[Samba] Samba 3.0.23c won't let NT4 access shares

Thu Nov 30 23:27:55 GMT 2006

NT4.0 SP4 gives me this error when trying to access a Samba 3.0.23c server.
\\Omega300\files is not accessable
The specific network password is not correct.

omega300 is the samba server, running samaba 3.0.23.c on SCO Openserver 5.0.7.
omg180 is a Windows NT4 SP4 box.
omega is a Windows 98 box.

Passwords are not encrypted. We are also using VisionFS (SCO's smb product, 
which they no longer supply) on an Openserver 5.0.4 box and unencrypted 
passwords make life simpler. There is no problem acessing the VisionFS share
from any Windows machine.

The Win98 box, omega, has no problem accessing the Samba share and neither 
does an Win XP box.

omega300 has a user called omega and both the Win98 box and the NT box
connected to the network as user omega and used the same password.

Here is an extract from log.smbd. 
In the line
  pass_check: Checking password for user omega (l=2)
I'm not sure what the (l=2) means but I noticed that Samba runs through
a whole bunch of attempts, failing each time then we see
  pass_check: Checking password for user omega (l=6)
and the connection is made.

For the attempted connection from the NT box, we never see the (l=6). I 
don't know if that is significant but it is a difference.

The complete log file, all 8948 lines, is available upon request.

==========================================================================
...
---------------------------
try to connect from omega
---------------------------
[2006/11/06 16:54:45, 3] auth/auth.c:check_ntlm_password(224)
  check_ntlm_password:  mapped user is: [OMEGA300]\[omega]@[omega]
[2006/11/06 16:54:45, 4] auth/pass_check.c:pass_check(631)
  pass_check: Checking password for user omega (l=2)
[2006/11/06 16:54:45, 5] auth/auth.c:check_ntlm_password(273)
  check_ntlm_password: unix authentication for user [omega] FAILED with error
NT_STATUS_WRONG_PASSWORD
[2006/11/06 16:54:45, 2] auth/auth.c:check_ntlm_password(319)
  check_ntlm_password:  Authentication for user [omega] -> [omega] FAILED with
error NT_STATUS_WRONG_PASSWORD
...

[2006/11/06 16:54:45, 4] auth/pass_check.c:pass_check(631)
  pass_check: Checking password for user omega (l=6)
[2006/11/06 16:54:45, 3] auth/auth.c:check_ntlm_password(270)
  check_ntlm_password: unix authentication for user [omega] succeeded
[2006/11/06 16:54:45, 5] auth/auth.c:check_ntlm_password(296)
  check_ntlm_password:  PAM Account for user [omega] succeeded
[2006/11/06 16:54:45, 2] auth/auth.c:check_ntlm_password(309)
  check_ntlm_password:  authentication for user [omega] -> [omega] -> [omega]
succeeded
...
--------------------------------------------------
now try from omg180
--------------------------------------------------

