samba - Nov 1998 - The credentials supplied conflict with .....

Hi,

I recently tried to connect to a samba share as my user name, and then
disconnected the share to try and reconnect as root.  I got the message
"The credentials supplied conflict with an existing set of
credentials".

Someone recently mentionned that this was a security feature on the NT
side.  Well, seems Microsoft is claiming this is actually a bug.  Found
the following article in their knowledge base.  I tried it, it works for
NT Workstations.  Maybe someone can follow up and verify if it works
with Win95, although I seem to remember that Win 95 doesn't accept IP
addresses for server name.

SYMPTOMS
Windows NT allows users to connect to multiple resources using multiple
user credentials but only allows a single user to use a connection. 
If you attempt to connect to the same resource with different
credentials, you will get an error message stating that the credentials
supplied conflict with an existing set of credentials. If you attempt
this operation from an MS-DOS command line, you receive the following
error: 
   System error 1219 has occurred.
CAUSE
Windows NT will attempt to use the same virtual circuit even if a
different set of credentials is supplied because the resource name is
identical. 
RESOLUTION
Provide the TCP/IP address of the computer instead of the computer name.

MORE INFORMATION
It is possible to use multiple user credentials to connect to the same
resource on Windows NT when TCP/IP is used as the protocol to establish
the connection. 
If you connect to the same resource but use the TCP/IP address of the
host instead of the computer name, you will be able to connect to the
same resource with a different set of credentials. 	

Marc Provencher
Foxboro Calgary, Systems Integration and IT
(403) 777-4275
mprovenc@foxboro.ca

-----BEGIN PGP SIGNED MESSAGE-----

mprovenc@foxboro.ca ("Provencher, Marc") writes:
> If you connect to the same resource but use the TCP/IP address of the
> host instead of the computer name, you will be able to connect to the
> same resource with a different set of credentials. 	
And what do I do when I want to use a third set of credentials? If I
understand this correctly, then this is a terrible hack. To me it
sounds as if NT differentiates the connection to use by char-by-char
comparing the 'server name'. Maybe towards samba servers any number of
credentials can be used by putting different server names pointing to
the same ip address into the local LMHOSTS? What does MS recommend to
do in this case?

Volker

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3i
Charset: noconv

iQCVAwUBNkV5fz/9BWnmOc5FAQGp+wP9HJFeqrcYaST7IEE/n76eqn1PvKWLsUc1
EQXH4RyuAhV+XId1foEWQzSUJFJH+iNis8Xbn6lOS0Cwd7kuEH+tbym3mR12pYbr
jvcTsFxMZ8ca6fhSeYGPFuDk47JXm2DiIb4b/wsQwddk5+rpmfV8qcti2cP54GiX
lUxeyHNcp9E=Xldi
-----END PGP SIGNATURE-----