[Samba] challenge/response password authentication failed

[Luc Van Hoeylandt]

> Luc Van Hoeylandt wrote:
> >
> > hi,
> >
> > I'm having troubles joining a win2k domain with samba 2.2.3a. As you can
> > see below I always get a 'challenge/response password authentication
failed'
> > when trying to authenticate(. I searched the mailinglist but can't find
a
> > solution.
> > After 3 days of searching i'm still stuck :( I'd appreciate any pointers
you
> > could give me.
>
> As long as the 'plaintext' version works, its fine.  Samba 2.2 has this
> feature disabled for security reasons.

Then i'm affraid something else is wrong :-(  I'm unable to connect to my
shares (I am using a smb.conf that used to work on another machine)
I always seem to get NT_STATUS_WRONG_PASSWORD

smbclient //linux/webroot -U CEREUSBE+LVHoeylandt%LVHoeylandt
added interface ip=192.168.165.54 bcast=192.168.165.255 nmask=255.255.255.0
Domain=[CEREUSBE] OS=[Unix] Server=[Samba 2.2.3a]
tree connect failed: NT_STATUS_WRONG_PASSWORD


wbinfo -a CEREUSBE+LVHoeylandt%LVHoeylandt
plaintext password authentication succeeded
challenge/response password authentication failed
Could not authenticate user CEREUSBE+LVHoeylandt%LVHoeylandt with
challenge/response

BTW is it possible that 2.2.2 did have the challenge/response authentication
enabled ?
If i remember correctly wbinfo didn't fail with that version.

tnx a lot

Luc


smb.conf below

# Global parameters
[global]
        workgroup = CEREUSBE
        security = domain
        encrypt passwords = Yes
        password server = NT2000.cereus.be
        keepalive = 30
        os level = 33
        local master = No
        domain master = False
        winbind uid = 10000-20000
        winbind gid = 10000-20000
        template shell = /bin/bash
        winbind separator = +
        #map to guest = Bad User


[Test]
        comment = test share
        path = /home/samba
        valid users = CEREUSBE+LVHoeylandt CEREUSBE+JVDBroeck
        read only = No

[webroot]
        comment = Oracle webroot
        path = /opt/oracle/product/901/Apache/Apache/htdocs
        valid users = @CEREUSBE+Developers
        force user = oracle
        read only = No
        preserve case = no