samba - Nov 1998 - Getting smbpasswd file to work alongside unencrypted ones

We operate a samba('18p10) server accessed by WIN3.11, 9x & NT4 clients,
security=share. Uptil now, the NT clients have been pre service pack 3 &
therefore sent cleartext passwords. Post-SP3 we need to enable encrypted
passwords for the NT clients whilst preserving cleartext for the rest. For
various (political) reasons, we cant' get the clients to use the registry
hack to re-enable cleartext passwords.

I have, as outlined in docs/ENCRYPTION.txt, to set up an smbpasswd file &
using debug I can see the server trying in turn, the different password
protocols in response to an NT client connect request, but ultimately
failing. 

e.g.
Requested protocol [PC NETWORK PROGRAM 1.0]
Requested protocol [XENIX CORE]
Requested protocol [MICROSOFT NETWORKS 1.03]
Requested protocol [LANMAN1.0]
Requested protocol [Windows for Workgroups 3.1a]
Requested protocol [LM1.2X002]
Requested protocol [LANMAN2.1]
Requested protocol [NT LM 0.12]
Selected protocol NT LM 0.12
.........
Domain=[STAFF]  NativeOS=[Windows NT 1381] NativeLanMan=[]
sesssetupX:name=[CEDRIC]
Registered username cedric for guest access
Chained message
switch message SMBtconX (pid 23846)
1998/11/27 14:38:17 invalid username/password for cedric
1998/11/27 14:38:17 error packet at line 171 cmd=117 (SMBtconX) eclass=2
ecode=2
1998/11/27 14:38:17 Transaction 4 of length 70
etc etc

If I restart the server with encrypt passwords = yes I *can* connect to the
share using the encrypted password contained in samba/private/smbpasswd.

Has anyone been able to get the smbpasswd file to operate alongside using
the cleartext UNIX passwords ?

Les Oswald


"The woods are lovely, dark & deep, 
But I have promises to keep
And miles to go before I sleep"

Robert Frost.

                                        ____       _
                                     | __\_\_o____/_|
                                     <[___\_\_-----<
                                     |  o'
Dr R L Oswald
Computer Manager
College of Aeronautics
Hangar 3
Cranfield University
CRANFIELD, Beds. MK43 0AL UK
Tel: +44 01234-750111 x5194
Fax: +44 01234-751640
Main Web URL http://www.cranfield.ac.uk/coa/
Airfield URL http://www.coa.cranfield.ac.uk/egtc/

Hi,

On Mon, 30 Nov 1998, Dr R L Oswald wrote: 
> Has anyone been able to get the smbpasswd file to operate alongside using
> the cleartext UNIX passwords ?
Yes we have. But, differing from your environment, we are using an NT
password server, i. e. 'security = server'. This allows us access with
both
encrypted and plain passwords, even without that SMB password file! ( I have
removed it, actually!)

Some time ago, we also had 'security = share'. There was one Linux
machine
with Samba 1.9.18p10. Then, the NT 4 SP3 machines appeared, forcing us to
use encrypted passwords. So I setup an SMB password file, and it worked both
for NT 4 and WFWG users. When we then switched to 'security = server',
the
Windows machines didn't even ask for a password anymore when connecting to a
Samba share.
Now any user registered on the NT domain server (that is, the password
server) may login to the Domain from his PC and then connect to the Samba
shares without having his own account on the Samba server.

Hope this helps

Martin