[Samba] Authentication problem with samba 2.2.5
David Evans-Roberts
daveer at hrwallingford.co.uk
Tue Jul 2 09:18:02 GMT 2002
We have started to upgrade or Unix servers from Samba 2.0.7 to Samba 2.2.5.
I did one machine as test and all worked fine. Today I tried adding two
more today and both come up with the "Incorrect password or unknown
username" box in Windows Explorer. All the Unix servers are running Solaris
7. I did the make on an NFS file system once and then ran 'make install' on
each machine as I had done with 2.0.7.
The PDC runs Windows NT 4.0 Service pack 6.0. Using server manager I
removed the samba server from the Domain, readded it as a workstation and
then ran 'smbpasswd -j HR -r DRIZZLE'. It then showed up as a Samba 2.2.5
server on the server manager. smbclient -U% -L localhost shows for the one
that works:
superior# smbclient -U% -L localhost
added interface ip=192.9.200.121 bcast=192.9.203.255 nmask=255.255.252.0
Domain=[HR] OS=[Unix] Server=[Samba 2.2.5]
Sharename Type Comment
--------- ---- -------
cmp_aps Disk cmp_aps
tideway Disk tideway
test Disk Test account
IPC$ IPC IPC Service (Samba 2.2.5)
ADMIN$ Disk IPC Service (Samba 2.2.5)
Server Comment
--------- -------
DRIZZLE ISS - General server
SUPERIOR Samba 2.2.5
Workgroup Master
--------- -------
HR DRIZZLE
and for one of the failures:
chub# smbclient -U% -L localhost
added interface ip=192.9.200.9 bcast=192.9.203.255 nmask=255.255.252.0
Domain=[HR] OS=[Unix] Server=[Samba 2.2.5]
Sharename Type Comment
--------- ---- -------
chub Disk chub work store
IPC$ IPC IPC Service (Samba 2.2.5)
ADMIN$ Disk IPC Service (Samba 2.2.5)
Server Comment
--------- -------
CHUB Samba 2.2.5
DRIZZLE ISS - General server
Workgroup Master
--------- -------
HR DRIZZLE
The working machine superior has the following smb.conf file:
# Samba config file created using SWAT
# from 192.9.201.3 (192.9.201.3)
# Date: 2002/06/20 15:26:04
# Global parameters
[global]
workgroup = HR
security = DOMAIN
encrypt passwords = Yes
password server = DRIZZLE HAIL SNOW
username map = /etc/samba/usermap.txt
log file = /var/log/samba
socket options = TCP_NODELAY IPTOS_LOWDELAY
load printers = No
os level = 0
dns proxy = No
read only = No
create mask = 0774
directory mask = 0775
[cmp_aps]
comment = cmp_aps
path = /export/cmp_aps
[tideway]
comment = tideway
path = /export/tideway
[test]
comment = Test account
path = /cmp_aps/daveer/temp.dir/test
inherit permissions = Yes
inherit acls = Yes
The failing machine chub:
# Samba config file created using SWAT
# from dhcp262 (192.9.203.8)
# Date: 2000/12/04 16:14:57
# Global parameters
[global]
workgroup = HR
security = DOMAIN
encrypt passwords = Yes
password server = DRIZZLE HAIL SNOW
username map = /etc/samba/usermap.txt
log file = /var/log/samba
socket options = TCP_NODELAY IPTOS_LOWDELAY
load printers = No
os level = 0
dns proxy = No
read only = no
create mask = 0774
directory mask = 0775
[chub]
comment = chub work store
path = /chub
Both are very similar in setup so am surprised when I can access the shares
for superior, but not chub. The Unix permissions seem fine. The log for
chub shows:
[2002/07/02 16:33:21, 0] rpc_client/cli_netlogon.c:cli_net_auth2(157)
cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
[2002/07/02 16:33:21, 0] rpc_client/cli_login.c:cli_nt_setup_creds(74)
cli_nt_setup_creds: auth2 challenge failed
[2002/07/02 16:33:21, 0]
smbd/password.c:connect_to_domain_password_server(1360)
connect_to_domain_password_server: unable to setup the PDC credentials to
machin
e DRIZZLE. Error was : NT_STATUS_OK.
