[Samba] challenge that the password server supplied us is not the one we gave our client

[Ralf Gross]

Hi,

I've some problems with one of our samba fileserver (debian stable
3.0.14a-3sarge1). Every few weeks, I get the following error messages for
all users that want to access/mount a share:

[2006/03/16 08:52:53, 2] auth/auth.c:check_ntlm_password(312)
  check_ntlm_password:  Authentication for user [PID51C9] -> [PID51C9]
  FAILED with error NT_STATUS_LOGON_FAILURE
[2006/03/16 08:52:57, 1] auth/auth_server.c:check_smbserver_security(263)
  the challenge that the password server ($passwordserver) supplied us is
  not the one we gave our client. This just can't work :-(
[2006/03/16 08:52:57, 2] auth/auth.c:check_ntlm_password(312)
  check_ntlm_password:  Authentication for user [PID51C9] -> [PID51C9]
  FAILED with error NT_STATUS_LOGON_FAILURE
[2006/03/16 08:53:02, 1] auth/auth_server.c:check_smbserver_security(263)
  the challenge that the password server ($passwordserver) supplied us is
  not the one we gave our client. This just can't work :-(


I've no idea what this should mean. After restarting samba with
/etc/init.d/samba restart, it's working again.

[2006/03/16 08:54:09, 2] auth/auth.c:check_ntlm_password(305)
  check_ntlm_password:  authentication for user [PID51C9] -> [PID51C9] ->
  [pid51c9] succeeded

The server is not member of a doamin, but the password/domain server is
used for authentification (I have no access to this server). Most user are
member of that domain, for a few user we created local smbpasswd entries.

security = SERVER
auth methods = guest sam_ignoredomain smbserver password
server = $passwordserver
passdb backend = tdbsam, guest

This is working fine, except for the error message above, which we see
every x weeks. No (domain) user is then able to login anymore.

This config is working for some other machines which never had this problem.

Any ideas?

Ralf