thr3ads.net - samba - [Samba] Clear text authentication impossible??? [Oct 2003]

If this information is useful, please help other people find it:
Share via:

Beschorner Daniel

2003-Oct-22 13:27 UTC

[Samba] Clear text authentication impossible???

We have an Exchange 5.5 server in our Samba 3 domain und want to have POP3
access with clear text authentication from clients.
But no kind of credentials is accepted.

It did a level 10 log on the Samba server and found my clear text password
in the log (in nt_chal_resp and lm_chal_resp fields) during authentication.

Is it possible that Samba can't handle the clear-text pass-through from
POP3-Client per Exchange server and takes it for NTLMv2 challenge????

Thanks
Daniel

Jeremy Allison

2003-Oct-22 19:16 UTC

head link

[Samba] Clear text authentication impossible???

On Wed, Oct 22, 2003 at 03:27:31PM +0200, Beschorner Daniel
wrote:> We have an Exchange 5.5 server in our Samba 3 domain und want to have POP3
> access with clear text authentication from clients.
> But no kind of credentials is accepted.
> 
> It did a level 10 log on the Samba server and found my clear text password
> in the log (in nt_chal_resp and lm_chal_resp fields) during authentication.
> 
> Is it possible that Samba can't handle the clear-text pass-through from
> POP3-Client per Exchange server and takes it for NTLMv2 challenge????
Can you post the debug level 10 log please (obfuscate all passwords of course
:-).

Jeremy.

Andrew Bartlett

2003-Oct-22 22:51 UTC

head link

[Samba] Clear text authentication impossible???

Skipped content of type multipart/mixed-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20031023/d27ec44d/attachment.bin

Beschorner Daniel

2003-Oct-22 22:51 UTC

head link

[Samba] Clear text authentication impossible???

Ok, here it comes. Samba PDC is called "server", Exchange got the
fantastic
name "exchange", domain is "i-bn".
I changed the password to "p.a.s.s.w.o.r.d" and "PASSWORD"
at both
occurrences, originally it was lower case, too.

Daniel


-----Urspr?ngliche Nachricht-----
Von: Jeremy Allison [mailto:jra@samba.org]
Gesendet: Mittwoch, 22. Oktober 2003 21:16
An: Beschorner Daniel
Cc: 'samba@lists.samba.org'
Betreff: Re: [Samba] Clear text authentication impossible???


On Wed, Oct 22, 2003 at 03:27:31PM +0200, Beschorner Daniel
wrote:> We have an Exchange 5.5 server in our Samba 3 domain und want to have POP3
> access with clear text authentication from clients.
> But no kind of credentials is accepted.
> 
> It did a level 10 log on the Samba server and found my clear text password
> in the log (in nt_chal_resp and lm_chal_resp fields) during
authentication.> 
> Is it possible that Samba can't handle the clear-text pass-through from
> POP3-Client per Exchange server and takes it for NTLMv2 challenge????
Can you post the debug level 10 log please (obfuscate all passwords of
course :-).

Jeremy.

