[Samba] NT_STATUS_WRONG_PASSWORD with multiple concurrent connects from same IP Address.

Blane Bramble blane at dialmediagroup.com
Tue Apr 12 07:54:21 GMT 2005


On Tue, 2005-04-12 at 06:07 +1000, Andrew Bartlett wrote:
> On Mon, 2005-04-11 at 16:51 +0100, Blane Bramble wrote:
> 
> > Replying to myself... would it be possible to use the existing OPLOCK
> > based queueing code to make force an authorisation request into the
> > pending queue if another auth request is still being processed?
> 
> I would prefer just to correctly handle the multiple outstanding
> authentication requests.  But this is only an issue if 'use spnego =
> yes', as otherwise authentication occurs on a single packet context, and
> should already handle a 'backlog'.  (As is seen when people do things
> like aim the squid smb-based ntlm helpers at us, with 1000's of session
> setups...).
> 
> In any case, I'm looking to write a torture test for Samba4, to recreate
> the issue there, and from those results we might be able to fix 3.0 (it
> is harder to do in 3.0 than in 4, due to more complex code).
> 
> Andrew Bartlett
> 

If I change spnego to no and do a reload will it update correctly or do
I need to restart the processes? Asking, because I have made this change
and it still seems to be happening. I will sort out a log level 10 debug
sometime today.

Thanks,

Blane.



More information about the samba mailing list