[Samba] Preauthentication failed

[Urs Golla]

Hi

We have several RHEL4 and 5 servers with security=ads config and we
use winbind for authentication. Today 3 users could not logon to a
server. The message in the log was:

Aug  8 05:29:56 servername sshd(pam_unix)[7748]: authentication
failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.243.160.19
user=username
Aug  8 05:29:56 servername sshd[7748]: pam_krb5[7748]: authentication
fails for 'username' (username at DOMAIN): Authentication failure
(Preauthentication failed)
Aug  8 05:29:56 servername sshd[7748]: pam_winbind(sshd): request
failed: Wrong Password, PAM error was Authentication failure (7), NT
error was NT_STATUS_WRONG_PASSWORD
Aug  8 05:29:56 servername sshd[7748]: pam_winbind(sshd): user
'username' denied access (incorrect password or invalid membership)
Aug  8 05:31:05 servername sshd(pam_unix)[8196]: authentication
failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=10.243.160.19
user=username
Aug  8 05:31:05 servername sshd[8196]: pam_krb5[8196]: authentication
fails for 'username' (username at DOMAIN): Authentication failure
(Preauthentication failed)
Aug  8 05:31:05 servername sshd[8196]: pam_winbind(sshd): request
failed: Account locked out, PAM error was Have exhasted maximum number
of retries for service. (11), NT error was
NT_STATUS_ACCOUNT_LOCKED_OUT

After 1 hour everything was ok again (It takes 1 hour until a user is
unlocked after he was locked out).

thank you!
Urs