samba - Oct 2010 - Winbind user authentication (-a) fails, but kerberos authentication succeeds

I am having trouble setting up winbind authentication.

I have successfully joined the domain

winbind -t OK
winbind -u OK
winbind -g OK
winbind -K 'DOMAIN\user%password' OK
winbind -a 'DOMAIN\user%password' FAIL
For winbind -a:
Plaintext authentication is attempted, and fails with 
NT_STATUS_ACCESS_DENIED
challenge/response authentication is attempted, and fails with 
NT_STATUS_ACCESS_DENIED

Am using SAMBA 3.0.33 on Redhat 5.4 patched to latest.

I have previously configured many SAMBA servers



--

This email is from Civica Pty Limited and it, together with 
any attachments, is confidential to the intended recipient(s) 
and the contents may be legally privileged or contain 
proprietary and private information. It is intended solely 
for the person to whom it is addressed. If you are not an 
intended recipient, you may not review, copy or distribute 
this email. If received in error, please notify the sender 
and delete the message from your system immediately. Any 
views or opinions expressed in this email and any files 
transmitted with it are those of the author only and may 
not necessarily reflect the views of Civica and do not create 
any legally binding rights or obligations whatsoever. Unless 
otherwise pre-agreed by exchange of hard copy documents 
signed by duly authorised representatives, contracts may not 
be concluded on behalf of Civica by email. Please note that 
neither Civica nor the sender accepts any responsibility for 
any viruses and it is your responsibility to scan the email 
and the attachments (if any). All email received and sent by 
Civica may be monitored to protect the business interests of 
Civica.

What kind of domain -  samba PDC or Windows Active Directory ?   Maybe the
samba version is just too old. 

-----Original Message-----
From: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org]
On Behalf Of Steven Moyse
Sent: Thursday, October 21, 2010 8:52 PM
To: samba at lists.samba.org
Subject: [Samba] Winbind user authentication (-a) fails, but kerberos
authentication succeeds

I am having trouble setting up winbind authentication.

I have successfully joined the domain

winbind -t OK
winbind -u OK
winbind -g OK
winbind -K 'DOMAIN\user%password' OK
winbind -a 'DOMAIN\user%password' FAIL
For winbind -a:
Plaintext authentication is attempted, and fails with 
NT_STATUS_ACCESS_DENIED
challenge/response authentication is attempted, and fails with 
NT_STATUS_ACCESS_DENIED

Am using SAMBA 3.0.33 on Redhat 5.4 patched to latest.

I have previously configured many SAMBA servers



--

This email is from Civica Pty Limited and it, together with 
any attachments, is confidential to the intended recipient(s) 
and the contents may be legally privileged or contain 
proprietary and private information. It is intended solely 
for the person to whom it is addressed. If you are not an 
intended recipient, you may not review, copy or distribute 
this email. If received in error, please notify the sender 
and delete the message from your system immediately. Any 
views or opinions expressed in this email and any files 
transmitted with it are those of the author only and may 
not necessarily reflect the views of Civica and do not create 
any legally binding rights or obligations whatsoever. Unless 
otherwise pre-agreed by exchange of hard copy documents 
signed by duly authorised representatives, contracts may not 
be concluded on behalf of Civica by email. Please note that 
neither Civica nor the sender accepts any responsibility for 
any viruses and it is your responsibility to scan the email 
and the attachments (if any). All email received and sent by 
Civica may be monitored to protect the business interests of 
Civica. 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba