> I'm trying to use smbclient to look at a Vista box but I keep getting: > > # smbclient -L user-pc -U Kellie > Password: <Kellie's password> > session setup failed: NT_STATUS_LOGON_FAILURE > > I know the user/password combination is good.
I spent most of yesterday searching the web for more information. Now, I have used wireshark to look at the traffic between my Linux and Vista boxes. First I see a "Negotiate Protocol Request" message from the Linux box to the Vista box which replies with a "Negotiate Protocol Response". Then I see 3 messages which seem to correspond to the type 1, type 2 and type 3 messages of the NTLM authentication protocol as described here. http://davenport.sourceforge.net/ntlm.html#getNTLMv2Response I can see in the type 1 message, listed as "Session Setup AndX Request, NTLMSSP_NEGOTIATE" that the flag is set that Samba says it can use NTLMv2 - Negotiate NTLN2 key - Set. In the type 2 message back from the Vista box, listed as "Session Setup AndX Response, NTLMSSP_CHALLENGE, Error: STATUS_MORE_PROCESSING_REQUIRED", the same flag is set. I take this to mean that box boxes have agreed to use NTLMv2. In the type 3 message, listed as "Session Setup AndX Request, NTLMSSP_Auth, User: WORKGRPUP/Kellie", I can see that Samba is sending the correct workgroup as DOMAIN NAME, the correct host and the correct user. Is there some place on the Vista box where I can see the login attempts and get some clue as to why it sends out a final message of "Session Setup AndX Response, Error: STATUS_LOGON FAILURE"? Thanks, Steve -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
