On Tue, 4 May 2010 02:42:37 -0700 Jeremy Allison <j...@samba.org> wrote:
> On Mon, May 03, 2010 at 08:26:41PM -1000, Gary Dunn wrote:
> > This is a repost. Original sent last Friday afternoon received no
> > response. Any ideas would be appreciated. Should I try Samba 4?
> >
[snip]
> > 95 [2010/04/29 15:06:36, 2] auth/auth.c:check_ntlm_password(318)
> > 96 check_ntlm_password: Authentication for user [g8team] ->
> > [g8team]
> > FAILED with error NT_STATUS_WRONG_PASSWORD
> > 97 [2010/04/29 15:06:36, 3] smbd/error.c:error_packet_set(61)
> > 98 error packet at smbd/sesssetup.c(127) cmd=115 (SMBsesssetupX)
> > NT_STATUS_LOGON_FAILURE
>
> This is the problem. You're getting NT_STATUS_WRONG_PASSWORD.
> I'm assuming the password is correct you're typing here ?
>
> Jeremy.
>
Thanks Jeremy for taking a look at this. I do not know enough to say
whether or not you are correct. I can say that I am as certain as anyone
could be that I entered the correct password, but that is always an issue.I
will test again just to be sure, after I set up my test LAN.
The thing is, there are other lines in this log file that tell a different
story. As you noticed, things begin badly:
1 [2010/04/29 15:06:36, 3] auth/auth.c:check_ntlm_password(220)
2 check_ntlm_password: Checking password for unmapped user
[g8dr01]\[g8te...@[shafp09wk102123] with the new password interface
3 [2010/04/29 15:06:36, 3] auth/auth.c:check_ntlm_password(223)
4 check_ntlm_password: mapped user is:
[g8dr01]\[g8te...@[shafp09wk102123]
..
95 [2010/04/29 15:06:36, 2] auth/auth.c:check_ntlm_password(318)
96 check_ntlm_password: Authentication for user [g8team] -> [g8team]
FAILED with error NT_STATUS_WRONG_PASSWORD
97 [2010/04/29 15:06:36, 3] smbd/error.c:error_packet_set(61)
98 error packet at smbd/sesssetup.c(127) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
99 [2010/04/29 15:06:48, 3] smbd/process.c:smbd_process(1930)
100 receive_message_or_smb failed: NT_STATUS_END_OF_FILE, exiting
101 [2010/04/29 15:06:48, 3] smbd/sec_ctx.c:set_sec_ctx(324)
102 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
103 [2010/04/29 15:06:48, 3] smbd/connection.c:yield_connection(31)
104 Yielding connection to
105 [2010/04/29 15:06:48, 3] smbd/server.c:exit_server_common(974)
106 Server exit (normal exit)
then, during the same connection attempt we see "sam authentication":
107 [2010/04/29 15:06:56, 3] auth/auth.c:check_ntlm_password(220)
108 check_ntlm_password: Checking password for unmapped user
[g8dr01]\[g8te...@[shafp09wk102123] with the new password interface
109 [2010/04/29 15:06:56, 3] auth/auth.c:check_ntlm_password(223)
110 check_ntlm_password: mapped user is:
[g8dr01]\[g8te...@[shafp09wk102123]
..
167 [2010/04/29 15:06:56, 3] auth/auth.c:check_ntlm_password(269)
168 check_ntlm_password: sam authentication for user [g8team] succeeded
..
177 [2010/04/29 15:06:56, 2] auth/auth.c:check_ntlm_password(308)
178 check_ntlm_password: authentication for user [g8team] -> [g8team]
-> [g8team] succeeded
..
271 [2010/04/29 15:06:56, 3] smbd/password.c:register_existing_vuid(289)
272 register_existing_vuid: User name: g8team Real name: G8 Down
Range Team
273 [2010/04/29 15:06:56, 3] smbd/password.c:register_existing_vuid(299)
274 register_existing_vuid: UNIX uid 1002 is UNIX user g8team, and will
be vuid 100
275 [2010/04/29 15:06:56, 3] smbd/password.c:register_homes_share(231)
276 Adding homes service for user 'g8team' using home directory:
'/home/g8team'
The real name, uid and home folder path are all correct, taken from
/etc/passwd.
..
283 [2010/04/29 15:06:56, 3] lib/access.c:only_ipaddrs_in_list(362)
284 only_ipaddrs_in_list: list has non-ip address (10.0.1.)
285 [2010/04/29 15:06:56, 3] lib/access.c:check_access(396)
286 check_access: hostnames in host allow/deny list.
287 [2010/04/29 15:06:56, 2] lib/access.c:check_access(406)
288 Allowed connection from 10.0.1.10 (10.0.1.10)
this is correct, connections are limited to the 10.0.1.0 public network,
client is 10.0.1.10.
..
345 [2010/04/29 15:06:56, 3] smbd/service.c:make_connection_snum(1115)
346 shafp09wk102123 (10.0.1.10) connect to service IPC$ initially as
user g8team (uid=1002, gid=1002) (pid 1224)
this all looks correct, but things start to go wrong with the IPC$ share
347 [2010/04/29 15:06:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
348 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
349 [2010/04/29 15:06:56, 3] smbd/reply.c:reply_tcon_and_X(794)
350 tconX service=IPC$
351 [2010/04/29 15:06:56, 3] smbd/process.c:smbd_process(1930)
352 receive_message_or_smb failed: NT_STATUS_END_OF_FILE, exiting
What follows is another long password authentication step leading to the
requested share, "work-clear." This fails much like the IPC$ share.
..
437 [2010/04/29 15:06:56, 2] auth/auth.c:check_ntlm_password(308)
438 check_ntlm_password: authentication for user [g8team] -> [g8team]
-> [g8team] succeeded
..
590 shafp09wk102123 (10.0.1.10) connect to service work-clear initially
as user g8team (uid=1002, gid=1002) (pid 1225)
591 [2010/04/29 15:06:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
592 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
593 [2010/04/29 15:06:56, 3] smbd/reply.c:reply_tcon_and_X(794)
594 tconX service=WORK-CLEAR
595 [2010/04/29 15:06:56, 3] smbd/process.c:smbd_process(1930)
596 receive_message_or_smb failed: NT_STATUS_END_OF_FILE, exiting
597 [2010/04/29 15:06:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
598 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
599 [2010/04/29 15:06:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
600 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
601 [2010/04/29 15:06:56, 1] smbd/service.c:close_cnum(1327)
602 shafp09wk102123 (10.0.1.10) closed connection to service work-clear
603 [2010/04/29 15:06:56, 3] smbd/connection.c:yield_connection(31)
604 Yielding connection to work-clear
605 [2010/04/29 15:06:56, 3] smbd/sec_ctx.c:set_sec_ctx(324)
606 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
607 [2010/04/29 15:06:56, 3] smbd/connection.c:yield_connection(31)
608 Yielding connection to
609 [2010/04/29 15:06:56, 3] smbd/server.c:exit_server_common(974)
610 Server exit (normal exit)
In a few minutes I'll redo the test, and if I managed to bungle the
password I'll post a follow up. In the meantime, assume the password is
correct.
Could this be a permissions issue? Does Vista think that g8team, which it
knows nothing about, has no rights on the client? I assume the command
net use x: \\server\share /user:auser
would give the current Vista user access to the server on behalf of auser.
I am not logged onto the Vista client as auser. Would that explain why
authentication eventually succeeds, but the connection is refused?
Is error 67 the usual message?
Thanks again.
Gary Dunn
Open Slate Project
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
