[Samba] Samba "unable to validate password" error

[Carolyn Mayr]

I sent the following to sunmanagers at sunmanagers.org and I'm also forwarding
this to the samba list.  I hope you can help:

------------- Begin Forwarded Message -------------
I have an emergency and am at the end of my resources and hope you can help.
I'm a samba newbie and hope you can point me to an answer.

Our Samba2.0.5 server is a Sun Enterprise 450 (Solaris 7).  Our PDC
is an NT machine called warrior.  The warrior is the smbpasswd server
and the domain is CSDEPARTMENT.

We've been running samba for the past 2 years with no problem.  Now we
are seeing a problem with new users in the CSDEPARTMENT domain when a 
user tries to log in from their PC to our samba server:

  [2002/11/15 07:53:51, 0] smbd/password.c:(1470)
    domain_client_validate: unable to validate password for user velazque in 
domain CSDEPARTMENT to Domain controller WARRIOR. Error was code 0.
  [2002/11/15 07:53:51, 1] smbd/password.c:(500)
    Couldn't find user 'velazque' in smb_passwd file.
  [2002/11/15 07:53:51, 1] smbd/password.c:(500)
    Couldn't find user 'velazque' in smb_passwd file.
  [2002/11/15 07:53:51, 1] smbd/reply.c:(925)
    Rejecting user 'velazque': authentication failed
  [2002/11/15 07:53:51, 1] smbd/server.c:(641)
    smbd version 2.0.7 started.


I don't know what is causing this.  I reviewed my smb.conf file using the
Samba Unleashed book and according to the book, it's correct.  

I thought maybe the problem was with the PDC credentials so I tried this:

#/opt/samba/bin/smbpasswd -j CSDEPARTMENT -r warrior

   cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
   cli_nt_setup_creds: auth2 challenge failed
   modify_trust_password: unable to setup the PDC credentials to machine 
WARRIOR.   Error was : NT_STATUS_ACCESS_DENIED.
   2002/11/15 09:34:55 : change_trust_account_password: Failed to change         
password for domain CSDEPARTMENT.
   Unable to join domain CSDEPARTMENT.

Could this be why I'm having the user validation problem?  BTW, we do have
an /etc/opt/samba/private directory with some old files:

-rw-r--r--   1 root     root          40 Aug 17  2000 MACHINE.SID
-rw-------   1 root     root         127 Apr 30  2001 smbpasswd
-rw-r--r--   1 root     other         25 Aug 18  2000 smbpasswd.junk


Please help!!!!

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Carolyn A. Mayr (UNIX System Administrator)  Voice: (410) 293-6808 (sec-6800)
Computer Science Department, DivMath&Sci     Email: carolyn at usna.edu     
572 Holloway Road, Chauvenet Hall, Stop 9F   FAX:   (410) 293-2686
U.S. Naval Academy                           WWW:   http://www.cs.usna.edu
Annapolis, MD  21402-5002                    USNA:  (410) 293-1000
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=