net




More information about the samba mailing list