[Samba] PDC: Strange username translations...

[Navid Zamani]

At 21:39 2005.07.13, Paul Gienger wrote:
>I'm assuming you're logging in as local Administrator on your machine, go
>ahead and tell me to bugger off now if you aren't.

nope. you're right. i am. ;)

>Does your Administrator account password match such that you can simply
>browse your fileserver with no password entry required?  If so your machine
>could be creating a login session just because it's XP, by trying to search
>out the fileserver and probe it for shares.

Good idea. It did.
So i used "smbpasswd root" to set the password to something new and in 
windows i changed the local admin password to something other to be really 
sure.

>Check C:\Documents and Settings\<username>\NetHood and see if there are 
>entries.  If there are, delete them, reboot and try again. If that doesn't 
>fix it, try changing your XP Admin password so that it doesn't send that 
>to the server and gain access, and also a credential conflict.

There was an entry to a public share there. So i deleted it and rebooted. 
(and it did not come back).
I also disabled the public share on the server before reboot.

>I used to have a very similar problem, and then I decided to make my 
>workstation admin passwords invalid on the server.  Hasn't been a problem 
>since.

Now they are invalid here too. but not as intended. :(
After i had restarted samba and rebooted the xp-system i tried it again and 
still got the following output:

With user mapping enabled:

----------

[2005/07/13 23:35:10, 0] lib/util_sock.c:get_peer_addr(1000)
   getpeername failed. Error was Socket not connected {translated from german}
[2005/07/13 23:35:10, 2] smbd/reply.c:reply_special(235)
   netbios connect: name1=INTRANETSERVER  name2=CYBERSTATION3
[2005/07/13 23:35:10, 2] smbd/reply.c:reply_special(242)
   netbios connect: local=intranetserver remote=cyberstation3, name type = 0
[2005/07/13 23:35:10, 0] lib/util_sock.c:get_peer_addr(1000)
   getpeername failed. Error was Der Socket ist nicht verbunden
[2005/07/13 23:35:10, 0] lib/util_sock.c:write_socket_data(430)
   write_socket_data: write failure. Error = Connection reset by peer 
{translated from german}
[2005/07/13 23:35:10, 0] lib/util_sock.c:write_socket(455)
   write_socket: Error writing 4 bytes to socket 23: ERRNO = Connection 
reset by peer {translated from german}
[2005/07/13 23:35:10, 0] lib/util_sock.c:send_smb(647)
   Error writing 4 bytes to client. -1. (Connection reset by peer 
{translated from german})
[2005/07/13 23:35:10, 2] smbd/server.c:exit_server(571)
   Closing connections
[2005/07/13 23:35:10, 2] smbd/sesssetup.c:setup_new_vc_session(608)
   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
[2005/07/13 23:35:10, 2] smbd/sesssetup.c:setup_new_vc_session(608)
   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
[2005/07/13 23:35:10, 2] lib/module.c:do_smb_load_module(63)
   Module '/usr/lib/samba/vfs/recycle.so' loaded
[2005/07/13 23:35:10, 2] auth/auth.c:check_ntlm_password(312)
   check_ntlm_password:  Authentication for user [Administrator] -> [root] 
FAILED with error NT_STATUS_WRONG_PASSWORD

----------

Without user mapping

----------
[2005/07/13 23:37:04, 2] smbd/sesssetup.c:setup_new_vc_session(608)
   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
[2005/07/13 23:37:04, 2] smbd/sesssetup.c:setup_new_vc_session(608)
   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close 
all old resources.
[2005/07/13 23:37:04, 2] lib/module.c:do_smb_load_module(63)
   Module '/usr/lib/samba/vfs/recycle.so' loaded
[2005/07/13 23:37:04, 2] auth/auth.c:check_ntlm_password(312)
   check_ntlm_password:  Authentication for user [Administrator] -> 
[Administrator] FAILED with error NT_STATUS_NO_SUCH_USER

----------


I even went so far that i cleared log.smbd after samba started. then i 
tried to join the domain. after this echoed a 
"######################################################" into log.smbd. 
then i stopped samba and copied the stuff until the ###s out. this is what 
i pasted here above. (log level 2)

Now i really don't understand why it still uses "Administrator" and why it 
does not accept the new password. I tried it 3 times. And i'm sure i typed 
it in correctly 3 times.

Too bad that i can't look at a decoded packet dump with explanations so i 
could see what xp is doing... ;(