samba - Nov 1997 - Authentication problems

I am having a problem similar to the one that Jason Gerrity is having
with authentication.  Sometimes people are unable to access drives on
one of our unix servers from an NT machine.  They are prompted for their
password and when they enter it they get the message "Incorrect password
or unknown username."  These are people that have permissions on unix
and can usually access these drives from NT. It usually happens after I
reboot the server, and sometimes corrects itself when I reboot again. I
don't know if this could be related or not, but it never happens when
people try to accees drives on the server we have NIS+ on, but it
happens to people trying to access drives on our second server.  There
is a group of people that it sometimes happens to, and some people that
it never happens to.  I can't see any real pattern except that it seems
to be related to rebooting the server.  We are running Solaris 2.5.1 and
Windows NT 4.0.  Does anyone have any ideas what could be causing this?

hi... i've got Samba 1.9.17p4 running on a RedHat 4.2 Linux box... with a
2.0.32 kernel... with pam-0.57-4... and pwdb-0.54-4 installed... what
happens when i start samba... is that on an NT machine... i am able to
connect to a Samba network drive the first time... giving username and
password... but if i open network neighbourhood... and browse the linux
box which has Samba on it... log out... and then log back in... i am
unable to connect to that Samba drive again... i guess it is an
authentication problem...

/etc/pam.d/samba looks like this...

#%PAM-1.0
auth       required     /lib/security/pam_pwdb.so shadow nullok
account    required     /lib/security/pam_pwdb.so

which is fine... and the major options i have enabled in smb.conf are...

   security = user

and that's about it... the domain controller stuff and everything that
relates to that is commented out... also i have the registry updated to
enable plain text passwords...

the error message i get when i try to browse again is...

incorrect password / unknown username for //samba-server

i have to restart samba... in order to make everything work again

Pat.

i am trying to set up a bunch of users on a freeBSD box with smb access to
their home accounts from windows.  I decided to use homes as the method to
do this. everything is almost working i was able to edit the smb.conf with
swat and the only problem is i can't get the password correct.. i added the
users with smbpasswd -a <user> .... when i run testparm everything seems
to
check out ok with the smb.conf file.... is it possible that it is not
authenticating? do i need to set a path for another password file? i am
kinda stuck could someone give me some advice on what to try?  thanks...

b

My samba server is a member of my w2k3 mixed mode domain via 'net ads
join'

all users and groups can be seen with wbinfo + getent

net ads commands show proper information

I can connect to my local machine using winbind via /etc/pam.d/login

but when my windows clients try to connect to any share, I receive:

ads_verify_ticket: krb5_rd_req with auth failed (bad encryption)

The machine account looks fine from both sides.

I have signing turned off on the w2k3 server, and I have allowed anonymous
queries.

I've run out of clues on this one.

While unable to actually fix ADS client authentication, I did fix my setup. 

I can still use the computer account created with the 'net join ads'
command. 

I simply changed to security = domain, and removed the realm = entirely. 

I assume the following only works if the windows 2003 DC is running in
'mixed mode' domain support

Here is the smb.conf which fixes my problem: 

[global]
security = DOMAIN
workgroup = MYDOMAIN
password server = DC1, DC2, *
encrypt passwords = yes
wins server = 192.168.0.1
netbios name = MYSAMBA
winbind separator = + 
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind use default domain = yes
winbind enum users = yes
winbind enum groups = yes
obey pam restrictions = yes
template homedir = /est/home/share/%U
template shell = /bin/bash
server string = 
name resolve order = wins bcast lmhosts 
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
max log size = 4096
log file = /var/log/samba/%m
local master = yes
domain logons = no
domain master = no
preferred master = no
wins support = no
wins proxy = no
dns proxy = no 
preserve case = no
short preserve case = no
 
[homes]
write cache size = 64000
comment = "%U"
browseable = no
public = no
read only = no
guest ok = no
valid users = "@Domain Users", "@Enterprise Admins"
force group = "Domain Users"
vfs object = recycle
vfs_recycle_bin:noversions vfs_recycle_bin:exclude_dir vfs_recycle_bin:exclude
vfs_recycle_bin:maxsize = 0
vfs_recycle_bin:touch = yes
vfs_recycle_bin:versions = yes
vfs_recycle_bin:keeptree = yes
vfs_recycle_bin:repository = .recycle
 
[upload]
write cache size = 64000
browseable = yes
comment = user uploads
path = /upload/share
read only = yes
public = yes
write list = "@Domain Users", "@Enterprise Admins"
force group = "Domain Users"
vfs object = extd_audit recycle
vfs_recycle_bin:noversions vfs_recycle_bin:exclude_dir vfs_recycle_bin:exclude
vfs_recycle_bin:maxsize = 0
vfs_recycle_bin:touch = yes
vfs_recycle_bin:versions = yes
vfs_recycle_bin:keeptree = yes
vfs_recycle_bin:repository = .recycle/%U
 
[documents]
write cache size = 64000
browseable = yes
comment = documents
path = /documents/share
read only = no
public = yes
guest ok = yes
valid users = "@Domain Users", "@Enterprise Admins"
force group = "Domain Users"
vfs object = extd_audit recycle
vfs_recycle_bin:noversions vfs_recycle_bin:exclude_dir vfs_recycle_bin:exclude
vfs_recycle_bin:maxsize = 0
vfs_recycle_bin:touch = yes
vfs_recycle_bin:versions = yes
vfs_recycle_bin:keeptree = yes
vfs_recycle_bin:repository = .recycle/%U
 
[tftp]
write cache size = 64000
browseable = yes
comment = tftp
path = /tftp/share
read only = no
public = no
guest ok = yes
valid users = "@Enterprise Admins", "@Domain Users"
force group = "Domain Users"
vfs object = extd_audit recycle
vfs_recycle_bin:noversions vfs_recycle_bin:exclude_dir vfs_recycle_bin:exclude
vfs_recycle_bin:maxsize = 0
vfs_recycle_bin:touch = yes
vfs_recycle_bin:versions = yes
vfs_recycle_bin:keeptree = yes
 
[public]
write cache size = 64000
browseable = yes
comment = public files
path = /public/share
read only = yes
public = yes
guest ok = yes
write list = "@Enterprise Admins"
vfs object = extd_audit recycle
vfs_recycle_bin:noversions vfs_recycle_bin:exclude_dir vfs_recycle_bin:exclude
vfs_recycle_bin:maxsize = 0
vfs_recycle_bin:touch = yes
vfs_recycle_bin:versions = yes
vfs_recycle_bin:keeptree = yes
vfs_recycle_bin:repository = .recycle/%U