[2006/11/06 16:58:13, 3] auth/auth.c:check_ntlm_password(224)
  check_ntlm_password:  mapped user is: [OMEGA300]\[omega]@[omg180]
[2006/11/06 16:58:13, 4] auth/pass_check.c:pass_check(631)
  pass_check: Checking password for user omega (l=2)
[2006/11/06 16:58:13, 5] auth/auth.c:check_ntlm_password(273)
  check_ntlm_password: unix authentication for user [omega] FAILED with error
NT_STATUS_WRONG_PASSWORD
[2006/11/06 16:58:13, 2] auth/auth.c:check_ntlm_password(319)
  check_ntlm_password:  Authentication for user [omega] -> [omega] FAILED with
error NT_STATUS_WRONG_PASSWORD
[2006/11/06 16:58:13, 5] auth/auth_util.c:free_user_info(1866)
  attempting to free (and zero) a user_info structure
[2006/11/06 16:58:13, 2] smbd/reply.c:reply_tcon_and_X(711)
  Serving IPC$ as a Dfs root
[2006/11/06 16:58:15, 5] auth/auth.c:make_auth_context_subsystem(500)
  Making default auth method list for security=share, encrypt passwords = no
[2006/11/06 16:58:15, 5] auth/auth.c:load_auth_module(391)
  load_auth_module: Attempting to find an auth method to match guest
[2006/11/06 16:58:15, 5] auth/auth.c:load_auth_module(416)
  load_auth_module: auth method guest has a valid init
[2006/11/06 16:58:15, 5] auth/auth.c:load_auth_module(391)
  load_auth_module: Attempting to find an auth method to match unix
[2006/11/06 16:58:15, 5] auth/auth.c:load_auth_module(416)
  load_auth_module: auth method unix has a valid init
[2006/11/06 16:58:15, 5] auth/auth_util.c:make_user_info(75)
  attempting to make a user_info for  ()
[2006/11/06 16:58:15, 5] auth/auth_util.c:make_user_info(85)
  making strings for 's user_info struct
[2006/11/06 16:58:15, 5] auth/auth_util.c:make_user_info(117)
  making blobs for 's user_info struct
[2006/11/06 16:58:15, 3] auth/auth.c:check_ntlm_password(221)
  check_ntlm_password:  Checking password for unmapped user []\[]@[] with the
new password interface
[2006/11/06 16:58:15, 3] auth/auth.c:check_ntlm_password(224)
  check_ntlm_password:  mapped user is: []\[]@[]
[2006/11/06 16:58:15, 3] auth/auth.c:check_ntlm_password(270)
  check_ntlm_password: guest authentication for user [] succeeded
[2006/11/06 16:58:15, 5] auth/auth.c:check_ntlm_password(309)
  check_ntlm_password:  guest authentication for user [] -> [] -> [nobody] succeeded
[2006/11/06 16:58:15, 5] auth/auth_util.c:free_user_info(1866)
  attempting to free (and zero) a user_info structure
[2006/11/06 16:58:15, 5] auth/auth_util.c:free_user_info(1866)
  attempting to free (and zero) a user_info structure
[2006/11/06 16:58:16, 5] auth/auth.c:make_auth_context_subsystem(500)
  Making default auth method list for security=share, encrypt passwords = no
[2006/11/06 16:58:16, 5] auth/auth.c:load_auth_module(391)
  load_auth_module: Attempting to find an auth method to match guest
[2006/11/06 16:58:16, 5] auth/auth.c:load_auth_module(416)
  load_auth_module: auth method guest has a valid init
[2006/11/06 16:58:16, 5] auth/auth.c:load_auth_module(391)
  load_auth_module: Attempting to find an auth method to match unix
[2006/11/06 16:58:16, 5] auth/auth.c:load_auth_module(416)
  load_auth_module: auth method unix has a valid init
[2006/11/06 16:58:16, 5] auth/auth.c:get_ntlm_challenge(97)
  auth_get_challenge: module guest did not want to specify a challenge
[2006/11/06 16:58:16, 5] auth/auth.c:get_ntlm_challenge(97)
  auth_get_challenge: module unix did not want to specify a challenge
[2006/11/06 16:58:16, 5] auth/auth.c:get_ntlm_challenge(137)
  auth_context challenge created by random
[2006/11/06 16:58:16, 5] auth/auth.c:get_ntlm_challenge(138)
  challenge is: 
[2006/11/06 16:58:16, 5] auth/auth_util.c:make_user_info_for_reply(363)
  make_user_info_for_reply: User passwords not in encrypted format.
[2006/11/06 16:58:16, 5] auth/auth_util.c:make_user_info_map(161)
  make_user_info_map: Mapping user [WORKGROUP]\[omega] from workstation [omg180]
[2006/11/06 16:58:16, 5] auth/auth_util.c:make_user_info(75)
  attempting to make a user_info for omega (omega)
[2006/11/06 16:58:16, 5] auth/auth_util.c:make_user_info(85)
  making strings for omega's user_info struct
[2006/11/06 16:58:16, 5] auth/auth_util.c:make_user_info(117)
  making blobs for omega's user_info struct
[2006/11/06 16:58:16, 3] auth/auth.c:check_ntlm_password(221)
  check_ntlm_password:  Checking password for unmapped user
[WORKGROUP]\[omega]@[omg180] with the new password interface
[2006/11/06 16:58:16, 3] auth/auth.c:check_ntlm_password(224)
  check_ntlm_password:  mapped user is: [OMEGA300]\[omega]@[omg180]
[2006/11/06 16:58:16, 4] auth/pass_check.c:pass_check(631)
  pass_check: Checking password for user omega (l=2)
...

[2006/11/06 16:58:16, 4] auth/pass_check.c:pass_check(631)
  pass_check: Checking password for user nobody (l=2)
[2006/11/06 16:58:16, 5] auth/auth.c:check_ntlm_password(273)
  check_ntlm_password: unix authentication for user [nobody] FAILED with error
NT_STATUS_WRONG_PASSWORD
[2006/11/06 16:58:16, 2] auth/auth.c:check_ntlm_password(319)
  check_ntlm_password:  Authentication for user [nobody] -> [nobody] FAILED with
error NT_STATUS_WRONG_PASSWORD
[2006/11/06 16:58:16, 5] auth/auth_util.c:free_user_info(1866)
  attempting to free (and zero) a user_info structure
[2006/11/06 16:58:16, 2] smbd/service.c:make_connection_snum(592)
  Invalid username/password for [files]
...

==========================================================================

Here is the smb.conf file.
It is an experiment derived from Samba By Example and adapted to 
my environment.

==========================================================================
# Samba config file - example from Samba By Example - 1.5
# Date: 2006/10/19

# Global parameters
[global]
log level = 2 smbd:5 auth:5 passdb
workgroup = WORKGROUP
printcap name = /etc/printcap
disable spoolss = Yes
show add printer wizard = No
printing = SYSV
# try this to see if NT4.0 will work
# the default is security = USER
security = SHARE 
# this is because VisionFS wanted unencrypted passwords
encrypt passwords = no
# win98 and uppercase passwords
password level = 8
[files]
comment = Work area files
path = /data/%U
read only = No
[master]
comment = Master work area files
path = /data
valid users = larry
read only = No
[printers]
comment = Print Temporary Spool Configuration
path = /var/spool/samba
printable = Yes
guest ok = Yes
use client driver = Yes
browseable = No

==========================================================================

Thnaks for your help.

Larry