Wolfgang Wegner
2005-Jun-11 21:26 UTC
[Samba] "conversion error" and NT_STATUS_LOGON_FAILURE
Hi list, sorry in case I do ask a FAQ, but I did in fact find some more mentions of a problem like this, but always without a solution. I upgraded our Samba server today (from 2.10/SuSE to 3.0x/Debian) and have problems with some of the clients (Windows XP). When trying to access a share from these clients, I get a NT_STATUS_LOGON_FAILURE, and increasing the log level reveals several occurences of things like this: [2005/06/11 17:00:45, 3] lib/charcnv.c:convert_string_internal(256) convert_string_internal: Conversion error: Illegal multibyte sequence() Neither user name nor password of the account I used do have special characters in them. It seems the client in question does not get even that far to negotiate the share, the share name does not even show up in the server log. Unfortunately I forgot to take the configuration file with me, but attached is the log (log level 3) of such a connection attempt from the client "software" (no, i did not assign that name!). Configuration basics: - plain text passwords (unix accounts) - security = user - 3 shares + printing Other clients work flawlessly (i.e. as before, with the same stupid XP cacheing and stuff), only two have these problems. The only difference I could see (as a complete non-windows-expert) is that these XP versions seem to be a bit different: the working ones are completely german while the ones with problem have many parts in english, looking like a mixed installation?! There are also some strange things with printing, but it seems to me that these are only the XP boxes requiring to re-install the printer. Any help is greatly appreciated. I can get access to the server on monday, but as I was trying so long today without any success I wanted to take the time to get some hint on what I should look for at all. Regards, Wolfgang -------------- next part -------------- [2005/06/11 17:30:12, 3] smbd/process.c:process_smb(1091) Transaction 1 of length 137 [2005/06/11 17:30:12, 3] smbd/process.c:switch_message(886) switch message SMBnegprot (pid 4566) conn 0x0 [2005/06/11 17:30:12, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:12, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [PC NETWORK PROGRAM 1.0] [2005/06/11 17:30:12, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [LANMAN1.0] [2005/06/11 17:30:12, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [Windows for Workgroups 3.1a] [2005/06/11 17:30:12, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [LM1.2X002] [2005/06/11 17:30:12, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [LANMAN2.1] [2005/06/11 17:30:12, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [NT LM 0.12] [2005/06/11 17:30:12, 3] smbd/negprot.c:reply_nt1(327) not using SPNEGO [2005/06/11 17:30:12, 3] smbd/negprot.c:reply_negprot(555) Selected protocol NT LM 0.12 [2005/06/11 17:30:12, 3] smbd/process.c:process_smb(1091) Transaction 2 of length 188 [2005/06/11 17:30:12, 3] smbd/process.c:switch_message(886) switch message SMBsesssetupX (pid 4566) conn 0x0 [2005/06/11 17:30:12, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:12, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655) wct=13 flg2=0xc807 [2005/06/11 17:30:12, 3] smbd/sesssetup.c:reply_sesssetup_and_X(801) Domain=[] NativeOS=[Windows 2002 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2005/06/11 17:30:12, 2] smbd/sesssetup.c:setup_new_vc_session(608) setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources. [2005/06/11 17:30:12, 3] smbd/sesssetup.c:reply_sesssetup_and_X(816) sesssetupX:name=[]\[]@[software] [2005/06/11 17:30:12, 3] smbd/sesssetup.c:check_guest_password(116) Got anonymous request [2005/06/11 17:30:12, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user []\[]@[] with the new password interface [2005/06/11 17:30:12, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: []\[]@[] [2005/06/11 17:30:12, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: guest authentication for user [] succeeded [2005/06/11 17:30:12, 