[Samba] NT_STATUS_LOGON FAILURE with some clients,
migrating from 2.2.x to 3.0.14a
Wolfgang Wegner
ww at schwein.E-Technik.Uni-Dortmund.DE
Mon Jun 13 10:55:49 GMT 2005
Hi,
after investigating a bit more I found that my problem is not the
"Conversion error", there must be something different.
Failing clients are WinXP as well as NT 4.0.
Please find attached my smb.conf, a log of the failed connection attempt
(from NT 4.0) and a log of successful connection (from an XP machine).
Accessing the share from both machines worked with the old Samba version
(2.2.x) with the same account, but there is also an XP machine with the
same symptom now after upgrading.
Password encryption is off on all the machines, I checked that.
What I wonder is that there is an LOGON_FAILURE in the log of the
"working" machine, too, but then (in a second attempt?) the connection
is established correctly.
Any hints on how I could try to track this down?
Thanks and regards,
Wolfgang
-------------- next part --------------
# Samba config file created using SWAT
# from 192.168.1.2 (192.168.1.2)
# Date: 2005/06/13 08:10:34
# Global parameters
[global]
unix charset = ISO8859-1
display charset = iso8859-1
netbios aliases = 192.168.1.100
server string = LABOR 2 Server
interfaces = 192.168.1.100/24
bind interfaces only = Yes
encrypt passwords = No
map to guest = Bad User
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n .
passwd chat timeout = 3
log level = 3
syslog = 0
log file = /var/log/samba/log.%m
max log size = 1000
time server = Yes
lpq cache time = 10
socket options = TCP_NODELAY SO_KEEPALIVE IPTOS_LOWDELAY SO_RCVBUF=8192 SO_SNDBUF=8192
printcap name = cups
os level = 65
preferred master = Yes
domain master = Yes
dns proxy = No
wins support = Yes
ldap ssl = no
panic action = /usr/share/samba/panic-action %d
invalid users = root
printing = cups
print command =
lpq command = /usr/bin/lpq -P%p
lprm command =
veto files = /*.eml/*.nws/riched20.dll/*.{*}/
[printers]
comment = All Printers
path = /tmp
printer admin = wegner
create mask = 0700
guest ok = Yes
printable = Yes
browseable = No
[print$]
comment = Printer Drivers
path = /var/lib/samba/printers
write list = root, @ntadmin
[daten]
comment = nutzerverzeichnis
path = /daten/daten/
read only = No
[freie daten]
comment = allgemeines verzeichnis
path = /daten/freie daten/
read only = No
create mask = 0777
directory mask = 0777
force directory mode = 0777
[sicherung]
comment = geheime Daten
path = /daten/sicherung/
read only = No
create mask = 0700
force create mode = 0700
directory mask = 0700
force directory mode = 0700
-------------- next part --------------
[2005/06/13 12:20:20, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/13 12:20:20, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
wct=13 flg2=0x8003
[2005/06/13 12:20:20, 3] smbd/sesssetup.c:reply_sesssetup_and_X(801)
Domain=[WORKGROUP] NativeOS=[Windows NT 1381] NativeLanMan=[] PrimaryDomain=[Windows NT 4.0]
[2005/06/13 12:20:20, 3] smbd/sesssetup.c:reply_sesssetup_and_X(816)
sesssetupX:name=[WORKGROUP]\[wegner]@[leitinger]
[2005/06/13 12:20:20, 3] auth/auth.c:check_ntlm_password(219)
check_ntlm_password: Checking password for unmapped user [WORKGROUP]\[wegner]@[leitinger] with the new password interface
[2005/06/13 12:20:20, 3] auth/auth.c:check_ntlm_password(222)
check_ntlm_password: mapped user is: [LABOR2]\[wegner]@[leitinger]
[2005/06/13 12:20:20, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/06/13 12:20:20, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/06/13 12:20:20, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/06/13 12:20:22, 2] auth/pampass.c:smb_pam_auth(514)
smb_pam_auth: PAM: Athentication Error for user wegner
[2005/06/13 12:20:22, 2] auth/pampass.c:smb_pam_error_handler(73)
smb_pam_error_handler: PAM: Authentication Failure : Authentication failure
[2005/06/13 12:20:22, 0] auth/pampass.c:smb_pam_passcheck(810)
smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User wegner !
[2005/06/13 12:20:24, 2] auth/pampass.c:smb_pam_auth(514)
smb_pam_auth: PAM: Athentication Error for user wegner
[2005/06/13 12:20:24, 2] auth/pampass.c:smb_pam_error_handler(73)
smb_pam_error_handler: PAM: Authentication Failure : Authentication failure
[2005/06/13 12:20:24, 0] auth/pampass.c:smb_pam_passcheck(810)
smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User wegner !
