samba - Oct 2005 - SOLVED RE: Can auth with smbclient, but not workstation.

Time skew........ <kicks self>
> -----Original Message-----
> From: samba-bounces+allen=gist.net.au@lists.samba.org [mailto:samba-
> bounces+allen=gist.net.au@lists.samba.org] On Behalf Of Allen
Bolderoff
> Sent: Thursday, 20 October 2005 12:22 PM
> To: samba@lists.samba.org
> Subject: [Samba] Can auth with smbclient, but not workstation.
> 
> We have a setup (that has worked since samba 3 was released), where we
> have a windows 2000 ADC, and a debian sarge based (running all current
> patches and only Debian packages (nothing related to samba/winbind is
> compiled by us) samba 3.0.xx server set up with winbind/pam to act as
a
> domain member serving files, whilst authenticating from our Windows
ADC.
> 
> - so what happens is... Ctrl-alt-del, login credentials are supplied,
> client goes to ADC, authenticates, gets given logon script, which then
> attaches drives and pulls profile from the samba server to the client-
> not rocket science - it just works, or at least it used to.
> 
> Things have been working fine for the last 2 years or so. We are very
> happy - so thanks for all of you guys' hard work - you know who you
> are....
> 
> Now, what has happened is that recently we have experienced a
situation
> where Windows XP Laptops (desktops are fine) are effectively failing
to
> authenticate to the Samba server.
> 
> So, what happens is we connect to the ADC as per normal, scripts get
> run, and all of a sudden we are getting error messages pop up about
> roaming profile not being available due to Username or Password not
> being valid.
> 
> We get system error 1326 whilst trying to reconnect to shared drives
> from the Samba server.
> 
> What we know:
> 
> - The user can log on from a workstation no problems.
> - Password is up to date on all users.
> - User can access the ADC once logged in with no problems and is
> authenticated without probs. (profile is stored on samba file server)
> - If we run smbclient -Uusername%pass //sambaserver/datashare we
connect
> fine.
> - wbinfo -a username%pass authenticates fine.
> - *if* we try to connect directly to the samba server using "net
use"
> from the client, we get "user no known or wrong password" style
errors.
> - If we try to connect via explorer - username and password is
rejected.
> 
> 
> Does anyone have any ideas?
> 
> What are the appropriate logs and files you want to see in order to
help
> us with this problem? I have quite a large range of log files,
including
> winbindd logs, samba logs in %m.%U format...
> 
> Thanks
> 
> Allen Bolderoff
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba