[Samba] NT MD4 password check failed

Craig White craigwhite at azapple.com
Thu Nov 17 16:15:05 GMT 2005


On Thu, 2005-11-17 at 23:18 +0800, Vincente Aggrippino wrote:
> On 11/17/05, Andrew Bartlett <abartlet at samba.org> wrote:
> > On Thu, 2005-11-17 at 13:11 +0800, Vincente Aggrippino wrote:
> > > I'm sorry for asking a question which has been asked so many times
> > > before, but I can't seem to find the answer...
> > >
> > > How do I get to access my home directory on a Linux server running
> > > Samba from a Windows XP client?
> > >
> > > I'm getting "NT MD4 password check failed" in the log file even though
> > > the Windows client is listed in hosts.equiv.  More information
> > > below...
> >
> > > Neither of our accounts on the Windows XP clients have passwords.  We
> > > just use the Welcome screen and click on our names.  So, I have added
> > > the host names to /etc/hosts.equiv and added hosts equiv =
> > > /etc/hosts.equiv to smb.conf so that, when the client tries to connect
> > > to the server it shouldn't need to provide a password to go with the
> > > username.  This is the part that doesn't seem to be working:
> >
> > hosts.equiv isn't really supported in Samba3.  I removed the main option
> > in the smb.conf, and hid the functionality in an auth module that nobody
> > used (I know, because nobody reported the segfault bug in it...).
> >
> > > [2005/11/17 11:37:29, 9] passdb/passdb.c:pdb_update_autolock_flag(2333)
> > >   pdb_update_autolock_flag: Account vince not autolocked, no check needed
> > > [2005/11/17 11:37:29, 4] libsmb/ntlm_check.c:ntlm_password_check(326)
> > >   ntlm_password_check: Checking NT MD4 password
> > > [2005/11/17 11:37:29, 3] libsmb/ntlm_check.c:ntlm_password_check(344)
> > >   ntlm_password_check: NT MD4 password check failed for user vince
> > >
> > >
> > > Does anyone know the solution to this problem?
> >
> > Seting a null password on the accounts should do what you want.
> That did the trick :)
> 
> I guess it's kind of insecure, but it's a closed network in my home. 
> So, all is well.  It didn't occur to me that I could set a null
> password, but I guess root can do all kinds of things that I'm not
> supposed to do.
> 
> >
> > Andrew Bartlett
> >
> > --
> > Andrew Bartlett                                http://samba.org/~abartlet/
> > Authentication Developer, Samba Team           http://samba.org
> > Student Network Administrator, Hawker College  http://hawkerc.net
> >
> >
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.4.1 (GNU/Linux)
> >
> > iD8DBQBDfGmiz4A8Wyi0NrsRAvX7AJ9NsmxeM6/9Nx/EV22+YFssIVmcJACdGdkn
> > nY5hHTkTh/1BWnl+2/S3gb0=
> > =5889
> > -----END PGP SIGNATURE-----
> 
> In trying to figure this out, I saw the question asked many times, but
> I never found the answer.  So, for the record, here's what I needed to
> do per Andrew's recommendation...
> 
> vince at home:~> su -
> Password:
> home:~ # passwd vince
> Changing password for vince.
> New Password: <just press enter>
> Bad password: too short
> Reenter New Password: <just press enter again>
> Password changed.
> home:~ # smbpasswd vince
> New SMB password: <just press enter>
> Retype new SMB password: <just press enter again>
----
for samba logins, you only needed to set the smbpasswd 

Craig


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.



More information about the samba mailing list