[Samba] Trouble adding new users with samba 3.0

[Stéphane Purnelle]

Mark a écrit :

>Mandrake 9.1, Samba 3.0 (used rpm's)
>
>I just upgraded one of my pc's to samba 3.0 today. The issue is that all
>existing users before the upgrade can log onto the samba pdc with no
>problems. However any new users that I add cannot log on. I thought that
>maybe something had gone wrong so I uninstalled 3.0 and any remnants of
>2.2.8 and did a clean install of samba 3.0. After installing, the issue
>remains. I have tried various different (new) users and passwords and
>still  the logons will not work. The logs here show "FAILED with error
>NT_STATUS_WRONG_PASSWORD". But the passwords are correct....
>
>Any help would be appreciated.
>Regards,
>Mark
>
> Got API command 0x26 on pipe "NETLOGON" (pnum 71a8)api_pipe_bind_req:
>\PIPE\NETLOGON -> \PIPE\lsass
>[2003/10/04 11:12:28, 3] rpc_server/srv_pipe.c:check_bind_req(727)
>  check_bind_req for \PIPE\NETLOGON
>[2003/10/04 11:12:28, 3] smbd/process.c:process_smb(890)
>  Transaction 38 of length 404
>[2003/10/04 11:12:28, 3] smbd/process.c:switch_message(685)
>  switch message SMBwriteX (pid 9250)
>[2003/10/04 11:12:28, 3]
>rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
>  free_pipe_context: destroying talloc pool of size 0
>[2003/10/04 11:12:28, 3] rpc_server/srv_pipe.c:api_rpcTNP(1495)
>  api_rpcTNP: rpc command: NET_SAMLOGON
>[2003/10/04 11:12:28, 3] rpc_server/srv_netlog_nt.c:_net_sam_logon(570)
>  SAM Logon (Interactive). Domain:[HOME].  User:[test at WIN2000] Requested
>Domain:[HOME]
>[2003/10/04 11:12:28, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2003/10/04 11:12:28, 3] smbd/uid.c:push_conn_ctx(287)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2003/10/04 11:12:28, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2003/10/04 11:12:28, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2003/10/04 11:12:28, 3] auth/auth.c:check_ntlm_password(216)
>  check_ntlm_password:  Checking password for unmapped user
>[HOME]\[test]@[WIN2000] with the new password interface
>[2003/10/04 11:12:28, 3] auth/auth.c:check_ntlm_password(219)
>  check_ntlm_password:  mapped user is: [HOME]\[test]@[WIN2000]
>[2003/10/04 11:12:28, 3] smbd/sec_ctx.c:push_sec_ctx(256)
>  push_sec_ctx(65534, 65534) : sec_ctx_stack_ndx = 1
>[2003/10/04 11:12:28, 3] smbd/uid.c:push_conn_ctx(287)
>  push_conn_ctx(101) : conn_ctx_stack_ndx = 0
>[2003/10/04 11:12:28, 3] smbd/sec_ctx.c:set_sec_ctx(288)
>  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
>[2003/10/04 11:12:28, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
>  pop_sec_ctx (65534, 65534) - sec_ctx_stack_ndx = 0
>[2003/10/04 11:12:28, 3] auth/auth_sam.c:sam_password_ok(225)
>  sam_password_ok: NT MD4 password check failed for user test
>[2003/10/04 11:12:28, 3] auth/auth_winbind.c:check_winbind_security(79)
>  check_winbind_security: Not using winbind, requested domain was for
>this SAM.
>[2003/10/04 11:12:28, 2] auth/auth.c:check_ntlm_password(309)
>  check_ntlm_password:  Authentication for user [test] -> [test] FAILED
>with error NT_STATUS_WRONG_PASSWORD 
>
>
>  
>
Who is your PDC ?

[2003/10/04 11:12:28, 3] auth/auth_winbind.c:check_winbind_security(79)
  check_winbind_security: Not using winbind, requested domain was for
this SAM.

Your Samba 3.0.0 machine is a PDC or a PDC member server of a w2k server ?

Can you verify if winbind is required or not ?