[Samba] session setup failed: NT_STATUS_LOGON_FAILURE

Johnson, Dave S. Dave.Johnson at gmacrfc.com
Mon Jan 20 09:32:01 GMT 2003


I know this subject has been beaten to death .. but I haven't been able to
find a solution .. so here it is again:

I can join the my Windows DOMAIN without issue.

[djohns1 at lmsprfc24208a djohns1]$ smbclient -L \\\\mspap01u 
added interface ip=192.168.240.53 bcast=192.168.240.255 nmask=255.255.255.0
added interface ip=192.168.131.1 bcast=192.168.131.255 nmask=255.255.255.0
Password: 
session setup failed: NT_STATUS_LOGON_FAILURE

If I use localhost instead of mspap01u I get a list of shares locally.  No
matter what I do to my smb.conf file locally I get denied EVERYWHERE in the
DOMAIN when trying to connect to Windows machines.  I am using
SECURITY=DOMAIN andPASSWORD SERVER = *

[djohns1 at lmsprfc24208a djohns1]$ smbclient //vmspap01caa/prod -W NA -U
djohns1
added interface ip=192.168.240.53 bcast=192.168.240.255 nmask=255.255.255.0
added interface ip=192.168.131.1 bcast=192.168.131.255 nmask=255.255.255.0
Password: 
session setup failed: NT_STATUS_LOGON_FAILURE

I know there's communication there because I get some output if I use -N :
[djohns1 at lmsprfc24208a djohns1]$ smbclient //vmspap01caa/prod -W NA -N
added interface ip=192.168.240.53 bcast=192.168.240.255 nmask=255.255.255.0
added interface ip=192.168.131.1 bcast=192.168.131.255 nmask=255.255.255.0
Anonymous login successful
Domain=[NA] OS=[Windows 5.0] Server=[Windows 2000 LAN Manager]
tree connect failed: NT_STATUS_ACCESS_DENIED

I have several HP-UX 11.00 machines with Samba 2.2.3a running on them with
SECURITY=DOMAIN and all of the users can access the shares without issue.  I
just can't get anywhere on the DOMAIN with smbclient ... 