[2005/06/13 12:20:24, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/13 12:20:24, 2] auth/auth.c:check_ntlm_password(312)
check_ntlm_password: Authentication for user [wegner] -> [wegner] FAILED with error NT_STATUS_WRONG_PASSWORD
[2005/06/13 12:20:24, 3] smbd/error.c:error_packet(105)
error string = Unpassender IOCTL (I/O-Control) f?r das Ger?t
[2005/06/13 12:20:24, 3] smbd/error.c:error_packet(129)
error packet at smbd/sesssetup.c(899) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE
[2005/06/13 12:20:24, 3] smbd/process.c:timeout_processing(1334)
timeout_processing: End of file from client (client has disconnected).
-------------- next part --------------
[2005/06/13 08:12:41, 3] smbd/oplock.c:init_oplocks(1351)
open_oplock_ipc: opening loopback UDP socket.
[2005/06/13 08:12:41, 3] smbd/oplock.c:init_oplocks(1382)
open_oplock ipc: pid = 10636, global_oplock_port = 32950
[2005/06/13 08:12:41, 3] smbd/process.c:process_smb(1091)
Transaction 0 of length 137
[2005/06/13 08:12:41, 3] smbd/process.c:switch_message(886)
switch message SMBnegprot (pid 10636) conn 0x0
[2005/06/13 08:12:41, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/13 08:12:41, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2005/06/13 08:12:41, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN1.0]
[2005/06/13 08:12:41, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [Windows for Workgroups 3.1a]
[2005/06/13 08:12:41, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LM1.2X002]
[2005/06/13 08:12:41, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [LANMAN2.1]
[2005/06/13 08:12:41, 3] smbd/negprot.c:reply_negprot(461)
Requested protocol [NT LM 0.12]
[2005/06/13 08:12:41, 3] smbd/negprot.c:reply_nt1(327)
not using SPNEGO
[2005/06/13 08:12:41, 3] smbd/negprot.c:reply_negprot(555)
Selected protocol NT LM 0.12
[2005/06/13 08:12:41, 3] smbd/process.c:process_smb(1091)
Transaction 1 of length 218
[2005/06/13 08:12:41, 3] smbd/process.c:switch_message(886)
switch message SMBsesssetupX (pid 10636) conn 0x0
[2005/06/13 08:12:41, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/13 08:12:41, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
wct=13 flg2=0xc807
[2005/06/13 08:12:41, 3] smbd/sesssetup.c:reply_sesssetup_and_X(801)
Domain=[] NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
[2005/06/13 08:12:41, 2] smbd/sesssetup.c:setup_new_vc_session(608)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2005/06/13 08:12:41, 3] smbd/sesssetup.c:reply_sesssetup_and_X(816)
sesssetupX:name=[]\[]@[192.168.1.2]
[2005/06/13 08:12:41, 3] smbd/sesssetup.c:check_guest_password(116)
Got anonymous request
[2005/06/13 08:12:41, 3] auth/auth.c:check_ntlm_password(219)
check_ntlm_password: Checking password for unmapped user []\[]@[] with the new password interface
[2005/06/13 08:12:41, 3] auth/auth.c:check_ntlm_password(222)
check_ntlm_password: mapped user is: []\[]@[]
[2005/06/13 08:12:41, 3] auth/auth.c:check_ntlm_password(268)
check_ntlm_password: guest authentication for user [] succeeded
[2005/06/13 08:12:41, 3] smbd/password.c:register_vuid(222)
User name: nobody Real name: nobody
[2005/06/13 08:12:41, 3] smbd/password.c:register_vuid(241)
UNIX uid 65534 is UNIX user nobody, and will be vuid 100
[2005/06/13 08:12:41, 3] smbd/process.c:chain_reply(1231)
Chained message
[2005/06/13 08:12:41, 3] smbd/process.c:switch_message(886)
switch message SMBtconX (pid 10636) conn 0x0
[2005/06/13 08:12:41, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/13 08:12:41, 3] smbd/service.c:make_connection_snum(479)
Connect path is '/tmp' for service [IPC$]
[2005/06/13 08:12:41, 3] lib/util_seaccess.c:se_access_check(251)
[2005/06/13 08:12:41, 3] lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-1266279160-574976746-2406303312-501
se_access_check: also S-1-5-21-1266279160-574976746-2406303312-514
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-32-546
se_access_check: also S-1-5-21-1266279160-574976746-2406303312-132069
[2005/06/13 08:12:41, 3] smbd/vfs.c:vfs_init_default(206)
Initialising default vfs hooks
[2005/06/13 08:12:41, 3] lib/util_seaccess.c:se_access_check(251)
[2005/06/13 08:12:41, 3] lib/util_seaccess.c:se_access_check(252)
se_access_check: user sid is S-1-5-21-1266279160-574976746-2406303312-501
se_access_check: also S-1-5-21-1266279160-574976746-2406303312-514
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-32-546
