[Samba] net rpc info failure accessing XP: NT_STATUS_LOGON_FAILURE
Brian Hilstrom
brian.hilstrom at gmail.com
Sat Sep 20 20:04:00 GMT 2008
I'm trying to remotely shut down a Windows XP machine on my local
network using "net rpc shutdown". I'm coming across errors, so I decided
to back down to the simpler "net rpc info", thinking that there will be
fewer security settings related to seeing things than actually shutting
down the system. Here's the info for the two boxes in question:
----------------------------------
Linux box (Ubuntu 7.10):
brian at ireland:~$ uname -a
Linux ireland 2.6.22-15-386 #1 Wed Aug 20 18:11:25 UTC 2008 i686 GNU/Linux
brian at ireland:~$ net --version
Version 3.0.26a
brian at ireland:~$ net rpc info -I localhost -U samba%sambapass
Domain Name: BRIANS
Domain SID: S-1-5-21-3781685452-1013998031-819676632
Sequence number: 1221940999
Num users: 29
Num domain groups: 0
Num local groups: 0
Windows box:
Windows XP Professional, Service Pack 3
Full computer name: phoebus.
Workgroup: WORKGROUP
Shared folder: C:\share
Windows firewall: DISABLED
IP: 192.168.9.155
C:\share settings:
- Advanced/"not simple" file sharing
- Share name: share
- User limit: 10
- Permissions:
- Everyone: Read
- Lep (PHOEBUS\Lep): Full Control, Change, Read
---------------------------------
Here are the results of various commands when my XP box has 'Local
Security Settings->Local Policies->Security Options->Network access:
Sharing and security model for local accounts' set to 'Classic' (please
note that "temppass" IS the current password for the Lep user):
brian at ireland:~$ net rpc info -I phoebus
Password: (** NONE GIVEN, JUST HIT ENTER **)
Could not connect to server 192.168.9.155
Connection failed: NT_STATUS_LOGON_TYPE_NOT_GRANTED
brian at ireland:~$ net rpc info -I phoebus
Password: notapassword
Could not connect to server 192.168.9.155
Connection failed: NT_STATUS_LOGON_TYPE_NOT_GRANTED
Connection failed: NT_STATUS_LOGON_FAILURE
brian at ireland:~$ net rpc info -I phoebus -U NotAUser%notapassword
Could not connect to server 192.168.9.155
Connection failed: NT_STATUS_LOGON_TYPE_NOT_GRANTED
brian at ireland:~$ net rpc info -I phoebus -U Lep
Password: temppass
Could not connect to server 192.168.9.155
The username or password was not correct.
Connection failed: NT_STATUS_LOGON_FAILURE
brian at ireland:~$ net rpc info -I phoebus -U Lep%temppass
Could not connect to server 192.168.9.155
The username or password was not correct.
Connection failed: NT_STATUS_LOGON_FAILURE
brian at ireland:~$ net rpc info -S phoebus -U Lep%temppass
Could not connect to server phoebus
The username or password was not correct.
Connection failed: NT_STATUS_LOGON_FAILURE
brian at ireland:~$ net rpc info -I phoebus -U //PHOEBUS/Lep%temppass
Could not connect to server 192.168.9.155
Connection failed: NT_STATUS_LOGON_TYPE_NOT_GRANTED
brian at ireland:~$ net rpc info -I phoebus -U PHOEBUS/Lep%temppass
Could not connect to server 192.168.9.155
The username or password was not correct.
Connection failed: NT_STATUS_LOGON_FAILURE
brian at ireland:~$ net rpc info -I phoebus -W WORKGROUP -U Lep%temppass
Could not connect to server 192.168.9.155
The username or password was not correct.
Connection failed: NT_STATUS_LOGON_FAILURE
-------------------------------------------
Here are the results when I have 'Local Security Settings->Local
Policies->Security Options->Network access: Sharing and security model
for local accounts' set to 'Guest only':
brian at ireland:~$ net rpc info -I phoebus
Password: (** NO PASSWORD, JUST HIT ENTER **)
Could not connect to server 192.168.9.155
Connection failed: NT_STATUS_LOGON_TYPE_NOT_GRANTED
brian at ireland:~$ net rpc info -I phoebus -U Lep%temppass
Could not connect to server 192.168.9.155
Connection failed: NT_STATUS_LOGON_TYPE_NOT_GRANTED
The NT_STATUS_LOGON_TYPE_NOT_GRANTED repeats for any command I try that
actually connects to the server.
--------------------------------------------
Adding "share" to 'Security Options->Network access: Shares than can be
accessed anonymously' has no noticeable affect. The security setting
'Network access: Let Everyone permissions apply to anonymous users' is
already enabled.
Does anyone have any ideas? I'm a bit stumped as to why a perfectly
valid user can't log in.
Thanks much,
Brian
More information about the samba
mailing list