[Samba] W2K, W2K Server and samba 3.0.1

[Brett Jessup]

Hi, I've a Windows 2000 workstation trying to connect to a Samba 3.0.1
(Redhat 9.0) domain member of a Windows 2000 Domain (Served by a Windows
2000 Server).  From the windows workstation end, I get "incorrect
password or unknown username" and from the samba end I get the log at
the bottom of this email.  If I restart the samba server it will work
for a while (the time between failures varies), but then eventually it
will fail and resume this nonsense.  I logs and configs are available if
you need them, I didn't want to attach a bunch of things if they weren't
needed.  What I derive from the error message(s) is that the encryption
type is bad, but then why does it work for a little while after a
restart and then fail?  Anyway,

 

Thanks,

Brett

 

[2003/11/07 01:27:34, 3] smbd/process.c:process_smb(890)

  Transaction 26 of length 1384

[2003/11/07 01:27:34, 3] smbd/process.c:switch_message(685)

  switch message SMBsesssetupX (pid 12030)

[2003/11/07 01:27:34, 3] smbd/sec_ctx.c:set_sec_ctx(288)

  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0

[2003/11/07 01:27:34, 3] smbd/sesssetup.c:reply_sesssetup_and_X(579)

  wct=12 flg2=0xc807

[2003/11/07 01:27:34, 2] smbd/sesssetup.c:setup_new_vc_session(535)

  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.

[2003/11/07 01:27:34, 3]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(476)

  Doing spnego session setup

[2003/11/07 01:27:34, 3]
smbd/sesssetup.c:reply_sesssetup_and_X_spnego(500)

  NativeOS=[Windows 2000 2195] NativeLanMan=[Windows 2000 5.0]

[2003/11/07 01:27:34, 3] smbd/sesssetup.c:reply_spnego_negotiate(385)

  Got OID 1 2 840 48018 1 2 2

[2003/11/07 01:27:34, 3] smbd/sesssetup.c:reply_spnego_negotiate(385)

  Got OID 1 2 840 113554 1 2 2

[2003/11/07 01:27:34, 3] smbd/sesssetup.c:reply_spnego_negotiate(385)

  Got OID 1 3 6 1 4 1 311 2 2 10

[2003/11/07 01:27:34, 3] smbd/sesssetup.c:reply_spnego_negotiate(388)

  Got secblob of size 1182

[2003/11/07 01:27:35, 3] libads/kerberos_verify.c:ads_verify_ticket(310)

  ads_verify_ticket: enc type [3] failed to decrypt with error Decrypt
integrity check failed

[2003/11/07 01:27:35, 3] libads/kerberos_verify.c:ads_verify_ticket(317)

  ads_verify_ticket: krb5_rd_req with auth failed (Bad encryption type)

[2003/11/07 01:27:35, 1] smbd/sesssetup.c:reply_spnego_kerberos(172)

  Failed to verify incoming ticket!

[2003/11/07 01:27:35, 3] smbd/error.c:error_packet(118)

  error packet at smbd/sesssetup.c(173) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE