[Samba] NT_STATUS_ACCESS_DENIED

[Darryl Milczarek]

Samba_Version:     2.2.0a
Samba_Server_HDWR: DEC Alpha 4100
Samba_Server_OS:   Tru64 v.4.0g
PDC_Server_OS:     Windows 2000 Server sp2
Client_OS:         Windows 2000 sp2

I have two identical Alpha 4100 UNIX servers, and both are running Tru64
ver. 4.0g and each has Samba 2.2.0a installed and operating. Both have been
functioning with no configuration changes for over a year. However,
something has happened to one of the installations. While all users can
still map drives to the Samba share on one server (alpha-ems), only a few
users can map a drive to the Samba share on the other server (alpha-ems2)
and the rest of us can not. When I try, I am challenged with a user/pass
screen.

I have tried the tests in the documentation including ping from both server
and client and they succeed, but this test fails: 

# smbpasswd -j EMSPHX -r EMSINTERNET -U% 
cli_net_auth2: Error NT_STATUS_ACCESS_DENIED 
cli_nt_setup_creds: auth2 challenge failed 
modify_trust_password: unable to setup the PDC credentials to machine
EMSINTERNET. Error was : NT_STATUS_ACCESS_DENIED. 
2002/04/18 08:28:16 : change_trust_account_password: Failed to change
password for domain EMSPHX. 
Unable to join domain EMSPHX. 

If I don't put the -U% on the end, then I am again presented with the
user/pass screen. However, when I check smbstatus, I see two users
successfully attached each day (but only the same 2).

# smbstatus 
  
Samba version 2.2.0a 
Service      uid      gid      pid     machine 
---------------------------------------------- 
inv-fin      applmgr  dba       9535   tealy_gx150 (172.20.1.114) Thu Apr 18
06:35:05 2002 
inv-fin      applmgr  dba      11180   jhooper_gx150 (172.16.1.109) Thu Apr
18 08:13:55 2002 
  
No locked files 

Prior to last Thursday I could map my I: drive to the inv-fin share on
server alpha-ems2. But now, here is what happens when I try to connect from
my Windows 2000 computer using net use (which used to work just fine): 

net use i: \\alpha-ems2\inv-fin 

The password or username is invalid for \\alpha-ems2\inv-fin 

This is so strange, as just last week I NEVER had a problem connecting to
this Samba share!

Here is the entire content of my smb.conf file on server alpha-ems2, which
has remained unchanged for over a year:

[global]
  security=domain
  workgroup=EMSPHX
  encrypt passwords = yes
  password server = EMSINTERNET PHX2K
  add user script = /usr/local/samba/bin/add_user

[inv-fin]
  guest account = applmgr
  guest ok = yes
  path = /u07/app/appuappl/admin/reports/out
  public = yes
  read only = yes

[temp]
  guest ok = no
  path = /temp
  writeable = yes
  valid users = dmilczar ikahn dgeddes

I have run 

Have you any ideas where I might look for a solution? 

Darryl Milczarek 
CIO, Equipment Maintenance Services
Phoenix, AZ
darryl.milczarek at emsusa.com