[Samba] samba 3.2.5 PDC guest access lost

[Alexander]

it seems the problem lays here:
auth/auth_server.c

/* if logged in as guest then reject */
	if ((SVAL(cli->inbuf,smb_vwv2)&  1) != 0) {
		DEBUG(1,("password server %s gave us guest only\n", cli->desthost));
		nt_status = NT_STATUS_LOGON_FAILURE;
	}


question is why ?
another domain member (samba 3.2.5) get guest access OK through this 
same PDC.

any help please

On 04.04.2011 17:30, Alexander wrote:
> Hi all,
>
> I had linux samba 3.0.10 running as PDC of my domain which does only 
> authentication
> for other linux samba boxes which are providing access to shares.
> After upgrade of PDC to Debian Lenny + samba 3.2.5 I've lost guess 
> access to the shares which are run by samba 3.0.x boxes,
> while it works on samba 3.2.5 samba box. the scheme is like following :
>
>
>                                                   _      [samba box 
> 3.0.10] <-------  (not working)
>                                     (auth)   /                       
>                                             \
> <<----- 
> /                                                                     \
> PDC [samba 3.5.2] 
>                                                                                       
> client (guest access)
> <<-----                                                                     
>   /
>                                                
> \                                                                    /
>                                      (auth)  \_       [samba box 
> (3.5.2] <------- (working)
>
>
>
> on PDC in smb.conf regarding guest access i have :
> map to guest = Bad User
> guest account = pcguest
> and pcguest unix account does exist.
>
> on samba box's guest ok = yes is set .
>
> in the logs of samba box  where it's working (3.0.10) , among many 
> things , i could find :
>
> [2011/03/16 20:37:41, 1] auth/auth_server.c:check_smbserver_security(373)
>   password server * gave us guest only
>
> which is not reported from 3.2.5 box.
>
>
> Any help / advice would be highly appreciated.
>
> -- 
> best regards,
> Alexander