-------------- next part --------------
[2003/10/22 14:55:29, 5] lib/debug.c:debug_dump_status(359)
  INFO: Current debug levels:
    all: True/10
    tdb: False/0
    printdrivers: False/0
    lanman: False/0
    smb: False/0
    rpc_parse: False/0
    rpc_srv: False/0
    rpc_cli: False/0
    passdb: False/0
    sam: False/0
    auth: False/0
    winbind: False/0
    vfs: False/0
    idmap: False/0
[2003/10/22 14:55:41, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
  got smb length of 400
[2003/10/22 14:55:41, 6] smbd/process.c:process_smb(889)
  got message type 0x0 of len 0x190
[2003/10/22 14:55:41, 3] smbd/process.c:process_smb(890)
  Transaction 78 of length 404
[2003/10/22 14:55:41, 5] lib/util.c:show_msg(456)
[2003/10/22 14:55:41, 5] lib/util.c:show_msg(466)
  size=400
  smb_com=0x2f
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=1
  smb_pid=65279
  smb_uid=100
  smb_mid=4992
  smt_wct=14
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=57054 (0xDEDE)
  smb_vwv[ 2]=29711 (0x740F)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=65535 (0xFFFF)
  smb_vwv[ 6]=65535 (0xFFFF)
  smb_vwv[ 7]=    8 (0x8)
  smb_vwv[ 8]=  336 (0x150)
  smb_vwv[ 9]=    0 (0x0)
  smb_vwv[10]=  336 (0x150)
  smb_vwv[11]=   64 (0x40)
  smb_vwv[12]=    0 (0x0)
  smb_vwv[13]=    0 (0x0)
  smb_bcc=337
[2003/10/22 14:55:41, 10] lib/util.c:dump_data(1825)
  [000] EE 05 00 00 03 10 00 00  00 50 01 20 00 05 00 00  ?....... .P. ....
  [010] 00 0E 01 00 00 00 00 02  00 92 0D 4E EE C7 0D 98  ........ ...N??..
  [020] 8A 34 38 32 F5 C7 17 DC  82 B5 58 F0 72 A1 C2 4D  .482??.? .?X?r??M
  [030] 09 51 64 72 38 80 38 43  44 2A 1C 63 19 5F 2F 96  .Qdr8.8C D*.c._/.
  [040] C3 62 11 84 4A C2 94 E7  42 E1 DF B7 F1 B1 1F 7F  ?b..J?.? B?????..
  [050] 08 ED DE C2 A3 8B AF 25  9C E6 C4 45 9D 30 88 8D  .????.?% .??E.0..
  [060] 6D 7D 0C 57 09 90 1B 12  45 73 6A F1 09 DF 74 4D  m}.W.... Esj?.?tM
  [070] 54 8E 61 A1 77 48 A9 25  23 DA 47 C5 9A E9 41 CC  T.a?wH?% #?G?.?A?
  [080] AE 86 D6 A4 2B 8C 5A 88  AD 38 1F D0 EA C7 36 3E  ?.??+.Z. ?8.???6>
  [090] AB 23 09 0F 54 96 68 5A  FC 58 52 FC AB 55 0D 9D  ?#..T.hZ ?XR??U..
  [0A0] 02 EC B8 FC 1A B3 0D AB  97 14 48 00 8C 59 49 E6  .???.?.? ..H..YI?
  [0B0] 1C E3 99 43 89 1D 2E DB  A0 46 FA 11 6B 82 C4 3F  .?.C...? ?F?.k.??
  [0C0] E0 03 DA E7 04 35 DE 31  A0 FB 1A DA 14 BE 48 D3  
.??.5?1 ??.?.?H?
  [0D0] 74 E3 AF 92 BB F9 24 0A  D3 47 D4 B6 7F BB D6 BE  t??.??$. ?G?.???
  [0E0] 20 D8 A0 BA 7F 86 E2 2C  1A 8B 0A 19 86 A7 E0 98   ???..?, .....
.
  [0F0] B4 C8 25 06 AE 61 B3 3C  C2 26 BB 17 FD EA D8 73  ??%.?a?<
?&?.???s
  [100] CD B6 F7 9A B1 64 7C CF  CA 00 07 25 05 72 69 C2  ??.?d|? ?..%.ri?
  [110] 06 CF 8D C4 78 88 E8 8C  4C C6 0D 5B 0A 54 49 3A  .?.?x.?. L?.[.TI:
  [120] F9 A6 4E 96 81 5C 27 60  2F 44 06 02 00 20 74 09  ??N..\'` /D... t.
  [130] 00 77 00 7A 00 FF FF 00  00 7F 2D FB 2C A7 0F 4B  .w.z.??. ..-?,.K
  [140] BE 1C A8 2B 05 F1 20 D7  B5 9F 17 31 1E 97 0D 3C  ?.?+.? ? ?..1...<
  [150] EC                                                ? 
[2003/10/22 14:55:41, 3] smbd/process.c:switch_message(685)
  switch message SMBwriteX (pid 16801)
[2003/10/22 14:55:41, 4] smbd/uid.c:change_to_user(122)
  change_to_user: Skipping user change - already user
[2003/10/22 14:55:41, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1151)
  search for pipe pnum=740f
[2003/10/22 14:55:41, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1155)
  pipe name NETLOGON pnum=740f (pipes_open=2)
[2003/10/22 14:55:41, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1155)
  pipe name NETLOGON pnum=740d (pipes_open=2)
[2003/10/22 14:55:41, 6] rpc_server/srv_pipe_hnd.c:write_to_pipe(852)
  write_to_pipe: 740f name: NETLOGON open: Yes len: 336
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
  write_to_pipe: data_left = 336
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(778)
  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 0,
incoming data = 336
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:fill_rpc_header(401)
  fill_rpc_header: data_to_copy = 336, len_needed_to_complete_hdr = 16,
receive_len = 0
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
  write_to_pipe: data_used = 16
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
  write_to_pipe: data_left = 320
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(778)
  process_incoming_data: Start: pdu_received_len = 16, pdu_needed_len = 0,
incoming data = 320
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr 
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0000 major     : 05
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0001 minor     : 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0002 pkt_type  : 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0003 flags     : 03
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0004 pack_type0: 10
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0005 pack_type1: 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0006 pack_type2: 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0007 pack_type3: 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      0008 frag_len  : 0150
