samba - Mar 2002 - Update: problem with authenticate to Win2K

Hi,

again my problem:

We are running a Win2K Server as PDC (active directory) and I have severe
problems when trying to access the shares with a user which is NOT set up
locally on the samba server but only on the PDC.

If I set up the user locally it works fine, but this is not what I want. I
have to use the win2k server.

here the log:

[2002/03/04 15:26:14, 0]
rpc_client/cli_netlogon.c:cli_net_sam_logon_internal(411)
  cli_net_sam_logon_internal: NT_STATUS_WRONG_PASSWORD
[2002/03/04 15:26:14, 0] smbd/password.c:domain_client_validate(1614)
  domain_client_validate: unable to validate password for user ANDREAS in
domain MYDOMAIN to Domain controller MYPDC. Error was
NT_STATUS_WRONG_PASSWORD.
[2002/03/04 15:26:14, 0] passdb/pampass.c:smb_pam_passcheck(830)
  smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User ANDREAS !

My smb.conf:

[global]
        password server = MYPDC
        printing = LPRNG
        map to guest = Bad User
        security = domain
        encrypt passwords = No
        workgroup = MYDOMAIN
        client code page = 850
        character set = ISO8859-15
        socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
        kernel oplocks = No
        netbios name = smb-server
        load printers = No
        guest account = Nobody
        os level = 33
        printcap name = /etc/printcap
        preferred master = no

[webfiles]
        path = /home
        writable = yes

Any ideas? Please help!!!


Andreas

Hi Andreas,
You cannot use encrypt passwords = no  if you are in security=domain mode.
you must use encrypt passwords=yes.
Hope this helps,
Don

-----Original Message-----
From: Andreas Altenburg [mailto:a.altenburg@fup3i.de]
Sent: Monday, March 04, 2002 2:18 PM
To: samba@lists.samba.org
Subject: [Samba] Update: problem with authenticate to Win2K


Hi,

again my problem:

We are running a Win2K Server as PDC (active directory) and I have severe
problems when trying to access the shares with a user which is NOT set up
locally on the samba server but only on the PDC.

If I set up the user locally it works fine, but this is not what I want. I
have to use the win2k server.

here the log:

[2002/03/04 15:26:14, 0]
rpc_client/cli_netlogon.c:cli_net_sam_logon_internal(411)
  cli_net_sam_logon_internal: NT_STATUS_WRONG_PASSWORD
[2002/03/04 15:26:14, 0] smbd/password.c:domain_client_validate(1614)
  domain_client_validate: unable to validate password for user ANDREAS in
domain MYDOMAIN to Domain controller MYPDC. Error was
NT_STATUS_WRONG_PASSWORD.
[2002/03/04 15:26:14, 0] passdb/pampass.c:smb_pam_passcheck(830)
  smb_pam_passcheck: PAM: smb_pam_auth failed - Rejecting User ANDREAS !

My smb.conf:

[global]
        password server = MYPDC
        printing = LPRNG
        map to guest = Bad User
        security = domain
        encrypt passwords = No
        workgroup = MYDOMAIN
        client code page = 850
        character set = ISO8859-15
        socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
        kernel oplocks = No
        netbios name = smb-server
        load printers = No
        guest account = Nobody
        os level = 33
        printcap name = /etc/printcap
        preferred master = no

[webfiles]
        path = /home
        writable = yes

Any ideas? Please help!!!


Andreas


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba