[Samba] Win2K autentification

[phillist at free.fr]

Hi

I have configured Samba samba-3.0.6-2.3E with openldap autentification and
smbldap-tools-0.9.1

On the Win2k client, on "System properties" => "Network identification" =>
"Properties" => "Member of" => "Domain" i put AEIF ( the name specifie on
smb.conf ) , the system ask me the login and passwd, and tell me that ins't
correct ... but on the Samba server log :


tail /var/log/samba/aeifzpro1.log

[2005/06/22 15:57:00, 2] smbd/sesssetup.c:setup_new_vc_session(608)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old
resources.
[2005/06/22 15:57:00, 2] passdb/pdb_ldap.c:init_sam_from_ldap(485)
  init_sam_from_ldap: Entry found for user: test2
[2005/06/22 15:57:00, 2] passdb/pdb_ldap.c:init_group_from_ldap(1902)
  init_group_from_ldap: Entry found for group: 513
[2005/06/22 15:57:00, 2] auth/auth.c:check_ntlm_password(305)
  check_ntlm_password:  authentication for user [test2] -> [test2] -> [test2]
succeeded
[2005/06/22 15:57:01, 2] smbd/server.c:exit_server(571)
  Closing connections


it seems i pass the autentifcation step with my Win2000 client netbios named
"aeifzpro1" whith the user test2

( this thing was declared with the smbldap-useradd.pl -w eifzpro1$ )


An idea ???

Thanks.

Philippe.

My smb.conf :

[global]
   workgroup = AEIF
   netbios name = AEIF-PDC
   server string = AEIF PDC Server
   encrypt passwords = Yes

   ; Synchro pass Unix
   passwd program = /usr/local/sbin/smbldap-passwd.pl -o %u
   passwd chat = *new*password* %n\n *new*password* %n\n *successfully*
   unix password sync = Yes

   ;  Ajout de machine via smbldap-tools
   add user script = /usr/local/sbin/smbldap-useradd.pl -w %u
   domain admin group = " @"Domain Admins" "

   ; Logs
   log file = /var/log/samba/%m.log
   log level = 2
   max log size = 5000

   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

   domain logons = Yes
   domain master = Yes
   preferred master = Yes
   os level = 65
   local master = Yes

   dns proxy = No
   wins support = Yes
   security = user

   character set = iso8859-1
   ; LDAP

   passdb backend = ldapsam:ldap://127.0.0.1/
   ldap admin dn = cn=Manager,dc=aeifmop.ibm,dc=com
   ldap suffix = dc=aeifmop.ibm,dc=com
   ldap group suffix = ou=Groups
   ldap user suffix = ou=Users
   ldap machine suffix = ou=Computers


; Répertoire scripts
[netlogon]
   comment = Network Logon Service
   path = /export/samba/netlogon
   guest ok = Yes