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      000a auth_len  : 0020
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      000c call_id   : 00000005
[2003/10/22 14:55:41, 5] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(488)
  unmarshall_rpc_header: using little-endian RPC
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:unmarshall_rpc_header(517)
  unmarshall_rpc_header: type = 0, flags = 3
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
  write_to_pipe: data_used = 0
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(874)
  write_to_pipe: data_left = 320
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:process_incoming_data(778)
  process_incoming_data: Start: pdu_received_len = 0, pdu_needed_len = 320,
incoming data = 320
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:process_complete_pdu(722)
  process_complete_pdu: processing packet type 0
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr_req req
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0000 alloc_hint: 0000010e
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      0004 context_id: 0000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      0006 opnum     : 0002
[2003/10/22 14:55:41, 5] rpc_server/srv_pipe.c:api_pipe_netsec_process(1324)
  data 272 auth 32
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000118 smb_io_rpc_hdr_auth hdr_auth
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0118 auth_type    : 44
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0119 auth_level   : 06
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      011a padding      : 02
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      011b reserved     : 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      011c auth_context : 00097420
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000120 smb_io_rpc_auth_netsec_chk 
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0120 sig  : 77 00 7a 00 ff ff 00 00 
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0128 seq_num: 7f 2d fb 2c a7 0f 4b be 
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0130 packet_digest: 1c a8 2b 05 f1 20 d7 b5 
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0138 confounder: 9f 17 31 1e 97 0d 3c ec 
[2003/10/22 14:55:41, 10] rpc_parse/parse_prs.c:netsec_decode(1540)
  SCHANNEL: netsec_encode seq_num=2 data_len=272
[2003/10/22 14:55:41, 10] rpc_parse/parse_prs.c:netsec_decode(1560)
  SCHANNEL: netsec_decode seq_num=2 data_len=272
[2003/10/22 14:55:41, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
  free_pipe_context: destroying talloc pool of size 0
[2003/10/22 14:55:41, 5] rpc_server/srv_pipe.c:api_pipe_request(1462)
  Requested \PIPE\NETLOGON
[2003/10/22 14:55:41, 4] rpc_server/srv_pipe.c:api_rpcTNP(1496)
  api_rpcTNP: NETLOGON op 0x2 - api_rpcTNP: rpc command: NET_SAMLOGON
[2003/10/22 14:55:41, 6] rpc_server/srv_pipe.c:api_rpcTNP(1522)
  api_rpc_cmds[4].fn == 0x80f1290
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 net_io_q_sam_logon 
[2003/10/22 14:55:41, 6] rpc_parse/parse_prs.c:prs_debug(82)
      000000 smb_io_sam_info 
[2003/10/22 14:55:41, 7] rpc_parse/parse_prs.c:prs_debug(82)
          000000 smb_io_clnt_info2 
[2003/10/22 14:55:41, 8] rpc_parse/parse_prs.c:prs_debug(82)
              000000 smb_io_clnt_srv 
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                  0000 undoc_buffer : 000e8f90
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
                  000004 smb_io_unistr2 unistr2
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      0004 uni_max_len: 00000009
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      0008 offset     : 00000000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      000c uni_str_len: 00000009
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807)
                      0010 buffer     : \.\.S.E.R.V.E.R...
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                  0024 undoc_buffer2: 000aa92c
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
                  000028 smb_io_unistr2 unistr2
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      0028 uni_max_len: 00000009
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      002c offset     : 00000000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      0030 uni_str_len: 00000009
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807)
                      0034 buffer     : E.X.C.H.A.N.G.E...
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
              0048 ptr_cred: 007cf508
[2003/10/22 14:55:41, 8] rpc_parse/parse_prs.c:prs_debug(82)
              00004c smb_io_cred 
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
                  00004c smb_io_chal 
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
                      004c data: 9f 8f e0 6d 4e 31 cb 0a 
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
                  000054 smb_io_utime 
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      0054 time: 3f967d62
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          0058 ptr_rtn_cred : 007cf514
[2003/10/22 14:55:41, 7] rpc_parse/parse_prs.c:prs_debug(82)
