Folks: I've got several systems attached to a 2003 domain where we use kerberos to authenticate.
When I upgraded a system to the latest greatest samba things stopped working. Just to find where it happened in the different versions of samba I downloaded, built, & ran 3.0.23d to 3.0.25c using the same smb.conf file. Turns out the 2.0.23d and 3.0.24 works but from 3.0.25 on it fails. When it fails it prompts users to login and the system isn't in the proper domain any more so not sure where the issue is. I've looked at the 25 change log but frankly don't see anything obvious that would have caused this...... Here's the globals section of my smb.conf file: [global] workgroup = XYZ interfaces = 1xx.2xx.9.5/24 comment = Timmy, Samba Server version %v #status = yes browseable = yes guest account = nobody invalid users = root, daemon hosts allow = 1xx.2xx. 127. lock directory = /var/lock/subsys/smb log file = /var/log/samba/%m.log syslog = 1 getwd cache = yes socket options = TCP_NODELAY keep alive = 3600 dead time = 30 locking = yes security = server # ntlm auth = no lanman auth = no client lanmn auth = no client ntlmv2 auth = yes # password server = xxxxxx.yyy.zzzzz.org local master = no os level = 33 domain master = no preferred master = no wins support = no wins server = 1xx.2xx.181.100 dns proxy = no #client code page = 437 netbios aliases = timmy ----------------------------------------------------------------------------------------------- >From the log files.......... /var/log/samba/winxpclient.log file: ....when it works ...... [2008/01/16 17:21:13, 1] smbd/service.c:make_connection_snum(950) jarosa (1xx.2xx.9.58) connect to service MWFOLSOM initially as user mwfolsom (uid=4231, gid=100) (pid 2914) [2008/01/16 17:21:39, 1] smbd/service.c:close_cnum(1150) jarosa (1xx.2xx.9.58) closed connection to service MWFOLSOM ....when it fails ..... [2008/01/16 17:35:47, 1] auth/auth_server.c:check_smbserver_security(362) password server XXXXXX.YYY.ZZZZZZ.ORG rejected the password: NT_STATUS_LOGON_FAILURE [2008/01/16 17:35:47, 1] auth/auth_server.c:check_smbserver_security(362) password server XXXXXX.YYY.ZZZZZZ.ORG rejected the password: NT_STATUS_LOGON_FAILURE [2008/01/16 17:35:50, 1] auth/auth_server.c:check_smbserver_security(362) password server XXXXXX.YYY.ZZZZZZ.ORG rejected the password: NT_STATUS_LOGON_FAILURE [2008/01/16 17:35:50, 1] auth/auth_server.c:check_smbserver_security(362) password server XXXXXX.YYY.ZZZZZZ.ORG rejected the password: NT_STATUS_LOGON_FAILURE [2008/01/16 17:35:50, 1] auth/auth_server.c:check_smbserver_security(362) password server XXXXXX.YYY.ZZZZZZ.ORG rejected the password: NT_STATUS_LOGON_FAILURE [2008/01/16 17:35:50, 1] auth/auth_server.c:check_smbserver_security(362) password server XXXXXX.YYY.ZZZZZZ.ORG rejected the password: NT_STATUS_LOGON_FAILURE [2008/01/16 17:35:50, 1] auth/auth_server.c:check_smbserver_security(362) password server XXXXXX.YYY.ZZZZZZ.ORG rejected the password: NT_STATUS_LOGON_FAILURE [2008/01/16 17:35:50, 1] auth/auth_server.c:check_smbserver_security(362) password server XXXXXX.YYY.ZZZZZZ.ORG rejected the password: NT_STATUS_ACCOUNT_LOCKED_OUT [2008/01/16 17:36:00, 1] auth/auth_server.c:check_smbserver_security(362) password server XXXXXX.YYY.ZZZZZZ.ORG rejected the password: NT_STATUS_ACCOUNT_LOCKED_OUT [2008/01/16 17:36:00, 1] auth/auth_server.c:check_smbserver_security(362) password server XXXXXX.YYY.ZZZZZZ.ORG rejected the password: NT_STATUS_ACCOUNT_LOCKED_OUT /var/log/smbd.log [2008/01/16 17:34:39, 0] smbd/server.c:main(986) standard input is not a socket, assuming -D option [2008/01/16 17:34:40, 0] passdb/pdb_smbpasswd.c:startsmbfilepwent(241) startsmbfilepwent_internal: file /usr/local/samba/private/smbpasswd did not exist. File successfully created. Any and all help much appreciated! Michael -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
