[Samba] challenge/response password authentication failed
Luc Van Hoeylandt
LVHoeylandt at cereus.be
Thu Feb 28 05:49:25 GMT 2002
> Luc Van Hoeylandt wrote:
> >
> > hi,
> >
> > I'm having troubles joining a win2k domain with samba 2.2.3a. As you can
> > see below I always get a 'challenge/response password authentication
failed'
> > when trying to authenticate(. I searched the mailinglist but can't find
a
> > solution.
> > After 3 days of searching i'm still stuck :( I'd appreciate any pointers
you
> > could give me.
>
> As long as the 'plaintext' version works, its fine. Samba 2.2 has this
> feature disabled for security reasons.
Then i'm affraid something else is wrong :-( I'm unable to connect to my
shares (I am using a smb.conf that used to work on another machine)
I always seem to get NT_STATUS_WRONG_PASSWORD
smbclient //linux/webroot -U CEREUSBE+LVHoeylandt%LVHoeylandt
added interface ip=192.168.165.54 bcast=192.168.165.255 nmask=255.255.255.0
Domain=[CEREUSBE] OS=[Unix] Server=[Samba 2.2.3a]
tree connect failed: NT_STATUS_WRONG_PASSWORD
wbinfo -a CEREUSBE+LVHoeylandt%LVHoeylandt
plaintext password authentication succeeded
challenge/response password authentication failed
Could not authenticate user CEREUSBE+LVHoeylandt%LVHoeylandt with
challenge/response
BTW is it possible that 2.2.2 did have the challenge/response authentication
enabled ?
If i remember correctly wbinfo didn't fail with that version.
tnx a lot
Luc
smb.conf below
# Global parameters
[global]
workgroup = CEREUSBE
security = domain
encrypt passwords = Yes
password server = NT2000.cereus.be
keepalive = 30
os level = 33
local master = No
domain master = False
winbind uid = 10000-20000
winbind gid = 10000-20000
template shell = /bin/bash
winbind separator = +
#map to guest = Bad User
[Test]
comment = test share
path = /home/samba
valid users = CEREUSBE+LVHoeylandt CEREUSBE+JVDBroeck
read only = No
[webroot]
comment = Oracle webroot
path = /opt/oracle/product/901/Apache/Apache/htdocs
valid users = @CEREUSBE+Developers
force user = oracle
read only = No
preserve case = no
More information about the samba
mailing list