          00005c smb_io_cred 
[2003/10/22 14:55:41, 8] rpc_parse/parse_prs.c:prs_debug(82)
              00005c smb_io_chal 
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
                  005c data: 01 00 00 00 a0 a8 0a 00 
[2003/10/22 14:55:41, 8] rpc_parse/parse_prs.c:prs_debug(82)
              000064 smb_io_utime 
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                  0064 time: 007cfa2c
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
          0068 logon_level  : 0002
[2003/10/22 14:55:41, 7] rpc_parse/parse_prs.c:prs_debug(82)
          00006a smb_io_sam_info logon_info
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
              006a switch_value : 0002
[2003/10/22 14:55:41, 8] rpc_parse/parse_prs.c:prs_debug(82)
              00006c net_io_id_info2 
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                  006c ptr_id_info2: 007cfa2c
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
                  000070 smb_io_unihdr unihdr
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
                      0070 uni_str_len: 0000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
                      0072 uni_max_len: 0000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      0074 buffer     : 00000000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                  0078 param_ctrl: 00000002
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
                  00007c smb_io_logon_id 
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      007c low : 0070bdd8
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      0080 high: 00000000
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
                  000084 smb_io_unihdr unihdr
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
                      0084 uni_str_len: 0008
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
                      0086 uni_max_len: 0008
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      0088 buffer     : 000e53c0
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
                  00008c smb_io_unihdr unihdr
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
                      008c uni_str_len: 0010
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
                      008e uni_max_len: 0010
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      0090 buffer     : 000e53c8
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
                  0094 lm_chal: 00 00 00 00 00 00 00 00 
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
                  00009c smb_io_strhdr hdr_nt_chal_resp
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
                      009c str_str_len: 0010
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
                      009e str_max_len: 0010
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      00a0 buffer     : 000e53da
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
                  0000a4 smb_io_strhdr hdr_lm_chal_resp
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
                      00a4 str_str_len: 0008
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
                      00a6 str_max_len: 0008
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      00a8 buffer     : 000e53ea
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
                  0000ac smb_io_unistr2 - NULL uni_domain_name
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
                  0000ac smb_io_unistr2 uni_user_name  
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      00ac uni_max_len: 00000004
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      00b0 offset     : 00000000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      00b4 uni_str_len: 00000004
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807)
                      00b8 buffer     : r.o.o.t.
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
                  0000c0 smb_io_unistr2 uni_wksta_name 
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      00c0 uni_max_len: 00000008
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      00c4 offset     : 00000000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      00c8 uni_str_len: 00000008
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:dbg_rw_punival(807)
                      00cc buffer     : E.X.C.H.A.N.G.E.
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
                  0000dc smb_io_string2 nt_chal_resp
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      00dc str_max_len: 00000010
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      00e0 offset     : 00000000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      00e4 str_str_len: 00000010
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_string2(961)
                      00e8 buffer     : p.a.s.s.w.o.r.d.
[2003/10/22 14:55:41, 9] rpc_parse/parse_prs.c:prs_debug(82)
                  0000f8 smb_io_string2 lm_chal_resp
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      00f8 str_max_len: 00000008
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      00fc offset     : 00000000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