testparm output:
--------------------------------------------------------------------
# Global parameters
[global]
        coding system = 
        client code page = 850
        code page directory = /etc/codepages
        workgroup = NA
        netbios name = LMSPRFC24208A
        netbios aliases = 
        netbios scope = 
        server string = Dave Johnson's Samba Server
        interfaces = 
        bind interfaces only = No
        security = DOMAIN
        encrypt passwords = Yes
        update encrypted = No
        allow trusted domains = Yes
        hosts equiv = 
        min passwd length = 5
        map to guest = Never
        null passwords = No
        obey pam restrictions = No
        password server = *
        smb passwd file = /etc/samba/smbpasswd
        root directory = 
        pam password change = No
        passwd program = /usr/bin/passwd
        passwd chat = *new*password* %n\n *new*password* %n\n *changed*
        passwd chat debug = No
        username map = 
        password level = 0
        username level = 0
        unix password sync = No
        restrict anonymous = No
        lanman auth = Yes
        use rhosts = No
        admin log = No
        log level = 5
        syslog = 1
        syslog only = No
        log file = /var/log/samba/log.%m
        max log size = 50        timestamp logs = Yes
        debug hires timestamp = No
        debug pid = No
        debug uid = No
        protocol = NT1
        large readwrite = Yes
        max protocol = NT1
        min protocol = CORE
        read bmpx = No
        read raw = Yes
        write raw = Yes
        nt smb support = Yes
        nt pipe support = Yes
        nt status support = Yes
        announce version = 4.9
        announce as = NT
        max mux = 50
        max xmit = 16644
        name resolve order = lmhosts host wins bcast
        max ttl = 259200
        max wins ttl = 518400
        min wins ttl = 21600
        time server = No
        unix extensions = No
        change notify timeout = 60
        deadtime = 0
        getwd cache = Yes
        keepalive = 300
        lpq cache time = 10
        max smbd processes = 0
        max disk size = 0
        max open files = 10000
        name cache timeout = 660
        read size = 16384
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        stat cache size = 50
        use mmap = Yes
        total print jobs = 0
        load printers = Yes
        printcap name = /etc/printcap
        disable spoolss = No
        enumports command = 
        addprinter command = 
        deleteprinter command = 
        show add printer wizard = Yes
        os2 driver map = 
        strip dot = No
        mangling method = hash
        character set = 
        mangled stack = 50
        stat cache = Yes
        domain admin group = 
        domain guest group = 
        machine password timeout = 604800
        add user script = 
        delete user script = 
        logon script = 
        logon path = \\%N\%U\profile
        logon drive = 
        logon home = \\%N\%U
        domain logons = No
        os level = 20
        lm announce = Auto
        lm interval = 60
        preferred master = Auto
        local master = Yes
        domain master = Auto
        browse list = Yes
        enhanced browsing = Yes
        dns proxy = No
        wins proxy = No
        wins server = 199.21.57.20,199.21.56.57
        wins support = No
        wins hook = 
        kernel oplocks = Yes
        lock spin count = 3
        lock spin time = 10
        oplock break wait time = 0
        add share command = 
        change share command = 
        delete share command = 
        config file = 
        preload = 
        lock dir = /var/cache/samba
        pid directory = /var/run/samba
        utmp directory = 
        wtmp directory = 
        utmp = No
        default service = 
        message command = 
        dfree command = 
        valid chars = 
        remote announce = 
        remote browse sync = 
        socket address = 0.0.0.0
        homedir map = 
        time offset = 0
        NIS homedir = No
        source environment = 
        panic action = 
        hide local users = No
        host msdfs = No
        winbind uid =         winbind gid = 
        template homedir = /home/%D/%U
        template shell = /bin/false
        winbind separator = \
        winbind cache time = 15
        winbind enum users = Yes
        winbind enum groups = Yes
        winbind use default domain = No
        comment = 
        path = 
        alternate permissions = No
        username = 
        guest account = nobody
        invalid users = 
        valid users = 
        admin users = 
        read list = 
        write list = 
        printer admin = 
        force user = 
        force group = 
        read only = Yes
        create mask = 0744
        force create mode = 00
        security mask = 0777
        force security mode = 00
        directory mask = 0755
        force directory mode = 00
        directory security mask = 0777
        force directory security mode = 00
        force unknown acl user = 00
        inherit permissions = No
        inherit acls = No
        guest only = No
        guest ok = No
        only user = No
        hosts allow = 
        hosts deny = 
        status = Yes
        nt acl support = Yes
        profile acls = No
        block size = 1024
        max connections = 0
        min print space = 0
        strict allocate = No
        strict sync = No
        sync always = No
        write cache size = 0
        max print jobs = 1000
        printable = No
        postscript = No
        printing = bsd
        print comman        lpq command = lpq -P%p
        lprm command = lprm -P%p %j
        lppause command = 
        lpresume command = 
        queuepause command = 
        queueresume command = 
        printer name = 
        use client driver = No
        default devmode = No
        printer driver = 
        printer driver file = /etc/samba/printers.def
        printer driver location = 
        default case = lower
        case sensitive = No
        preserve case = Yes
        short preserve case = Yes
        mangle case = No
        mangling char = ~
        hide dot files = Yes
        hide unreadable = No
        delete veto files = No
        veto files = 
        hide files = 
        veto oplock files = 
        map system = No
        map hidden = No
        map archive = Yes
        mangled names = Yes
        mangled map = 
        browseable = Yes
        blocking locks = Yes
        csc policy = manual
        fake oplocks = No
        locking = Yes
        oplocks = Yes
        level2 oplocks = Yes
        oplock contention limit = 2
        posix locking = Yes
        strict locking = No
        share modes = Yes
        copy = 
        include = 
        exec = 
        preexec close = No
        postexec = 
        root preexec = 
        root preexec close = No
        root postexec = 
        available = Yes
        volume = 
        fstype = NTFS
        set directory = No
        wide links = Yes
        follow symlinks = Yes
        dont descend = 
        magic script = 
        magic output = 
        delete readonly = No
        dos filemode = No
        dos filetimes = No
        dos filetime resolution = No
        fake directory create times = No
        vfs object = 
        vfs options = 
        msdfs root = No

[homes]
        comment = Home Directories
        read only = No
        browseable = No

[printers]
        comment = All Printers
        path = /var/spool/samba
        printable = Yes
        browseable = No



-------------- next part --------------
HTML attachment scrubbed and removed


More information about the samba mailing list