3] smbd/password.c:register_vuid(222) User name: nobody Real name: nobody [2005/06/11 17:30:12, 3] smbd/password.c:register_vuid(241) UNIX uid 65534 is UNIX user nobody, and will be vuid 100 [2005/06/11 17:30:12, 3] smbd/process.c:chain_reply(1231) Chained message [2005/06/11 17:30:12, 3] smbd/process.c:switch_message(886) switch message SMBtconX (pid 4566) conn 0x0 [2005/06/11 17:30:12, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:12, 3] smbd/service.c:make_connection_snum(479) Connect path is '/tmp' for service [IPC$] [2005/06/11 17:30:12, 3] lib/util_seaccess.c:se_access_check(251) [2005/06/11 17:30:12, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-1266279160-574976746-2406303312-501 se_access_check: also S-1-5-21-1266279160-574976746-2406303312-514 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 se_access_check: also S-1-5-21-1266279160-574976746-2406303312-132069 [2005/06/11 17:30:12, 3] smbd/vfs.c:vfs_init_default(206) Initialising default vfs hooks [2005/06/11 17:30:12, 3] lib/util_seaccess.c:se_access_check(251) [2005/06/11 17:30:12, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-1266279160-574976746-2406303312-501 se_access_check: also S-1-5-21-1266279160-574976746-2406303312-514 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 se_access_check: also S-1-5-21-1266279160-574976746-2406303312-132069 [2005/06/11 17:30:12, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:12, 3] smbd/service.c:make_connection_snum(642) software (192.168.1.21) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 4566) [2005/06/11 17:30:12, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:12, 3] smbd/reply.c:reply_tcon_and_X(455) tconX service=IPC$ [2005/06/11 17:30:12, 3] smbd/process.c:process_smb(1091) Transaction 3 of length 122 [2005/06/11 17:30:12, 3] smbd/process.c:switch_message(886) switch message SMBtrans (pid 4566) conn 0x8402c00 [2005/06/11 17:30:12, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:12, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\LANMAN> data=0 params=26 setup=0 [2005/06/11 17:30:12, 3] smbd/ipc.c:named_pipe(334) named pipe command on <LANMAN> name [2005/06/11 17:30:12, 3] smbd/lanman.c:api_reply(3569) Got API command 104 of form <WrLehDO> <B16BBDz> (tdscnt=0,tpscnt=26,mdrcnt=4200,mprcnt=8) [2005/06/11 17:30:12, 3] smbd/lanman.c:api_reply(3573) Doing NetServerEnum [2005/06/11 17:30:12, 3] smbd/lanman.c:api_RNetServerEnum(1267) NetServerEnum domain = WORKGROUP uLevel=1 counted=3 total=3 [2005/06/11 17:30:12, 3] smbd/process.c:process_smb(1091) Transaction 4 of length 43 [2005/06/11 17:30:12, 3] smbd/process.c:switch_message(886) switch message SMBulogoffX (pid 4566) conn 0x0 [2005/06/11 17:30:12, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:12, 3] smbd/reply.c:reply_ulogoffX(1264) ulogoffX vuid=100 [2005/06/11 17:30:12, 3] smbd/process.c:process_smb(1091) Transaction 5 of length 39 [2005/06/11 17:30:12, 3] smbd/process.c:switch_message(886) switch message SMBtdis (pid 4566) conn 0x8402c00 [2005/06/11 17:30:12, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:12, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:12, 3] smbd/service.c:close_cnum(830) software (192.168.1.21) closed connection to service IPC$ [2005/06/11 17:30:12, 3] smbd/connection.c:yield_connection(69) Yielding connection to IPC$ [2005/06/11 17:30:12, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:12, 3] smbd/process.c:timeout_processing(1334) timeout_processing: End of file from client (client has disconnected). [2005/06/11 17:30:12, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:12, 2] smbd/server.c:exit_server(609) Closing connections [2005/06/11 17:30:12, 3] smbd/connection.c:yield_connection(69) Yielding connection to [2005/06/11 17:30:12, 3] smbd/server.c:exit_server(652) Server exit (normal exit) [2005/06/11 17:30:14, 3] smbd/process.c:timeout_processing(1334) timeout_processing: End of file from client (client has disconnected). [2005/06/11 17:30:14, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:14, 2] smbd/server.c:exit_server(609) Closing