[Samba] Problem with Windows XP SP1 Client

[Buchan Milne]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

> Date: Fri, 28 Mar 2003 15:08:17 +0100
> From: "Andrea Durante" <andrea.durante at metroitaly.it>
> To: <samba at samba.org>
> Subject: [Samba] Problem with Windows XP SP1 Client
> Message-ID: <6BDAA49E288C3447BF48E621080399D605B936 at mail2.metroitaly.it>
> Content-Type: text/plain;
> 	charset="iso-8859-1"
> MIME-Version: 1.0
> Content-Transfer-Encoding: quoted-printable
> Precedence: list
> Message: 6
>
> Hi, i've tried to configure samba 2.2.7 + winbind on a Mandrake 9.0
> linux system, and all work fine, but i've only a problem: when i connect
> with any Windows XP Client the system ask to me the Username/password=20
> (the computer is in a NT 4 domain) and in the syslog i can see this =
> line:
>
> rpc_client/cli_netlogon.c:cli_net_sam_logon_internal(406)
>  cli_net_sam_logon_internal: NT_STATUS_WRONG_PASSWORD
> smbd/password.c:domain_client_validate(1621)
>  domain_client_validate: unable to validate password for user Admin in =
> domain METRO_MILANO
> to Domain controller *. Error was NT_STATUS_WRONG_PASSWORD.
>
> but my password is correct otherwise i can't connect to the server!

What happens with:

# wbinfo -t
# wbinfo -u
# getent passwd
# wbinfo -a user%password

BTW, you may also need to apply a registry change to Windows XP:
[bgmilne at bgmilne bgmilne]$ rpm -ql samba-doc|grep reg|grep XP
/usr/share/doc/samba-doc-2.2.7a/docs/Registry/WinXP_SignOrSeal.reg

Also, please update to 2.2.7a-8.1mdk (with MandrakeUpdate) as soon as
you have it working, there is a security vulnerability in previous
versions of samba.

>
> Here is my smb.conf:
>
> # Samba config file created using SWAT
> # from 0.0.0.0 (0.0.0.0)
> # Date: 2003/03/28 14:54:54
>
> # Global parameters
> [global]
> 	client code page =3D 852
> 	workgroup =3D EDIZIONI_METRO
> 	netbios name =3D SUPPORT
> 	server string =3D Support Server for IT
> 	security =3D DOMAIN
> 	encrypt passwords =3D Yes
> 	update encrypted =3D Yes
> 	password server =3D *
> 	ssl CA certDir =3D /etc/ssl/certs
> 	log file =3D /var/log/samba.%m
> 	max log size =3D 50
> 	domain admin group =3D Administrators
> 	preferred master =3D No
> 	dns proxy =3D No
> 	wins server =3D 192.168.10.1
> 	winbind uid =3D 10000-20000
> 	winbind gid =3D 10000-20000
> 	winbind separator =3D +
> 	winbind use default domain =3D Yes
>
> [homes]
> 	comment =3D Home Directories
> 	read only =3D No
> 	browseable =3D No
>
> [printers]
> 	comment =3D All Printers
> 	path =3D /var/spool/samba
> 	printable =3D Yes
> 	browseable =3D No
>
> I think that is too simple configuration, and the Win NT4 and Win 2000
> client appears work good!
>
> Thanks for the attention and sorry for my English.

FYI:
http://ranger.dnsalias.com/mandrake/samba/Integrating%20Linux%20into%20Windows%20Networks.pdf
(details on setting up winbind during install on Mandrake 9.0).

Buchan

- --
|--------------Another happy Mandrake Club member--------------|
Buchan Milne                Mechanical Engineer, Network Manager
Cellphone * Work            +27 82 472 2231 * +27 21 8828820x121
Stellenbosch Automotive Engineering         http://www.cae.co.za
GPG Key                   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE+iDDerJK6UGDSBKcRAmcyAJ9N6V0yBRsBrDOm9a9yzAamSWYriQCfWs7R
A3Tvjaxp3q9n6SdsIf/LTAY=
=+IjM
-----END PGP SIGNATURE-----