I have a problem login on a samba share using a DOS client, whereas using NT/2000/XP, i connect correctly The context: Active directory arch. All NT/2000/XP are in the domain. samba version 2.2.3a-12.3 for Debian (from debian stable package). I can directly connect to my samba shares from my current xp login session. When i boot from a dos boot disk (made from 95), i log in my domain with my login/pass. However when i try to connect to my share (net use), it is refused. Here is le log on the server : [2003/07/11 12:07:32, 0] smbd/password.c:domain_client_validate(1572) domain_client_validate: unable to validate password for user MYLOGON in domain to Domain controller ip.of.my.dc. Error was NT_STATUS_WRONG_PASSWORD. however, a net use to a w2k share server work fine. I've also the default configuration for protocol level : protocol = NT1 large readwrite = No max protocol = NT1 min protocol = CORE Any idea to help me please? Regard's Vincent
On Fri, Jul 11, 2003 at 12:40:36PM +0200, Vincent.Badier@alcatel.fr wrote:> I have a problem login on a samba share using a DOS client, whereas using > NT/2000/XP, i connect correctly > > The context: > > Active directory arch. > All NT/2000/XP are in the domain. > samba version 2.2.3a-12.3 for Debian (from debian stable package). > > I can directly connect to my samba shares from my current xp login session. > When i boot from a dos boot disk (made from 95), i log in my domain with my > login/pass. However when i try to connect to my share (net use), it is > refused. Here is le log on the server : > > [2003/07/11 12:07:32, 0] smbd/password.c:domain_client_validate(1572) > domain_client_validate: unable to validate password for user MYLOGON in > domain to Domain controller ip.of.my.dc. Error was > NT_STATUS_WRONG_PASSWORD. > > however, a net use to a w2k share server work fine.Your Win2k DC is probably set to refuse 'LANMAN' encrypted passwords, as used by DOS and Win9X. Can you connect to the DC directly with this client? Andrew Bartlett
>Your Win2k DC is probably set to refuse 'LANMAN' encrypted passwords, asused>by DOS and Win9X. Can you connect to the DC directly with this client?I didn't tried to connect directly to the DC since all share i have to connect to are not here. I tried to connect to a Win2k member server and this work fine with this client
>If it is not too much trouble, you might want to try Samba 3.0 (in beata)->it tries much harder to get this stuff right. > >Andrew BartlettI tried this just before and have trouble to join the active directory domain : #/usr/local/samba/bin/net join MEMBER -s /usr/local/samba/lib/smb.conf -U MyOperatorAccount -S ip.of.my.dc [2003/07/11 14:49:35, 0] rpc_client/cli_netlogon.c:cli_nt_setup_creds(249) cli_nt_setup_creds: request challenge failed [2003/07/11 14:49:35, 1] utils/net_rpc.c:run_rpc_command(154) rpc command function failed! (NT_STATUS_INVALID_COMPUTER_NAME) Password: [2003/07/11 14:50:45, 1] libsmb/cliconnect.c:cli_full_connection(1311) failed session setup with NT_STATUS_LOGON_FAILURE [2003/07/11 14:50:45, 1] utils/net.c:connect_to_ipc(148) Cannot connect to server. Error was NT_STATUS_LOGON_FAILURE The username or password was not correct. In previous message, Someone said i need to have Kerberos and LDAP compiled. I have Kerberos but not ldap. config.h : /* Whether KRB5 is available */ #define HAVE_KRB5 1 /* Whether ldap is available */ /* #undef HAVE_LDAP */ So, does i need to spend time to really try to install the beta version or does the previous version normaly work with DOs lan manager V2.1? Regard's Vincent