I'm setting up a samba server that should authenticate against a samba 3.0 +Ldap PDC server. This is the situation 1) getenet passwd and getent group are ok 2) wbinfo -t -> checking the trust secret via RPC calls succeeded 3) wbinfo -g -> lists all the groups on PDC (nice!) 4) wbinfo -u -> lists all the users on PDC (nice again!) the problem is wbinfo -a test 1: a non existing user --------------------------- wbinfo -a fakeuser%fakepwd error code was NT_STATUS_NO_SUCH_USER (0xc0000064) error messsage was: No such user Could not authenticate user fakeuser%fakepwd with plaintext password challenge/response password authentication failed error code was NT_STATUS_NO_SUCH_USER (0xc0000064) error messsage was: No such user Could not authenticate user fakeuser with challenge/response so this is ok test 2: existing user with wrong password ----------------------------------------- wbinfo -a realuser%fakepwd plaintext password authentication failed error code was NT_STATUS_WRONG_PASSWORD (0xc000006a) error messsage was: Wrong Password Could not authenticate user realuser%fakepwd with plaintext password challenge/response password authentication failed error code was NT_STATUS_WRONG_PASSWORD (0xc000006a) error messsage was: Wrong Password Could not authenticate user realuser with challenge/response If I do this test multiple times the account gets correctly locked this is ok test 3: existing user with real password ---------------------------------------- wbinfo -a realuser%realpwd plaintext password authentication failed error code was NT_STATUS_NO_LOGON_SERVERS (0xc000005e) error messsage was: No logon servers Could not authenticate user realuser%realpwd with plaintext password challenge/response password authentication failed error code was NT_STATUS_NO_LOGON_SERVERS (0xc000005e) error messsage was: No logon servers Could not authenticate user realuser with challenge/response What's wrong? I'm using OpenSuSE 10.0 samba-3.0.21c-9.1.8 samba-client-3.0.21c-9.1.8 samba-winbind-3.0.21c-9.1.8 my smb.conf [global] workgroup = MYDOMAIN netbios name = MYSERVER wins server = MY.PDC.IP.NUMBER winbind separator = + map to guest = Bad User include = /etc/samba/dhcp.conf winbind use default domain = yes auth methods = guest winbind log level = 3 passdb:5 auth:10 winbind:5 security = domain Thanks Paolo