                      0100 str_str_len: 00000008
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_string2(961)
                      0104 buffer     : PASSWORD
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      010c validation_level: 0003
[2003/10/22 14:55:41, 5] libsmb/credentials.c:deal_with_creds(182)
  deal_with_creds: 182
[2003/10/22 14:55:41, 4] libsmb/credentials.c:cred_create(90)
  cred_create
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_create(92)
  	sess_key : E287D959B18DB76A
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_create(93)
  	stor_cred: BC690237C5249ACD
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_create(94)
  	timestamp: 3f967d62
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_create(95)
  	timecred : 1EE79876C5249ACD
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_create(96)
  	calc_cred: 9F8FE06D4E31CB0A
[2003/10/22 14:55:41, 4] libsmb/credentials.c:cred_assert(121)
  cred_assert
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_assert(123)
  	challenge : 9F8FE06D4E31CB0A
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_assert(124)
  	calculated: 9F8FE06D4E31CB0A
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_assert(128)
  credentials check ok
[2003/10/22 14:55:41, 5] libsmb/credentials.c:deal_with_creds(198)
  deal_with_creds: new_cred[0]=7698e71f
[2003/10/22 14:55:41, 5] libsmb/credentials.c:deal_with_creds(203)
  deal_with_creds: new_clnt_time=3f967d63
[2003/10/22 14:55:41, 4] libsmb/credentials.c:cred_create(90)
  cred_create
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_create(92)
  	sess_key : E287D959B18DB76A
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_create(93)
  	stor_cred: BC690237C5249ACD
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_create(94)
  	timestamp: 3f967d63
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_create(95)
  	timecred : 1FE79876C5249ACD
[2003/10/22 14:55:41, 5] libsmb/credentials.c:cred_create(96)
  	calc_cred: 807BFEFC879C7031
[2003/10/22 14:55:41, 5] libsmb/credentials.c:deal_with_creds(209)
  deal_with_creds: clnt_cred=BC690237C5249ACD
[2003/10/22 14:55:41, 3] rpc_server/srv_netlog_nt.c:_net_sam_logon(577)
  SAM Logon (Network). Domain:[I-BN].  User:[root@EXCHANGE] Requested Domain:[]
[2003/10/22 14:55:41, 5] rpc_server/srv_netlog_nt.c:_net_sam_logon(600)
  Attempting validation level 2 for unmapped username root.
[2003/10/22 14:55:41, 5] auth/auth.c:make_auth_context_subsystem(463)
  Making default auth method list for DC, security=user, encrypt passwords = yes
[2003/10/22 14:55:41, 5] auth/auth.c:load_auth_module(370)
  load_auth_module: Attempting to find an auth method to match guest
[2003/10/22 14:55:41, 5] auth/auth.c:load_auth_module(395)
  load_auth_module: auth method guest has a valid init
[2003/10/22 14:55:41, 5] auth/auth.c:load_auth_module(370)
  load_auth_module: Attempting to find an auth method to match sam
[2003/10/22 14:55:41, 5] auth/auth.c:load_auth_module(395)
  load_auth_module: auth method sam has a valid init
[2003/10/22 14:55:41, 5] auth/auth.c:load_auth_module(370)
  load_auth_module: Attempting to find an auth method to match
winbind:trustdomain
[2003/10/22 14:55:41, 5] auth/auth.c:load_auth_module(370)
  load_auth_module: Attempting to find an auth method to match trustdomain
[2003/10/22 14:55:41, 5] auth/auth.c:load_auth_module(395)
  load_auth_module: auth method trustdomain has a valid init
[2003/10/22 14:55:41, 5] auth/auth.c:load_auth_module(395)
  load_auth_module: auth method winbind has a valid init
[2003/10/22 14:55:41, 5] auth/auth_util.c:make_user_info_map(216)
  make_user_info_map: Mapping user []\[root] from workstation [EXCHANGE]
[2003/10/22 14:55:41, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1
[2003/10/22 14:55:41, 3] smbd/uid.c:push_conn_ctx(287)
  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2003/10/22 14:55:41, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2003/10/22 14:55:41, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2003/10/22 14:55:41, 5] auth/auth_util.c:debug_unix_user_token(505)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2003/10/22 14:55:41, 5]
passdb/secrets.c:secrets_fetch_trusted_domain_password(299)
  secrets_fetch failed!
[2003/10/22 14:55:41, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0
[2003/10/22 14:55:41, 10] lib/gencache.c:gencache_get(286)
  Cache entry with key = TDOM/I-BN couldn't be found
[2003/10/22 14:55:41, 5] libsmb/trustdom_cache.c:trustdom_cache_fetch(172)
  no entry for trusted domain I-BN found.
[2003/10/22 14:55:41, 5] auth/auth_util.c:make_user_info(132)
  attempting to make a user_info for root (root)
[2003/10/22 14:55:41, 5] auth/auth_util.c:make_user_info(142)
  making strings for root's user_info struct
[2003/10/22 14:55:41, 5] auth/auth_util.c:make_user_info(184)
  making blobs for root's user_info struct
[2003/10/22 14:55:41, 10] auth/auth_util.c:make_user_info(193)
  made an encrypted user_info for root (root)
[2003/10/22 14:55:41, 3] auth/auth.c:check_ntlm_password(216)
  check_ntlm_password:  Checking password for unmapped user []\[root]@[EXCHANGE]
