[Samba] Bad Password

Thu Apr 27 13:29:26 GMT 2006

Everyone,

            I am going nuts trying to figure this problem out.  I have
successfully joined a SUSE 10 server to our domain and configured samba
for ADS authentication.  This exact setup works on all my other servers.
On this one, I keep getting access denied when entering my domain
password despite the fact that I have tried it literally dozens of
times.  I am 100% confident I am entering the password correctly.  It
appears winbind is not sending the password to the domain in the proper
manner.  Can anyone help me?

Thanks,

Ron

Here is what is in the log.wb-NA file after I enter my password...

[2006/04/26 11:09:15, 10]
nsswitch/winbindd_dual.c:child_process_request(359)

  process_request: request fn LOOKUPNAME

[2006/04/26 11:09:15, 3]
nsswitch/winbindd_async.c:winbindd_dual_lookupname(695)

  [ 8465]: lookupname NA\trimblrd

[2006/04/26 11:09:15, 10]
nsswitch/winbindd_cache.c:refresh_sequence_number(359)

  refresh_sequence_number: NA time ok

[2006/04/26 11:09:15, 10]
nsswitch/winbindd_cache.c:refresh_sequence_number(387)

  refresh_sequence_number: NA seq number is now 24046271

[2006/04/26 11:09:15, 10] nsswitch/winbindd_cache.c:centry_expired(416)

  centry_expired: Key NS/NA/TRIMBLRD for domain NA expired

[2006/04/26 11:09:15, 10] nsswitch/winbindd_cache.c:wcache_fetch(473)

  wcache_fetch: entry NS/NA/TRIMBLRD expired for domain NA

[2006/04/26 11:09:15, 10] nsswitch/winbindd_cache.c:name_to_sid(975)

  name_to_sid: [Cached] - doing backend query for name for domain NA

[2006/04/26 11:09:15, 3] nsswitch/winbindd_rpc.c:msrpc_name_to_sid(257)

  rpc: name_to_sid name=NA\trimblrd

[2006/04/26 11:09:15, 3] nsswitch/winbindd_rpc.c:msrpc_name_to_sid(265)

  name_to_sid [rpc] trimblrd for domain NA

[2006/04/26 11:09:15, 10]
nsswitch/winbindd_cache.c:wcache_save_name_to_sid(614)

  wcache_save_name_to_sid: TRIMBLRD ->
S-1-5-21-725345543-2052111302-527237240-26634

[2006/04/26 11:09:15, 10]
nsswitch/winbindd_cache.c:cache_store_response(1493)

  Storing response for pid 8466, len 1304

[2006/04/26 11:09:15, 10] nsswitch/winbindd_dual.c:dual_client_read(53)

  client_read: read 1828 bytes. Need 0 more for a full request.

[2006/04/26 11:09:15, 4] nsswitch/winbindd_dual.c:fork_domain_child(486)

  child daemon request 48

[2006/04/26 11:09:15, 10]
nsswitch/winbindd_dual.c:child_process_request(359)

  process_request: request fn DUAL_USERINFO

[2006/04/26 11:09:15, 3]
nsswitch/winbindd_user.c:winbindd_dual_userinfo(146)

  [ 8465]: lookupsid S-1-5-21-725345543-2052111302-527237240-26634

[2006/04/26 11:09:15, 10]
nsswitch/winbindd_cache.c:refresh_sequence_number(359)

  refresh_sequence_number: NA time ok

[2006/04/26 11:09:15, 10]
nsswitch/winbindd_cache.c:refresh_sequence_number(387)

  refresh_sequence_number: NA seq number is now 24046271

[2006/04/26 11:09:15, 10] nsswitch/winbindd_cache.c:centry_expired(416)

  centry_expired: Key U/S-1-5-21-725345543-2052111302-527237240-26634
for domain NA expired

[2006/04/26 11:09:15, 10] nsswitch/winbindd_cache.c:wcache_fetch(473)

  wcache_fetch: entry U/S-1-5-21-725345543-2052111302-527237240-26634
expired for domain NA

[2006/04/26 11:09:15, 10] nsswitch/winbindd_cache.c:query_user(1105)

  sid_to_name: [Cached] - doing backend query for info for domain NA

[2006/04/26 11:09:15, 3] nsswitch/winbindd_ads.c:query_user(396)

  ads: query_user

[2006/04/26 11:09:15, 7]
nsswitch/winbindd_ads.c:ads_cached_connection(48)

  Current tickets expire at 1146099562, time is now 1146064155

[2006/04/26 11:09:15, 3] nsswitch/winbindd_ads.c:query_user(442)

  ads query_user gave TRIMBLRD

[2006/04/26 11:09:15, 10]
nsswitch/winbindd_cache.c:refresh_sequence_number(359)

  refresh_sequence_number: NA time ok

[2006/04/26 11:09:15, 10]
nsswitch/winbindd_cache.c:refresh_sequence_number(387)

  refresh_sequence_number: NA seq number is now 24046271

[2006/04/26 11:09:15, 10]
nsswitch/winbindd_cache.c:wcache_save_user(653)

  wcache_save_user: S-1-5-21-725345543-2052111302-527237240-26634
(acct_name TRIMBLRD)

[2006/04/26 11:09:15, 10]
nsswitch/winbindd_cache.c:cache_store_response(1493)

  Storing response for pid 8466, len 1304

[2006/04/26 11:09:15, 10] nsswitch/winbindd_dual.c:dual_client_read(53)

  client_read: read 1828 bytes. Need 0 more for a full request.

