Hi again!
After quite a lot of help from Christopher Hertel (Thanks, Chris!), I managed W2K to play nicey-nicey with UNICODE and plaintext passwords. It seems everything he said was pure golden truth, as detailed in the following MS KB article: http://support.microsoft.com/default.aspx?scid=kb%3Ben-us%3B257292 After installing the latest Service Packs on my test machine, apparently the problem went away (at least judging by ethereal and the Samba logs). I still haven't managed to log in properly using non-encrypted passwords, so if I find anything else I'll keep you posted. This one's probably on my side of configuration. :) Nir. -- Nir Soffer -=- Software Engineer, Exanet Inc. -=- "The poor little kittens; They lost their mittens; And now you all must die. Mew, Mew, Mew, Mew, And now you all must die." www.sluggy.com, 24/10/02 -----Original Message----- From: Nir Soffer Sent: Tuesday, March 11, 2003 4:30 PM To: '[EMAIL PROTECTED]' Subject: FW: encrypt passwords = no, security=user, samba 3.0a22 Something our QA department stumbled on: I try to log on to my Samba 3.0a22 installation (make, make install, the usual shebang). The client name is CACOMISTLE (not the NativeOS), the user name is nirs, (not the domain). Any ideas or thoughts, or are we doing something incredibly stupid? (I've been reading some stuff about not having a guest user in the passdb causing such errors, but I do have a nobody user in the password files. Shouldn't this work properly out of the box? There's a log snippet that shows this may be related..) Thanks, Nir. Log snippets: [2003/03/11 16:21:40, 5] auth/auth_util.c:debug_unix_user_token(530) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2003/03/11 16:21:40, 5] smbd/uid.c:change_to_root_user(217) change_to_root_user: now uid=(0,0) gid=(0,0) [2003/03/11 16:21:40, 4] smbd/reply.c:reply_tcon_and_X(255) Got device type ????? [2003/03/11 16:21:40, 5] smbd/service.c:make_connection(843) making a connection to 'normal' service ipc$ [2003/03/11 16:21:40, 5] lib/username.c:Get_Pwnam(288) Finding user nobody [2003/03/11 16:21:40, 5] lib/username.c:Get_Pwnam_internals(223) Trying _Get_Pwnam(), username as lowercase is nobody [2003/03/11 16:21:40, 5] lib/username.c:Get_Pwnam_internals(251) Get_Pwnam_internals did find user [nobody]! [2003/03/11 16:21:40, 3] smbd/service.c:make_connection_snum(525) Connect path is '/tmp' for service [IPC$] [2003/03/11 16:21:38, 3] smbd/sec_ctx.c:set_sec_ctx(287) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2003/03/11 16:21:38, 5] auth/auth_util.c:debug_nt_user_token(511) NT user token: (NULL) [2003/03/11 16:21:38, 5] auth/auth_util.c:debug_unix_user_token(530) UNIX token of user 0 Primary group is 0 and contains 0 supplementary groups [2003/03/11 16:21:38, 5] smbd/uid.c:change_to_root_user(217) change_to_root_user: now uid=(0,0) gid=(0,0) [2003/03/11 16:21:38, 3] smbd/sesssetup.c:reply_sesssetup_and_X(482) wct=13 flg2=0xc807 [2003/03/11 16:21:38, 3] smbd/sesssetup.c:reply_sesssetup_and_X(582) Domain=[nirs] NativeOS=[CACOMISTLE] NativeLanMan=[Windows 2000 2195] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ [2003/03/11 16:21:38, 3] smbd/sesssetup.c:reply_sesssetup_and_X(601) sesssetupX:[EMAIL PROTECTED] [2003/03/11 16:21:38, 6] param/loadparm.c:lp_file_list_changed(2347) lp_file_list_changed() file /usr/local/samba/lib/smb.conf -> /usr/local/samba/lib/smb.conf last mod_ time: Tue Mar 11 16:16:23 2003 smb.conf: [global] blocking locks = no dns proxy = no encrypt passwords = no keepalive = 120 level2 oplocks = no lock directory = /usr/local/samba/var/locks locking = no log file = /tmp/log.smbd.%m log level = 10 machine password timeout = 999999999 mangled names = no map to guest = bad user name resolve order = lmhosts wins bcast host netbios name = windlg1 oplocks = no security = user socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 veto files = /.AppleDouble/.bin/.AppleDesktop/Network Trash workgroup = exanet-qa winbind enum groups = yes winbind enum users = yes winbind gid = 10000-20000 winbind separator = + winbind uid = 10000-20000 [CIFS] comment = cifs exported dir path = /mnt/fs read only = no -- Nir Soffer -=- Software Engineer, Exanet Inc. -=- "The poor little kittens; They lost their mittens; And now you all must die. Mew, Mew, Mew, Mew, And now you all must die." www.sluggy.com, 24/10/02