samba - Jun 2017 - Windows cant access shared directories after changed password with smbpasswd

Hi Rowland ,

No, we didn't .
We only change in the Samba Server.

The login used on Windows and used on Samba are different and should not
have relation (technically speaking).
Eg.:
I'm logged in with user "dbadmin" at windows and when I access the
Samba
server , on the first access I informed "cinacio" and the password
which
works fine. When I change the password of "cinacio" in samba server,
the
windows machine stops access and return to ask the user/password. I inform
the user "cinacio" and the new password, but the samba does not
authorize
and into its log show as BAD PASSWORD...
I'm know the password is OK into the Samba, because if I test using
"smbclient" it work.


2017-06-26 9:23 GMT-03:00 Rowland Penny via samba <samba at
lists.samba.org>:
> On Mon, 26 Jun 2017 09:03:31 -0300
> Cesar Martins via samba <samba at lists.samba.org> wrote:
>
> > Hi,
> >
> >
> >    - OpenSuse 42.2
> >    - Samba Version 4.4.2-11.3.1-3752-SUSE-SLE_12-x86_64
> >
> > I'm using samba for file sharing, where users have some control of
the
> > shares.
> >
> > This is a standalone server
> >
> > All works fine, the user was created and added on the samba host with
> > smbpasswd -a <user>
> >
> > *The problem is*, when the samba password is changed using smbpasswd
> > <user> , the Windows machines no longer have access. It prompts
again
> > for user/password, but suppyling the correctly credentials fails to
> > have them authenticated. If I change the password back to the
> > previous value with smbppasswd. authentication works again, without
> > prompting for the password again.
> >
> > Looks like Windows is caching the user/password and even if I supply
> > the credentials in the prompt, it's still sending the old password
to
> > the samba server.
> >
> > I'm sure the password was changed, because testing smbclient,
> > supplying the new password, it works fine.
> >
> > This problem occurs with Windows XP and Windows 8.
> >
> > *Is there someway to force "flush" this user/password at the
Windows
> > client ?* *or make this password expire....*
> >
>
> Did you change the Windows password at the same time ?
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

On Mon, 26 Jun 2017 09:46:45 -0300
Cesar Martins via samba <samba at lists.samba.org> wrote:
> Hi Rowland ,
> 
> No, we didn't .
> We only change in the Samba Server.
> 
> The login used on Windows and used on Samba are different and should
> not have relation (technically speaking).
> Eg.:
> I'm logged in with user "dbadmin" at windows and when I
access the
> Samba server , on the first access I informed "cinacio" and the
> password which works fine. When I change the password of
"cinacio" in
> samba server, the windows machine stops access and return to ask the
> user/password. I inform the user "cinacio" and the new password,
but
> the samba does not authorize and into its log show as BAD PASSWORD...
> I'm know the password is OK into the Samba, because if I test using
> "smbclient" it work.
> 
> 
Your 'samba' password and your windows password MUST be the same to
allow you to connect to a Samba share from a Windows machine without
being prompted for a password. I do not understand why, after being
prompted for the correct username & password, that it doesn't connect,
I feel this must be something to do with Windows rather than Samba.

It might help if you shared your smb.conf and told us if your windows
machines are part of a domain or a workgroup.

Rowland

2017-06-26 10:38 GMT-03:00 Rowland Penny via samba <samba at
lists.samba.org>:
> Your 'samba' password and your windows password MUST be the same to
> allow you to connect to a Samba share from a Windows machine without
> being prompted for a password. I do not understand why, after being
> prompted for the correct username & password, that it doesn't
connect,
> I feel this must be something to do with Windows rather than Samba.
>
> It might help if you shared your smb.conf and told us if your windows
> machines are part of a domain or a workgroup.
>
MJ ,
Sorry your message don't arrive at my gmail... answering here...
I have no access with "control userpasswords2" because of security
restriction of the company here, so ,
I can't test this.


Rowland,

Two correction about the situation here.

1) Where about shows BAD PASSWORD, they are the same user on windows and
samba.
   if I set the user password at Samba Server with same password of
Windows, works. Thank you for this information

2) the situation where the user of Windows and Samba Server isn't the same,
work OK at Windows XP but not at Windows 8 where they still not
authenticating ....
Analyzing the debug log I'm not able to identify why the server deny...

Here is my last attempt of configuration.

| [global]
|     server max protocol = SMB3_11
|     dns proxy = no
|     logging = file
|     load printers = no
|     printing = bsd
|     printcap name = /dev/null
|     disable spoolss = yes
|     map to guest = Bad User
|         server string = jdivm
|     store dos attributes = yes
|     acl allow execute always = true
|     multicast dns register = no
|     domain logons = no
|     local master = no
|     server role = standalone
|         netbios name = jdivm04
|     workgroup = RL
|     security = user
|     create mask = 0666
|     directory mask = 0777
|     dos charset = CP852
|     unix charset = iso-8859-1
|     log level = 1
|
|     unix extensions = no
|
|         passdb backend = tdbsam
|         usershare allow guests = No
|         domain master = No
|
|     wins support = no
|     include = /etc/samba/smb.conf.client-%I



| [Dados2]
|         guest ok = No
|         inherit acls = yes
|         path = /dados
|         read only = No
|     force group = dadosgrp
|         valid users = suporte marcelas orlando
|     create mask    = 0775
|     directory mask = 0775
|
|     wide links = yes