[Samba] Problems with Samba Authentication (samba.i386 0:3.0.24-4.fc6 or 3.0.25rc1)

[Jeff Coffler]

Hi folks,

Be gentle - first time I've posted to this list! ;-)  I'll try and be 
complete.  If I missed something, please let me know.  I've googled and 
found some information, but nothing *quite* relevant.

Running Fedora Core 6.  Been using Samba for a long time, it's always 
been problem free.  Since the Fedora upgrade to 3.0.24-4.fc6 (I know 
this is something specific to Fedora - Samba only has one 3.0.24 
release), I'm having problems with Samba authentication.

I've learned:

1) If I compile/install 3.0.24 from source, or download the prebuilt 
3.0.24 source, it works fine.
2) If I install 3.0.24-4.fc6 via 'yum update' in Fedora, Samba fails
3) If I either install the prebuilt 3.0.25rc1 binary or build/install 
from source, 3.0.25rc1 fails

The problem:

On the Windows side (running either Windows XP SP1 or Windows 2003 
Server), if I do something like:

    net use x: \\miffy\dvd

Then I get a password prompt (I normally don't get a password prompt - 
my Windows password and smb password is the same).  If I give my 
username and password, then the 'net use' fails.  But it works fine with 
3.0.24 (built from source or downloaded from samba.org).

Thinking it might be a configuration change, I reapplied my changes to 
the distributed "smb.conf" file; this had no effect.

My Samba configuration file (/etc/samba/smb.conf) is set up for 
"security = user", no guest account, "local master = no".  The relevant 
share is set up as:

[dvd]
        comment = Music Directory
        mangled names = no
        path = /mnt/storage/mythdvd
        writeable = yes
        inherit owner = yes
        admin users = jeff

In file smbd.log:

[2007/04/15 04:38:27, 1] smbd/server.c:open_sockets_smbd(408)
  Reloading services after SIGHUP
[2007/04/19 08:40:21, 0] smbd/server.c:main(847)
  smbd version 3.0.24-4.fc6 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2006
[2007/04/19 08:40:21, 1] lib/account_pol.c:account_policy_get(332)
  account_policy_get: tdb_fetch_uint32 failed for field 1 (min password 
length),  returning 0
[2007/04/19 08:40:21, 1] lib/account_pol.c:account_policy_get(332)
  account_policy_get: tdb_fetch_uint32 failed for field 2 (password 
history), returning 0
[2007/04/19 08:40:21, 1] lib/account_pol.c:account_policy_get(332)
  account_policy_get: tdb_fetch_uint32 failed for field 3 (user must 
logon to change password), returning 0
[2007/04/19 08:40:21, 1] lib/account_pol.c:account_policy_get(332)
  account_policy_get: tdb_fetch_uint32 failed for field 4 (maximum 
password age), returning 0
[2007/04/19 08:40:21, 1] lib/account_pol.c:account_policy_get(332)
  account_policy_get: tdb_fetch_uint32 failed for field 5 (minimum 
password age), returning 0
[2007/04/19 08:40:21, 1] lib/account_pol.c:account_policy_get(332)
  account_policy_get: tdb_fetch_uint32 failed for field 6 (lockout 
duration), returning 0
[2007/04/19 08:40:21, 1] lib/account_pol.c:account_policy_get(332)
  account_policy_get: tdb_fetch_uint32 failed for field 7 (reset count 
minutes), returning 0
[2007/04/19 08:40:21, 1] lib/account_pol.c:account_policy_get(332)
  account_policy_get: tdb_fetch_uint32 failed for field 8 (bad lockout 
attempt), returning 0
[2007/04/19 08:40:21, 1] lib/account_pol.c:account_policy_get(332)
  account_policy_get: tdb_fetch_uint32 failed for field 9 (disconnect 
time), returning 0
[2007/04/19 08:40:21, 1] lib/account_pol.c:account_policy_get(332)
  account_policy_get: tdb_fetch_uint32 failed for field 10 (refuse 
machine password change), returning 0

I'm not 100% sure if these errors relate to my attempted mount or not 
... I tried the mount more than just once, but all these were logged at 
the same point in time.

Finally, in the host specific log, I see things like:

[2007/04/19 08:56:49, 1] smbd/service.c:make_connection_snum(1033)
  jcoffler-lap (192.168.1.97) connect to service dvd initially as user 
jeff (uid=0, gid=500) (pid 31758)
[2007/04/19 08:56:59, 1] smbd/service.c:close_cnum(1230)
  jcoffler-lap (192.168.1.97) closed connection to service dvd
[2007/04/19 09:26:00, 1] smbd/service.c:make_connection_snum(1033)
  jcoffler-lap (192.168.1.97) connect to service dvd initially as user 
jeff (uid=0, gid=500) (pid 30297)
[2007/04/19 09:26:10, 1] smbd/service.c:close_cnum(1230)
  jcoffler-lap (192.168.1.97) closed connection to service dvd

But these appear to get logged even if I get the "password" prompt on 
the Windows side.

Seems version related, but I'm not really sure why.  Didn't find 
anything relevant in the release notes.  I did find issues with Vista, 
but I'm not running Vista, I'm running XP (and Windows Server - I've 
tried from both places).

Any suggestions?

    Thanks,

    -- Jeff