connections [2005/06/11 17:30:14, 3] smbd/connection.c:yield_connection(69) Yielding connection to [2005/06/11 17:30:14, 3] smbd/connection.c:yield_connection(76) yield_connection: tdb_delete for name failed with error Record does not exist. [2005/06/11 17:30:14, 3] smbd/server.c:exit_server(652) Server exit (normal exit) [2005/06/11 17:30:14, 3] smbd/process.c:process_smb(1091) Transaction 1 of length 137 [2005/06/11 17:30:14, 3] smbd/process.c:switch_message(886) switch message SMBnegprot (pid 4569) conn 0x0 [2005/06/11 17:30:14, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:14, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [PC NETWORK PROGRAM 1.0] [2005/06/11 17:30:14, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [LANMAN1.0] [2005/06/11 17:30:14, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [Windows for Workgroups 3.1a] [2005/06/11 17:30:14, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [LM1.2X002] [2005/06/11 17:30:14, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [LANMAN2.1] [2005/06/11 17:30:14, 3] smbd/negprot.c:reply_negprot(461) Requested protocol [NT LM 0.12] [2005/06/11 17:30:14, 3] smbd/negprot.c:reply_nt1(327) not using SPNEGO [2005/06/11 17:30:14, 3] smbd/negprot.c:reply_negprot(555) Selected protocol NT LM 0.12 [2005/06/11 17:30:14, 3] smbd/process.c:process_smb(1091) Transaction 2 of length 188 [2005/06/11 17:30:14, 3] smbd/process.c:switch_message(886) switch message SMBsesssetupX (pid 4569) conn 0x0 [2005/06/11 17:30:14, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:14, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655) wct=13 flg2=0xc807 [2005/06/11 17:30:14, 3] smbd/sesssetup.c:reply_sesssetup_and_X(801) Domain=[] NativeOS=[Windows 2002 2600] NativeLanMan=[Windows 2002 5.1] PrimaryDomain=[] [2005/06/11 17:30:14, 3] smbd/sesssetup.c:reply_sesssetup_and_X(816) sesssetupX:name=[]\[]@[software] [2005/06/11 17:30:14, 3] smbd/sesssetup.c:check_guest_password(116) Got anonymous request [2005/06/11 17:30:14, 3] auth/auth.c:check_ntlm_password(219) check_ntlm_password: Checking password for unmapped user []\[]@[] with the new password interface [2005/06/11 17:30:14, 3] auth/auth.c:check_ntlm_password(222) check_ntlm_password: mapped user is: []\[]@[] [2005/06/11 17:30:14, 3] auth/auth.c:check_ntlm_password(268) check_ntlm_password: guest authentication for user [] succeeded [2005/06/11 17:30:14, 3] smbd/password.c:register_vuid(222) User name: nobody Real name: nobody [2005/06/11 17:30:14, 3] smbd/password.c:register_vuid(241) UNIX uid 65534 is UNIX user nobody, and will be vuid 100 [2005/06/11 17:30:14, 3] smbd/process.c:chain_reply(1231) Chained message [2005/06/11 17:30:14, 3] smbd/process.c:switch_message(886) switch message SMBtconX (pid 4569) conn 0x0 [2005/06/11 17:30:14, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:14, 3] smbd/service.c:make_connection_snum(479) Connect path is '/tmp' for service [IPC$] [2005/06/11 17:30:14, 3] lib/util_seaccess.c:se_access_check(251) [2005/06/11 17:30:14, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-1266279160-574976746-2406303312-501 se_access_check: also S-1-5-21-1266279160-574976746-2406303312-514 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 se_access_check: also S-1-5-21-1266279160-574976746-2406303312-132069 [2005/06/11 17:30:14, 3] smbd/vfs.c:vfs_init_default(206) Initialising default vfs hooks [2005/06/11 17:30:14, 3] lib/util_seaccess.c:se_access_check(251) [2005/06/11 17:30:14, 3] lib/util_seaccess.c:se_access_check(252) se_access_check: user sid is S-1-5-21-1266279160-574976746-2406303312-501 se_access_check: also S-1-5-21-1266279160-574976746-2406303312-514 se_access_check: also S-1-1-0 se_access_check: also S-1-5-2 se_access_check: also S-1-5-32-546 se_access_check: also S-1-5-21-1266279160-574976746-2406303312-132069 [2005/06/11 17:30:14, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:14, 3] smbd/service.c:make_connection_snum(642) software (192.168.1.21) connect to service IPC$ initially as user nobody (uid=65534, gid=65534) (pid 4569) [2005/06/11 