samba - Feb 2000 - samba 2.0.6 breaks domain validation (for me)

Hi,

Recently i moved from samba 2.0.5a to Samba 2.0.6 on 4 machines. Samba 2.0.5a
ran quite smooth except for oplocking problems, so i decided to upgrade.
I compiled both releases myself and used the same ./configure options both times
(but i compiled on different machines: v 2.0.5a was compiled on a HP
9000/715/50, 2.0.6 was compiled on a  HP 9000/800/K360)
I used binutils 2.9.1 and gcc 2.8.1 on HP-UX 10.20.

One machine is running fine, three others are producing error messages like
those below. The account referenced (support) is defined in a resource domain,
while the user's accounts are created in an account domain. From a users
point of view everything
works fine. As we do all validation against NT we do not have any accounts or
passwords defined on samba, we only have synchronized all NT and Unix usernames.

At first i thought the machine account's password was out out of sync so i
removed the machine account, created a new one and rejoined the domain. But that
interpretation doesn't seem to be correct and the message that really
worries me is this: "auth2
challenge failed".

Can someone advise me in what to try/where to look next?

Thanks!


Excerpt from the logs (samba):

[2000/02/15 07:29:58, 0] rpc_client/cli_netlogon.c:cli_net_auth2(160)
  cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
[2000/02/15 07:29:58, 0] rpc_client/cli_login.c:cli_nt_setup_creds(72)
  cli_nt_setup_creds: auth2 challenge failed
[2000/02/15 07:29:58, 0] smbd/password.c:domain_client_validate(1413)
  domain_client_validate: unable to setup the PDC credentials to machine TESLA.
Error was : NT_STATUS_ACCESS_DENIED.
[2000/02/15 07:29:58, 0] passdb/smbpass.c:startsmbfilepwent(50)
  startsmbfilepwent: unable to open file /opt/samba/private/smbpasswd
[2000/02/15 07:29:58, 0] passdb/passdb.c:iterate_getsmbpwnam(149)
  unable to open smb password database.
[2000/02/15 07:29:58, 1] smbd/password.c:pass_check_smb(505)
  Couldn't find user 'support' in smb_passwd file.
[2000/02/15 07:29:58, 0] passdb/smbpass.c:startsmbfilepwent(50)
  startsmbfilepwent: unable to open file /opt/samba/private/smbpasswd
[2000/02/15 07:29:58, 0] passdb/passdb.c:iterate_getsmbpwnam(149)
  unable to open smb password database.
[2000/02/15 07:29:58, 1] smbd/password.c:pass_check_smb(505)
  Couldn't find user 'support' in smb_passwd file.
[2000/02/15 07:29:58, 1] smbd/reply.c:reply_sesssetup_and_X(909)
  Rejecting user 'support': authentication failed
[2000/02/15 07:29:59, 0] rpc_client/cli_netlogon.c:cli_net_auth2(160)
  cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
[2000/02/15 07:29:59, 0] rpc_client/cli_login.c:cli_nt_setup_creds(72)
  cli_nt_setup_creds: auth2 challenge failed
[2000/02/15 07:29:59, 0] smbd/password.c:domain_client_validate(1413)
  domain_client_validate: unable to setup the PDC credentials to machine TESLA.
Error was : NT_STATUS_ACCESS_DENIED.
[2000/02/15 07:29:59, 0] passdb/smbpass.c:startsmbfilepwent(50)
  startsmbfilepwent: unable to open file /opt/samba/private/smbpasswd
[2000/02/15 07:29:59, 0] passdb/passdb.c:iterate_getsmbpwnam(149)
  unable to open smb password database.
[2000/02/15 07:29:59, 1] smbd/password.c:pass_check_smb(505)
  Couldn't find user 'support' in smb_passwd file.
[2000/02/15 07:29:59, 0] passdb/smbpass.c:startsmbfilepwent(50)
  startsmbfilepwent: unable to open file /opt/samba/private/smbpasswd
[2000/02/15 07:29:59, 0] passdb/passdb.c:iterate_getsmbpwnam(149)
  unable to open smb password database.
[2000/02/15 07:29:59, 1] smbd/password.c:pass_check_smb(505)
  Couldn't find user 'support' in smb_passwd file.
[2000/02/15 07:29:59, 1] smbd/reply.c:reply_sesssetup_and_X(909)
  Rejecting user 'support': authentication failed

NT logs this:

The session setup from the computer CICI06 failed to authenticate. The name of
the account referenced in the security database is CICI06$.  The following error
occurred:
Access is denied.  




Regards,
Reinout Wijnveen

"All those who believe in psychokinesis raise my hand"

ICT-N/Philips Semiconductors Nijmegen
Address: AC 0.039, Gerstweg 2, 6534 AE Nijmegen