[Samba] empty authentication string sent so samba-server

[Liutauras Adomaitis]

On Wed, May 27, 2009 at 10:32 AM, Volker Schwicking <vos at bee.de> wrote:
> Come on, somebodys got to have an at least an idea :-)
>
> Volker Schwicking wrote:
>>
>> Hi,
>>
>> for the last two weeks ive been trying, to authenticate against a
>> samba-domain using a win2k3-server. the server joined the domain without
>> any problem and the basic login seems to work. but if i try to execute
>> programs from mapped network drive (mapped using a domain-logon-skript),
>> it fails with a message telling me, that i dont have sufficient rights
>> to do so.
>>
>> the share has a forced user and group like this;
>>
>> ...
>> [programm]
>>   comment = samba
>>   guest ok = yes
>>   path = /samba
>>   public = yes
>>   browseable = yes
>>   writable = yes
>>   force user = samba
>>   force group = users
>> ...
>>
>> this only happens on the win2k3-server, all xp-workstations work just
>> fine with domain-logons, network-drives, logon-skripts, etc. in the
>> samba-logs for the win2k3-server i found this:
>>
>> ...
>> [2009/05/22 09:20:51, 3] auth/auth.c:check_ntlm_password(219)
>>  check_ntlm_password:  Checking password for unmapped user
>> []\[]@[SRV_NAME] with the new password interface
>> ...
>>
>> compared to logons from an xp-workstation its missing the user/domain
>> part that should look like this:
>>
>> ...
>> [2009/05/22 09:15:45, 3] auth/auth.c:check_ntlm_password(219)
>>  check_ntlm_password:  Checking password for unmapped user
>> [WORKGROUP]\[kappen]@[BUCHHALTUNG] with the new password interface
>> ...
>>
>> does anyone have an idea what seems to be the problem with win2k3?
>> mabye its a switch i have to (de)activate on the win2k3-side?
>>
>> regards
>> volker
>>
>

There must be more log info. If you join win2k3 to samba domain it
should not be much different from winxp behavior. Then you logon to
server there must be info about user password validation.