[Samba] the challenge that the password server.. supplied us is not the one we gave our client

[Ralf Gross]

Hi,

periodically we are seeing the following error in our samba log. At this time
nobody can connect to the shares of this server anymore.

[2007/04/17 09:05:59, 2] auth/auth.c:check_ntlm_password(312)
  check_ntlm_password:  Authentication for user [PID33C1] -> [PID33C1] FAILED
  with error NT_STATUS_LOGON_FAILURE
[2007/04/17 09:06:03, 1] auth/auth_server.c:check_smbserver_security(263)
  the challenge that the password server (our_password_server) supplied us
  is not the one we gave our client. This just can't work :-(
[2007/04/17 09:06:03, 2] auth/auth.c:check_ntlm_password(312)
  check_ntlm_password:  Authentication for user [PID33C1] -> [PID33C1] FAILED
  with error NT_STATUS_LOGON_FAILURE
[2007/04/17 09:06:07, 1] auth/auth_server.c:check_smbserver_security(263)
  the challenge that the password server (our_password_server) supplied us
  is not the one we gave our client. This just can't work :-(

We're using security = SERVER because the server is not member of the domain.
The few users that use that server can authenticate against the ADS password server.

After restarting samba everything is fine again. Other server that use the
same config don't show this problem at the same time, hence I don't think it's
an ADS problem.

System:
Debian Sarge, Samba 3.0.14

Any hints what to look for? This problem is a bit anoying and I haven't found
much about it in the list archive.

Ralf