with the new password interface
[2003/10/22 14:55:41, 3] auth/auth.c:check_ntlm_password(219)
  check_ntlm_password:  mapped user is: [I-BN]\[root]@[EXCHANGE]
[2003/10/22 14:55:41, 10] auth/auth.c:check_ntlm_password(228)
  check_ntlm_password: auth_context challenge created by fixed
[2003/10/22 14:55:41, 10] auth/auth.c:check_ntlm_password(230)
  challenge is: 
[2003/10/22 14:55:41, 5] lib/util.c:dump_data(1825)
  [000] 00 00 00 00 00 00 00 00                           ........ 
[2003/10/22 14:55:41, 10] auth/auth.c:check_ntlm_password(256)
  check_ntlm_password: guest had nothing to say
[2003/10/22 14:55:41, 8] lib/util.c:is_myname(1677)
  is_myname("I-BN") returns 0
[2003/10/22 14:55:41, 3] smbd/sec_ctx.c:push_sec_ctx(256)
  push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1
[2003/10/22 14:55:41, 3] smbd/uid.c:push_conn_ctx(287)
  push_conn_ctx(100) : conn_ctx_stack_ndx = 0
[2003/10/22 14:55:41, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2003/10/22 14:55:41, 5] auth/auth_util.c:debug_nt_user_token(486)
  NT user token: (NULL)
[2003/10/22 14:55:41, 5] auth/auth_util.c:debug_unix_user_token(505)
  UNIX token of user 0
  Primary group is 0 and contains 0 supplementary groups
[2003/10/22 14:55:41, 2] lib/smbldap.c:smbldap_search_suffix(1066)
  smbldap_search_suffix: searching
for:[(&(uid=root)(objectclass=sambaSamAccount))]
[2003/10/22 14:55:41, 2] passdb/pdb_ldap.c:init_sam_from_ldap(462)
  init_sam_from_ldap: Entry found for user: root
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_username(593)
  pdb_set_username: setting username root, was 
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
  element 11 -> now SET
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_domain(620)
  pdb_set_domain: setting domain I-BN, was 
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_nt_username(647)
  pdb_set_nt_username: setting nt username root, was 
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
  element 14 -> now SET
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_user_sid_from_string(533)
  pdb_set_user_sid_from_string: setting user sid
S-1-5-21-598206826-3982707997-2769875126-1000
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_user_sid(520)
  pdb_set_user_sid: setting user sid
S-1-5-21-598206826-3982707997-2769875126-1000
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
  element 17 -> now SET
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_get_single_attribute(299)
  smbldap_get_single_attribute: [sambaPrimaryGroupSID] = [<does not
exist>]
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_group_sid(556)
  pdb_set_group_sid: setting group sid
S-1-5-21-598206826-3982707997-2769875126-513
[2003/10/22 14:55:41, 10] passdb/pdb_compat.c:pdb_set_group_sid_from_rid(100)
  pdb_set_group_sid_from_rid:
  	setting group sid S-1-5-21-598206826-3982707997-2769875126-513 from rid 513
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
  element 20 -> now SET
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_get_single_attribute(299)
  smbldap_get_single_attribute: [sambaLogonTime] = [<does not exist>]
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_get_single_attribute(299)
  smbldap_get_single_attribute: [sambaLogoffTime] = [<does not exist>]
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_get_single_attribute(299)
  smbldap_get_single_attribute: [sambaKickoffTime] = [<does not exist>]
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
  element 8 -> now SET
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
  element 9 -> now SET
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_get_single_attribute(299)
  smbldap_get_single_attribute: [displayName] = [<does not exist>]
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_fullname(674)
  pdb_set_full_name: setting full name root, was 
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
  element 12 -> now SET
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_get_single_attribute(299)
  smbldap_get_single_attribute: [sambaHomeDrive] = [<does not exist>]
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_dir_drive(755)
  pdb_set_dir_drive: setting dir drive , was NULL
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_get_single_attribute(299)
  smbldap_get_single_attribute: [sambaHomePath] = [<does not exist>]
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_homedir(782)
  pdb_set_homedir: setting home dir , was 
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_get_single_attribute(299)
  smbldap_get_single_attribute: [sambaLogonScript] = [<does not exist>]
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_logon_script(701)
  pdb_set_logon_script: setting logon script user.cmd, was 
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_get_single_attribute(299)
  smbldap_get_single_attribute: [sambaProfilePath] = [<does not exist>]
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_profile_path(728)
  pdb_set_profile_path: setting profile path \\server\Profiles\root, was 
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_get_single_attribute(299)