se_access_check: also S-1-5-21-1266279160-574976746-2406303312-132069
[2005/06/13 08:12:41, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2005/06/13 08:12:41, 3] smbd/service.c:make_connection_snum(642)
192.168.1.2 (192.168.1.2) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 10636)
[2005/06/13 08:12:41, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/13 08:12:41, 3] smbd/reply.c:reply_tcon_and_X(455)
tconX service=IPC$
[2005/06/13 08:12:41, 3] smbd/process.c:process_smb(1091)
Transaction 2 of length 250
[2005/06/13 08:12:41, 3] smbd/process.c:switch_message(886)
switch message SMBsesssetupX (pid 10636) conn 0x0
[2005/06/13 08:12:41, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/13 08:12:41, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
wct=13 flg2=0xc807
[2005/06/13 08:12:41, 3] smbd/sesssetup.c:reply_sesssetup_and_X(801)
Domain=[PC-WEGNER] NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
[2005/06/13 08:12:41, 3] smbd/sesssetup.c:reply_sesssetup_and_X(816)
sesssetupX:name=[PC-WEGNER]\[wegner]@[192.168.1.2]
[2005/06/13 08:12:41, 3] auth/auth.c:check_ntlm_password(219)
check_ntlm_password: Checking password for unmapped user [PC-WEGNER]\[wegner]@[192.168.1.2] with the new password interface
[2005/06/13 08:12:41, 3] auth/auth.c:check_ntlm_password(222)
check_ntlm_password: mapped user is: [LABOR2]\[wegner]@[192.168.1.2]
[2005/06/13 08:12:41, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/06/13 08:12:41, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/06/13 08:12:41, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/06/13 08:12:41, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/13 08:12:41, 2] auth/auth.c:check_ntlm_password(312)
check_ntlm_password: Authentication for user [wegner] -> [wegner] FAILED with error NT_STATUS_LOGON_FAILURE
[2005/06/13 08:12:41, 3] smbd/error.c:error_packet(129)
error packet at smbd/sesssetup.c(899) cmd=115 (SMBsesssetupX) NT_STATUS_LOGON_FAILURE
[2005/06/13 08:12:51, 3] smbd/process.c:process_smb(1091)
Transaction 3 of length 260
[2005/06/13 08:12:51, 3] smbd/process.c:switch_message(886)
switch message SMBsesssetupX (pid 10636) conn 0x0
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/13 08:12:51, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
wct=13 flg2=0xc807
[2005/06/13 08:12:51, 3] smbd/sesssetup.c:reply_sesssetup_and_X(801)
Domain=[labor2] NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[]
[2005/06/13 08:12:51, 3] smbd/sesssetup.c:reply_sesssetup_and_X(816)
sesssetupX:name=[labor2]\[wegner]@[192.168.1.2]
[2005/06/13 08:12:51, 3] auth/auth.c:check_ntlm_password(219)
check_ntlm_password: Checking password for unmapped user [labor2]\[wegner]@[192.168.1.2] with the new password interface
[2005/06/13 08:12:51, 3] auth/auth.c:check_ntlm_password(222)
check_ntlm_password: mapped user is: [labor2]\[wegner]@[192.168.1.2]
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/06/13 08:12:51, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/06/13 08:12:51, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/06/13 08:12:51, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2005/06/13 08:12:51, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2005/06/13 08:12:51, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2005/06/13 08:12:51, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2005/06/13 08:12:51, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2005/06/13 08:12:51, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2005/06/13 08:12:51, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 2
[2005/06/13 08:12:51, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 1
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 2
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/13 08:12:51, 3] auth/auth.c:check_ntlm_password(268)
check_ntlm_password: unix authentication for user [wegner] succeeded
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2005/06/13 08:12:51, 3] smbd/uid.c:push_conn_ctx(365)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:set_sec_ctx(288)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2005/06/13 08:12:51, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/13 08:12:51, 2] auth/auth.c:check_ntlm_password(305)
check_ntlm_password: authentication for user [wegner] -> [wegner] -> [wegner] succeeded
More information about the samba
mailing list