[2006/04/26 11:09:15, 4] nsswitch/winbindd_dual.c:fork_domain_child(486)

  child daemon request 18

[2006/04/26 11:09:15, 10]
nsswitch/winbindd_dual.c:child_process_request(359)

  process_request: request fn LOOKUPSID

[2006/04/26 11:09:15, 3]
nsswitch/winbindd_async.c:winbindd_dual_lookupsid(589)

  [ 8465]: lookupsid S-1-5-21-725345543-2052111302-527237240-26634

[2006/04/26 11:09:15, 10]
nsswitch/winbindd_cache.c:refresh_sequence_number(359)

  refresh_sequence_number: NA time ok

[2006/04/26 11:09:15, 10]
nsswitch/winbindd_cache.c:refresh_sequence_number(387)

  refresh_sequence_number: NA seq number is now 24046271

[2006/04/26 11:09:15, 10] nsswitch/winbindd_cache.c:centry_expired(416)

  centry_expired: Key SN/S-1-5-21-725345543-2052111302-527237240-26634
for domain NA expired

[2006/04/26 11:09:15, 10] nsswitch/winbindd_cache.c:wcache_fetch(473)

  wcache_fetch: entry SN/S-1-5-21-725345543-2052111302-527237240-26634
expired for domain NA

[2006/04/26 11:09:15, 10] nsswitch/winbindd_cache.c:sid_to_name(1037)

  sid_to_name: [Cached] - doing backend query for name for domain NA

[2006/04/26 11:09:15, 3] nsswitch/winbindd_rpc.c:msrpc_sid_to_name(303)

  sid_to_name [rpc] S-1-5-21-725345543-2052111302-527237240-26634 for
domain NA

[2006/04/26 11:09:15, 5] nsswitch/winbindd_rpc.c:msrpc_sid_to_name(317)

  Mapped sid to [NA]\[TRIMBLRD]

[2006/04/26 11:09:15, 10]
nsswitch/winbindd_cache.c:refresh_sequence_number(359)

  refresh_sequence_number: NA time ok

[2006/04/26 11:09:15, 10]
nsswitch/winbindd_cache.c:refresh_sequence_number(387)

  refresh_sequence_number: NA seq number is now 24046271

[2006/04/26 11:09:15, 10]
nsswitch/winbindd_cache.c:wcache_save_sid_to_name(633)

  wcache_save_sid_to_name: S-1-5-21-725345543-2052111302-527237240-26634
-> TRIMBLRD

[2006/04/26 11:09:15, 10]
nsswitch/winbindd_cache.c:cache_store_response(1493)

  Storing response for pid 8466, len 1304

[2006/04/26 11:09:17, 10] nsswitch/winbindd_dual.c:dual_client_read(53)

  client_read: read 1828 bytes. Need 0 more for a full request.

[2006/04/26 11:09:17, 4] nsswitch/winbindd_dual.c:fork_domain_child(486)

  child daemon request 12

[2006/04/26 11:09:17, 10]
nsswitch/winbindd_dual.c:child_process_request(359)

  process_request: request fn PAM_AUTH

[2006/04/26 11:09:17, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth(252)

  [ 8465]: pam auth NA\trimblrd

[2006/04/26 11:09:17, 3]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth(400)

  winbindd_pam_auth: sam_logon returned ACCESS_DENIED.  Maybe the trust
account password was changed and we didn't know it. Killing connections
to domain NA

[2006/04/26 11:09:17, 8] nsswitch/winbindd_cm.c:connection_ok(806)

  Connection to USTR-NADC1 for domain NA has NULL cli!

[2006/04/26 11:09:17, 3] nsswitch/winbindd_cm.c:cm_get_ipc_userpass(105)

  cm_get_ipc_userpass: No auth-user defined

[2006/04/26 11:09:17, 5]
nsswitch/winbindd_cm.c:cm_prepare_connection(270)

  connecting to USTR-NADC1 from USTR-MINT-R-1 with kerberos principal
[USTR-MINT-R-1$@NA.UIS.UNISYS.COM]

[2006/04/26 11:09:17, 2]
libsmb/cliconnect.c:cli_session_setup_kerberos(532)

  Doing kerberos session setup

[2006/04/26 11:09:17, 2]
nsswitch/winbindd_pam.c:winbindd_dual_pam_auth(445)

  Plain-text authentication for user NA\trimblrd returned
NT_STATUS_WRONG_PASSWORD (PAM: 7)