[2002/07/02 16:33:22, 0] rpc_client/cli_netlogon.c:cli_net_auth2(157)
cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
[2002/07/02 16:33:22, 0] rpc_client/cli_login.c:cli_nt_setup_creds(74)
cli_nt_setup_creds: auth2 challenge failed
[2002/07/02 16:33:22, 0]
smbd/password.c:connect_to_domain_password_server(1360)
connect_to_domain_password_server: unable to setup the PDC credentials to
machin
e HAIL. Error was : NT_STATUS_OK.
[2002/07/02 16:33:22, 0] rpc_client/cli_netlogon.c:cli_net_auth2(157)
cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
[2002/07/02 16:33:22, 0] rpc_client/cli_login.c:cli_nt_setup_creds(74)
cli_nt_setup_creds: auth2 challenge failed
[2002/07/02 16:33:22, 0]
smbd/password.c:connect_to_domain_password_server(1360)
connect_to_domain_password_server: unable to setup the PDC credentials to
machin
e SNOW. Error was : NT_STATUS_OK.
[2002/07/02 16:33:22, 0] smbd/password.c:domain_client_validate(1585)
domain_client_validate: Domain password server not available.
[2002/07/02 16:33:22, 0] passdb/pdb_nisplus.c:make_sam_from_nisresult(460)
NIS+ lookup failure: Not Found, no such name
[2002/07/02 16:33:22, 0] passdb/pdb_nisplus.c:make_sam_from_nisresult(460)
NIS+ lookup failure: Not Found, no such name
[2002/07/02 16:33:23, 0] rpc_client/cli_netlogon.c:cli_net_auth2(157)
cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
[2002/07/02 16:33:23, 0] rpc_client/cli_login.c:cli_nt_setup_creds(74)
cli_nt_setup_creds: auth2 challenge failed
[2002/07/02 16:33:23, 0]
smbd/password.c:connect_to_domain_password_server(1360)
connect_to_domain_password_server: unable to setup the PDC credentials to
machin
e DRIZZLE. Error was : NT_STATUS_OK.
[2002/07/02 16:33:23, 0] rpc_client/cli_netlogon.c:cli_net_auth2(157)
cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
[2002/07/02 16:33:23, 0] rpc_client/cli_login.c:cli_nt_setup_creds(74)
cli_nt_setup_creds: auth2 challenge failed
[2002/07/02 16:33:23, 0]
smbd/password.c:connect_to_domain_password_server(1360)
connect_to_domain_password_server: unable to setup the PDC credentials to
machin
e HAIL. Error was : NT_STATUS_OK.
[2002/07/02 16:33:24, 0] rpc_client/cli_netlogon.c:cli_net_auth2(157)
cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
[2002/07/02 16:33:24, 0] rpc_client/cli_login.c:cli_nt_setup_creds(74)
cli_nt_setup_creds: auth2 challenge failed
[2002/07/02 16:33:24, 0]
smbd/password.c:connect_to_domain_password_server(1360)
connect_to_domain_password_server: unable to setup the PDC credentials to
machin
e SNOW. Error was : NT_STATUS_OK.
[2002/07/02 16:33:24, 0] smbd/password.c:domain_client_validate(1585)
domain_client_validate: Domain password server not available.
[2002/07/02 16:33:24, 0] passdb/pdb_nisplus.c:make_sam_from_nisresult(460)
NIS+ lookup failure: Not Found, no such name
[2002/07/02 16:33:24, 0] passdb/pdb_nisplus.c:make_sam_from_nisresult(460)
NIS+ lookup failure: Not Found, no such name
Any help gratefully received.
Regards
David Evans-Roberts
-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-
HR Wallingford uses Faxes and Emails for confidential and
legally privileged business communications. They do not of
themselves create legal commitments. Disclosure to parties
other than addressees requires our specific consent. We are
not liable for unauthorised disclosures nor reliance upon
them. If you have received this message in error please
advise us immediately and destroy all copies of it.
-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-
More information about the samba
mailing list