[Fwd: Re: [Samba] password server DOMDC1 rejected the password: NT_STATUS_LOGON_FAILURE]

[Michael Chalvatzis]

and for everyone else too :)
----------------------- Αρχικό Μήνυμα ------------------------
Θέμα:               Re: [Samba] password server DOMDC1 rejected the
password:      NT_STATUS_LOGON_FAILURE
Από:                 glykos at gmx.net
Ημερομηνία:   Τετ, Αύγουστος 15, 2007 15:17
Προς:               "Warren Beldad" <advisory22 at gmail.com>
--------------------------------------------------------------------------

Hi Warren,

thanks for your reply. I must admit that the message points out a wrong
user or wrong password. But this happens only because my data with the new
version are not as complete as they are with the old version. And
therefore samba tries to authenticate myself to an absolute wrong back end
!!
As far as I can oversee it, samba tries to authenticate my Windows account
against the local (Linux) user database and this is something that I don't
want and that of course must fail.

I made a new test in the meanwhile with the following additional option:
log level = 10
log file = /var/log/samba.%m

with both versions. A diff on the log file of both files "samba.<ip of
client host>" produces at the end this interesting fact:

< [2007/08/15 13:11:19, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(672)
<   Got user=[mchalvatzis] domain=[DOM] workstation=[FRA-W10065] len1=24
len2=190
---
> [2007/08/15 14:57:06, 10] smbd/sesssetup.c:check_spnego_blob_complete(975)
>   check_spnego_blob_complete: needed_len = 101, pblob->length = 101
> [2007/08/15 14:57:06, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(739)
>   Got user=[] domain=[] workstation=[FRA-W10065] len1=1 len2=0

The left side is the working version 3.0.23c
the right side is the failing version 3.0.25b

You see on the failing version the user and the domain fields are empty!
Why is that?

If you need more input on this please let me know as I have all log file
in place with a working version and a failing version.

Thanks for your help
Michael
Στις Τρι, Αύγουστος 14, 2007 18:36, ο/η Warren Beldad έγραψε::
> NT_STATUS_LOGON_FAILURE means there's something wrong with the supplied
> login name and/or password
> either account does not exist or bad password.
> how did you connect? try specifying the domain name.
>