17:30:14, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:14, 3] smbd/reply.c:reply_tcon_and_X(455) tconX service=IPC$ [2005/06/11 17:30:14, 3] smbd/process.c:process_smb(1091) Transaction 3 of length 106 [2005/06/11 17:30:14, 3] smbd/process.c:switch_message(886) switch message SMBntcreateX (pid 4569) conn 0x8402c00 [2005/06/11 17:30:14, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:14, 3] smbd/nttrans.c:nt_open_pipe(514) nt_open_pipe: Known pipe spoolss opening. [2005/06/11 17:30:14, 3] smbd/process.c:process_smb(1091) Transaction 4 of length 140 [2005/06/11 17:30:14, 3] smbd/process.c:switch_message(886) switch message SMBwriteX (pid 4569) conn 0x8402c00 [2005/06/11 17:30:14, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(887) api_pipe_bind_req: \PIPE\spoolss -> \PIPE\spoolss [2005/06/11 17:30:14, 3] rpc_server/srv_pipe.c:check_bind_req(762) check_bind_req for \PIPE\spoolss [2005/06/11 17:30:14, 3] smbd/pipes.c:reply_pipe_write_and_X(199) writeX-IPC pnum=725f nwritten=72 [2005/06/11 17:30:14, 3] smbd/process.c:process_smb(1091) Transaction 5 of length 63 [2005/06/11 17:30:14, 3] smbd/process.c:switch_message(886) switch message SMBreadX (pid 4569) conn 0x8402c00 [2005/06/11 17:30:14, 3] smbd/pipes.c:reply_pipe_read_and_X(242) readX-IPC pnum=725f min=1024 max=1024 nread=68 [2005/06/11 17:30:14, 3] smbd/process.c:process_smb(1091) Transaction 6 of length 458 [2005/06/11 17:30:14, 3] smbd/process.c:switch_message(886) switch message SMBtrans (pid 4569) conn 0x8402c00 [2005/06/11 17:30:14, 3] smbd/ipc.c:reply_trans(539) trans <\PIPE\> data=370 params=0 setup=2 [2005/06/11 17:30:14, 3] smbd/ipc.c:named_pipe(334) named pipe command on <> name [2005/06/11 17:30:14, 3] smbd/ipc.c:api_fd_reply(294) Got API command 0x26 on pipe "spoolss" (pnum 725f) [2005/06/11 17:30:14, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542) free_pipe_context: destroying talloc pool of size 0 [2005/06/11 17:30:14, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538) api_rpcTNP: rpc command: SPOOLSS_ADDPRINTEREX [2005/06/11 17:30:14, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542) free_pipe_context: destroying talloc pool of size 244 [2005/06/11 17:30:14, 3] smbd/process.c:process_smb(1091) Transaction 7 of length 45 [2005/06/11 17:30:14, 3] smbd/process.c:switch_message(886) switch message SMBclose (pid 4569) conn 0x8402c00 [2005/06/11 17:30:25, 3] smbd/process.c:process_smb(1091) Transaction 8 of length 43 [2005/06/11 17:30:25, 3] smbd/process.c:switch_message(886) switch message SMBulogoffX (pid 4569) conn 0x0 [2005/06/11 17:30:25, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:25, 3] smbd/reply.c:reply_ulogoffX(1264) ulogoffX vuid=100 [2005/06/11 17:30:25, 3] smbd/process.c:process_smb(1091) Transaction 9 of length 39 [2005/06/11 17:30:25, 3] smbd/process.c:switch_message(886) switch message SMBtdis (pid 4569) conn 0x8402c00 [2005/06/11 17:30:25, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:25, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:25, 3] smbd/service.c:close_cnum(830) software (192.168.1.21) closed connection to service IPC$ [2005/06/11 17:30:25, 3] smbd/connection.c:yield_connection(69) Yielding connection to IPC$ [2005/06/11 17:30:25, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:25, 3] smbd/process.c:timeout_processing(1334) timeout_processing: End of file from client (client has disconnected). [2005/06/11 17:30:25, 3] smbd/sec_ctx.c:set_sec_ctx(288) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2005/06/11 17:30:25, 2] smbd/server.c:exit_server(609) Closing connections [2005/06/11 17:30:25, 3] smbd/connection.c:yield_connection(69) Yielding connection to [2005/06/11 17:30:25, 3] smbd/server.c:exit_server(652) Server exit (normal exit)
Possibly Parallel Threads
- Cannot map guest shares in 'security = SERVER' mode on samba-3.0.9
- Access denided when join samba+ldap PDC
- Samba 2.2.4 on Redhat Linux 7.2 - Domain Auth Question
- TR: Domain logon problem with w2k client on a Samba-3 PDC
- smbpasswd -d nobody, listing still possible?
Wisdom of the Ancients
