samba - Apr 2002 - Unable to authenticate to PDC

Greetings

Using         security = domain

We have followed the doco by deleting our samba server from the PDC,
reentering it, then issuing the smbpasswd command below. and sync'd the PDC
with the BDCs.

To add to the level of frustration, it used to work before we had to
rebuild the server. (= unhappy users...)

Running Samba 2.2.3a Solaris 8
Windows NT 4 SP 6a



Note: NET VIEW \\myserver also results in a failed PDC auth attempt.
PS


Names and IP addresses changed to protect the guilty

# /usr/local/samba/bin/smbpasswd -D 3 -j workgroup -r PDC -Uxxxxxx%yyyyy 
interface ip=xxx.yyy.zzz.20 bcast=xxx.yyy.zzz.255 nmask=255.255.255.0
resolve_lmhosts: Attempting lmhosts lookup for name PDC<0x20>
resolve_hosts: Attempting host lookup for name PDC<0x20>
Connecting to xxx.yyy.zzz.3 at port 445
error connecting to xxx.yyy.zzz.3:445 (Connection refused)
Connecting to xxx.yyy.zzz.3 at port 139
session setup ok
Domain=[workgroup] OS=[Windows NT 4.0] Server=[NT LAN Manager 4.0]
Joined domain workgroup.
# /usr/local/samba/bin/nmblookup -U PDC -R workgroup myserver
querying workgroup on xxx.yyy.zzz.3
255.255.255.255 workgroup<00>
querying myserver on xxx.yyy.zzz.3
xxx.yyy.zzz.20 myserver<00>
[global]
        oplocks = no
        level2 oplocks = no
        max log size = 50
        server string = Samba Server on myserver
        guest account = pcguest
#       security = share
        security = domain
        password server = PDC BDC
        encrypt passwords = yes
        workgroup = workgroup
        wins server = PDC
        hosts allow = 131.236. 127.
        interfaces = xxx.yyy.zzz.20


[2002/04/09 12:14:02, 0] smbd/password.c:connect_to_domain_password_server(1336)
  connect_to_domain_password_server: unable to setup the PDC credentials to mach
ine BDC. Error was : NT_STATUS_OK.
[2002/04/09 12:14:02, 0] smbd/password.c:domain_client_validate(1554)
  domain_client_validate: Domain password server not available.
[2002/04/09 12:14:02, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1367)
  unable to open passdb database.
[2002/04/09 12:14:02, 0] passdb/pdb_smbpasswd.c:pdb_getsampwnam(1367)
  unable to open passdb database.
[2002/04/09 12:14:03, 0] rpc_client/cli_netlogon.c:cli_net_auth2(157)
  cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
[2002/04/09 12:14:03, 0] rpc_client/cli_login.c:cli_nt_setup_creds(74)
  cli_nt_setup_creds: auth2 challenge failed

Anthony David <adavid@adavid.com.au> writes:
> Greetings
> 
> Using         security = domain
> 
> We have followed the doco by deleting our samba server from the PDC,
> reentering it, then issuing the smbpasswd command below. and sync'd the
PDC
> with the BDCs.
> 
> To add to the level of frustration, it used to work before we had to
> rebuild the server. (= unhappy users...)
> 
> Running Samba 2.2.3a Solaris 8
> Windows NT 4 SP 6a
> 
> 
Fixed.

Can't pinpoint which was the root cause but one of the following part of 
it:-

1. User had started a "rogue smbd" process earlier in the day just to
muddy the waters ie. subsequent daemon start tests were not working.
Killed it;
2. Assumed NT PDC must have been cacheing password from previous build
set netbios name = myserver-server and voila it all work fine after 
registration steps. Server name myserver never disappeared from NT
Server Manager display after deletion and wainting up to 45 minutes;
3. After successfully having credential accepted, went through server
registration with default "myserver" netbios name and it all worked.

users = happy

-- 
Anthony David

Gambling(n): A discretionary tax on those asleep during high school maths
http://adavid.com.au/
0xA72CE1ED fingerprint = EA1E C69E FE59 BBE1 AA4B  F354 BD09 9765 A72C E1ED