samba - May 2003 - 2.2.7a securtiy 'server' auth. problems

Hi all,

sorry if this has been asked before, but as far as I could see there's no
similar entry in the archive.

I'm using version 2.2.7a on a HP machine running HP-UX 11.11. The binaries
have been created for PA-RISC 2.0 supporting 64Bit mode.
The SAMBA has been configured to use securty = server. Password servers has been
'defined'. For a certain user (Service account used to run ClearCase on
a Windo$ 2000 PC) a username translation has been established via the
`username.map?
file (kosmol = ccvobftm). From time to time the connection to the server breaks
and the following messages are reported to the smbd logfile:

  Mapped user ccvobftm to kosmol
[2003/05/08 12:24:25, 1] smbd/password.c:server_validate(1101)
  password server  is not connected
[2003/05/08 12:24:25, 1] smbd/password.c:pass_check_smb(545)
  Couldn't find user 'kosmol' in passdb.
[2003/05/08 12:24:25, 2] smbd/reply.c:reply_sesssetup_and_X(975)
  NT Password did not match for user 'kosmol'!
[2003/05/08 12:24:25, 2] smbd/reply.c:reply_sesssetup_and_X(985)
  Defaulting to Lanman password for kosmol
[2003/05/08 12:24:25, 1] smbd/password.c:pass_check_smb(545)
  Couldn't find user 'kosmol' in passdb.
[2003/05/08 12:24:25, 1] smbd/reply.c:reply_sesssetup_and_X(1001)
  Rejecting user 'kosmol': authentication failed
[2003/05/08 12:24:25, 3] smbd/error.c:error_packet(94)
  error string = No such file or directory

yielding to an access problem (error) on the client affected (WINDO$ 2000
'workstation').
Strange thing to me is that function server_validate should printed out the
server name, too. It seems that the process lose this information (cli
deallocated?). Many thanks in advance for any hint or suggestion getting rid of
this problem.

Bye

	Frank Heckes

Frank,

Do you have encryted passwords or plain text?

- John T.

On Thu, 8 May 2003 Frank.Heckes@nokia.com wrote:
> Hi all,
>
> sorry if this has been asked before, but as far as I could see there's
no similar entry in the archive.
>
> I'm using version 2.2.7a on a HP machine running HP-UX 11.11. The
binaries have been created for PA-RISC 2.0 supporting 64Bit mode.
> The SAMBA has been configured to use securty = server. Password servers has
been 'defined'. For a certain user (Service account used to run
ClearCase on a Windo$ 2000 PC) a username translation has been established via
the `username.map?
> file (kosmol = ccvobftm). From time to time the connection to the server
breaks and the following messages are reported to the smbd logfile:
>
>   Mapped user ccvobftm to kosmol
> [2003/05/08 12:24:25, 1] smbd/password.c:server_validate(1101)
>   password server  is not connected
> [2003/05/08 12:24:25, 1] smbd/password.c:pass_check_smb(545)
>   Couldn't find user 'kosmol' in passdb.
> [2003/05/08 12:24:25, 2] smbd/reply.c:reply_sesssetup_and_X(975)
>   NT Password did not match for user 'kosmol'!
> [2003/05/08 12:24:25, 2] smbd/reply.c:reply_sesssetup_and_X(985)
>   Defaulting to Lanman password for kosmol
> [2003/05/08 12:24:25, 1] smbd/password.c:pass_check_smb(545)
>   Couldn't find user 'kosmol' in passdb.
> [2003/05/08 12:24:25, 1] smbd/reply.c:reply_sesssetup_and_X(1001)
>   Rejecting user 'kosmol': authentication failed
> [2003/05/08 12:24:25, 3] smbd/error.c:error_packet(94)
>   error string = No such file or directory
>
> yielding to an access problem (error) on the client affected (WINDO$ 2000
'workstation').
> Strange thing to me is that function server_validate should printed out the
server name, too. It seems that the process lose this information (cli
deallocated?). Many thanks in advance for any hint or suggestion getting rid of
this problem.
>
> Bye
>
> 	Frank Heckes
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>
-- 
John H Terpstra
Email: jht@samba.org

Hi John,

yes it's enabled. Btw here's the relevant part of our smb.conf:

        security = SERVER
        encrypt passwords = Yes
        password server = duwdc001 duwdc002 duwdc003
        username map = /opt/samba-2.2.7a/lib/username.map
        domain master = no
        local master = no
        preferred master = no 
        os level = 0

Bye

	Frank
> 
> Frank,
> 
> Do you have encryted passwords or plain text?
> 
> - John T.
> 
> On Thu, 8 May 2003 Frank.Heckes@nokia.com wrote:
> 
> > Hi all,
> >
> > sorry if this has been asked before, but as far as I could 
> see there's no similar entry in the archive.
> >
> > I'm using version 2.2.7a on a HP machine running HP-UX 
> 11.11. The binaries have been created for PA-RISC 2.0 
> supporting 64Bit mode.
> > The SAMBA has been configured to use securty = server. 
> Password servers has been 'defined'. For a certain user 
> (Service account used to run ClearCase on a Windo$ 2000 PC) a 
> username translation has been established via the `username.map?
> > file (kosmol = ccvobftm). From time to time the connection 
> to the server breaks and the following messages are reported 
> to the smbd logfile:
> >
> >   Mapped user ccvobftm to kosmol
> > [2003/05/08 12:24:25, 1] smbd/password.c:server_validate(1101)
> >   password server  is not connected
> > [2003/05/08 12:24:25, 1] smbd/password.c:pass_check_smb(545)
> >   Couldn't find user 'kosmol' in passdb.
> > [2003/05/08 12:24:25, 2] smbd/reply.c:reply_sesssetup_and_X(975)
> >   NT Password did not match for user 'kosmol'!
> > [2003/05/08 12:24:25, 2] smbd/reply.c:reply_sesssetup_and_X(985)
> >   Defaulting to Lanman password for kosmol
> > [2003/05/08 12:24:25, 1] smbd/password.c:pass_check_smb(545)
> >   Couldn't find user 'kosmol' in passdb.
> > [2003/05/08 12:24:25, 1] smbd/reply.c:reply_sesssetup_and_X(1001)
> >   Rejecting user 'kosmol': authentication failed
> > [2003/05/08 12:24:25, 3] smbd/error.c:error_packet(94)
> >   error string = No such file or directory
> >
> > yielding to an access problem (error) on the client 
> affected (WINDO$ 2000 'workstation').
> > Strange thing to me is that function server_validate should 
> printed out the server name, too. It seems that the process 
> lose this information (cli deallocated?). Many thanks in 
> advance for any hint or suggestion getting rid of this problem.
> >
> > Bye
> >
> > 	Frank Heckes
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> >
> 
> -- 
> John H Terpstra
> Email: jht@samba.org
>