  smbldap_get_single_attribute: [description] = [<does not exist>]
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_get_single_attribute(299)
  smbldap_get_single_attribute: [sambaUserWorkstations] = [<does not
exist>]
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
  element 31 -> now SET
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
  element 32 -> now SET
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
  element 19 -> now SET
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
  element 15 -> now SET
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
  element 16 -> now SET
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
  element 25 -> now SET
[2003/10/22 14:55:41, 10] passdb/pdb_get_set.c:pdb_set_init_flags(493)
  element 26 -> now SET
[2003/10/22 14:55:41, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
  pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0
[2003/10/22 14:55:41, 4] auth/auth_sam.c:sam_password_ok(182)
  sam_password_ok: Checking NTLMv2 password with domain []
[2003/10/22 14:55:41, 0] auth/auth_sam.c:smb_pwd_check_ntlmv2(105)
  smb_pwd_check_ntlmv2: incorrect password length (16)
[2003/10/22 14:55:41, 4] auth/auth_sam.c:sam_password_ok(191)
  sam_password_ok: Checking NTLMv2 password without a domain
[2003/10/22 14:55:41, 0] auth/auth_sam.c:smb_pwd_check_ntlmv2(105)
  smb_pwd_check_ntlmv2: incorrect password length (16)
[2003/10/22 14:55:41, 3] auth/auth_sam.c:sam_password_ok(199)
  sam_password_ok: NTLMv2 password check failed
[2003/10/22 14:55:41, 5] auth/auth.c:check_ntlm_password(268)
  check_ntlm_password: sam authentication for user [root] FAILED with error
NT_STATUS_WRONG_PASSWORD
[2003/10/22 14:55:41, 3] auth/auth_winbind.c:check_winbind_security(79)
  check_winbind_security: Not using winbind, requested domain was for this SAM.
[2003/10/22 14:55:41, 10] auth/auth.c:check_ntlm_password(256)
  check_ntlm_password: winbind had nothing to say
[2003/10/22 14:55:41, 2] auth/auth.c:check_ntlm_password(309)
  check_ntlm_password:  Authentication for user [root] -> [root] FAILED with
error NT_STATUS_WRONG_PASSWORD
[2003/10/22 14:55:41, 5] auth/auth_util.c:free_user_info(1196)
  attempting to free (and zero) a user_info structure
[2003/10/22 14:55:41, 10] auth/auth_util.c:free_user_info(1199)
  structure was created for root
[2003/10/22 14:55:41, 5] rpc_server/srv_netlog_nt.c:_net_sam_logon(661)
  _net_sam_logon: check_password returned status NT_STATUS_WRONG_PASSWORD
[2003/10/22 14:55:41, 5] auth/auth_util.c:free_server_info(1221)
  attempting to free (and zero) a server_info structure
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 net_io_r_sam_logon 
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0000 buffer_creds: 00000001
[2003/10/22 14:55:41, 6] rpc_parse/parse_prs.c:prs_debug(82)
      000004 smb_io_cred 
[2003/10/22 14:55:41, 7] rpc_parse/parse_prs.c:prs_debug(82)
          000004 smb_io_chal 
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
              0004 data: 80 7b fe fc 87 9c 70 31 
[2003/10/22 14:55:41, 7] rpc_parse/parse_prs.c:prs_debug(82)
          00000c smb_io_utime 
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
              000c time: 00000000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      0010 switch_value: 0003
[2003/10/22 14:55:41, 6] rpc_parse/parse_prs.c:prs_debug(82)
      000014 net_io_user_info3 
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
          0014 ptr_user_info : 00000000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0018 auth_resp   : 00000001
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_ntstatus(665)
      001c status      : NT_STATUS_WRONG_PASSWORD
[2003/10/22 14:55:41, 5] rpc_server/srv_pipe.c:api_rpcTNP(1543)
  api_rpcTNP: called NETLOGON successfully
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe.c:api_rpcTNP(1554)
  api_rpcTNP: rpc input buffer underflow (parse error?)
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
  010e : 00 00 44 06 02 00 20 74 09 00 
[2003/10/22 14:55:41, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(544)
  free_pipe_context: destroying talloc pool of size 660
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:write_to_internal_pipe(878)
  write_to_pipe: data_used = 320
[2003/10/22 14:55:41, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
  writeX-IPC pnum=740f nwritten=336
[2003/10/22 14:55:41, 5] lib/util.c:show_msg(456)
[2003/10/22 14:55:41, 5] lib/util.c:show_msg(466)
  size=47
  smb_com=0x2f
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=1
  smb_pid=65279
  smb_uid=100
  smb_mid=4992
  smt_wct=6
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=    0 (0x0)
  smb_vwv[ 2]=  336 (0x150)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=    0 (0x0)
  smb_bcc=0
[2003/10/22 14:55:41, 6] lib/util_sock.c:write_socket(407)
  write_socket(5,51)
[2003/10/22 14:55:41, 6] lib/util_sock.c:write_socket(410)
  write_socket(5,51) wrote 51
[2003/10/22 14:55:41, 10] lib/smbldap.c:smbldap_idle_fn(1094)
  ldap connection not idle...
[2003/10/22 14:55:41, 10] lib/util_sock.c:read_smb_length_return_keepalive(463)
  got smb length of 59
[2003/10/22 14:55:41, 6] smbd/process.c:process_smb(889)
  got message type 0x0 of len 0x3b
[2003/10/22 14:55:41, 3] smbd/process.c:process_smb(890)
  Transaction 79 of length 63
[2003/10/22 14:55:41, 5] lib/util.c:show_msg(456)
[2003/10/22 14:55:41, 5] lib/util.c:show_msg(466)
  size=59
  smb_com=0x2e
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=51207
  smb_tid=1
  smb_pid=65279
  smb_uid=100
  smb_mid=5056
  smt_wct=12
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=57054 (0xDEDE)
  smb_vwv[ 2]=29711 (0x740F)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]= 1024 (0x400)
  smb_vwv[ 6]= 1024 (0x400)
  smb_vwv[ 7]=65535 (0xFFFF)
  smb_vwv[ 8]=65535 (0xFFFF)
  smb_vwv[ 9]= 1024 (0x400)
  smb_vwv[10]=    0 (0x0)
  smb_vwv[11]=    0 (0x0)
  smb_bcc=0
[2003/10/22 14:55:41, 3] smbd/process.c:switch_message(685)
  switch message SMBreadX (pid 16801)
[2003/10/22 14:55:41, 4] smbd/uid.c:change_to_user(122)
  change_to_user: Skipping user change - already user
[2003/10/22 14:55:41, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1151)
  search for pipe pnum=740f
[2003/10/22 14:55:41, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1155)
  pipe name NETLOGON pnum=740f (pipes_open=2)
[2003/10/22 14:55:41, 5] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(1155)
  pipe name NETLOGON pnum=740d (pipes_open=2)
[2003/10/22 14:55:41, 6] rpc_server/srv_pipe_hnd.c:read_from_pipe(909)
  read_from_pipe: 740f name: NETLOGON len: 1024
[2003/10/22 14:55:41, 10] rpc_server/srv_pipe_hnd.c:read_from_internal_pipe(982)
  read_from_pipe: NETLOGON: fault_state = 0 : data_sent_length = 0,
prs_offset(&p->out_data.rdata) = 32.
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000000 smb_io_rpc_hdr hdr
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0000 major     : 05
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0001 minor     : 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0002 pkt_type  : 02
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0003 flags     : 03
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0004 pack_type0: 10
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0005 pack_type1: 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0006 pack_type2: 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0007 pack_type3: 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      0008 frag_len  : 0060
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      000a auth_len  : 0020
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      000c call_id   : 00000005
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000010 smb_io_rpc_hdr_resp resp
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      0010 alloc_hint: 00000020
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint16(606)
      0014 context_id: 0000
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0016 cancel_ct : 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0017 reserved  : 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000038 smb_io_rpc_hdr_auth hdr_auth
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0038 auth_type    : 44
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      0039 auth_level   : 06
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      003a padding      : 08
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8(577)
      003b reserved     : 00
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint32(635)
      003c auth_context : 00000001
[2003/10/22 14:55:41, 10] rpc_parse/parse_prs.c:netsec_encode(1463)
  SCHANNEL: netsec_encode seq_num=3 data_len=32
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_debug(82)
  000040 smb_io_rpc_auth_netsec_chk 
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0040 sig  : 77 00 7a 00 ff ff 00 00 
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0048 seq_num: cd cb c7 ef ca 0d a0 22 
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0050 packet_digest: eb 70 9e 56 ef 3f ad 0e 
[2003/10/22 14:55:41, 5] rpc_parse/parse_prs.c:prs_uint8s(722)
      0058 confounder: f8 2d 00 93 ee ed 7a 97 
[2003/10/22 14:55:41, 3] smbd/pipes.c:reply_pipe_read_and_X(242)
  readX-IPC pnum=740f min=1024 max=1024 nread=96
[2003/10/22 14:55:41, 5] lib/util.c:show_msg(456)
[2003/10/22 14:55:41, 5] lib/util.c:show_msg(466)
  size=155
  smb_com=0x2e
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=1
  smb_pid=65279
  smb_uid=100
  smb_mid=5056
  smt_wct=12
  smb_vwv[ 0]=  255 (0xFF)
  smb_vwv[ 1]=    0 (0x0)
  smb_vwv[ 2]=    0 (0x0)
  smb_vwv[ 3]=    0 (0x0)
  smb_vwv[ 4]=    0 (0x0)
  smb_vwv[ 5]=   96 (0x60)
  smb_vwv[ 6]=   59 (0x3B)
  smb_vwv[ 7]=    0 (0x0)
  smb_vwv[ 8]=    0 (0x0)
  smb_vwv[ 9]=    0 (0x0)
  smb_vwv[10]=    0 (0x0)
  smb_vwv[11]=    0 (0x0)
  smb_bcc=96
[2003/10/22 14:55:41, 10] lib/util.c:dump_data(1825)
  [000] 05 00 02 03 10 00 00 00  60 00 20 00 05 00 00 00  ........ `. .....
  [010] 20 00 00 00 00 00 00 00  86 E2 37 79 E5 F8 16 F7   ....... .?7y??.?
  [020] ED 82 15 14 17 AE 7B 9B  ED 5A 9E 53 18 DA F5 76  ?....?{. ?Z.S.??v
  [030] 7A A6 37 F7 D1 CB BF 68  44 06 08 00 01 00 00 00  z?7????h D.......
  [040] 77 00 7A 00 FF FF 00 00  CD CB C7 EF CA 0D A0 22  w.z.??.. ?????.?"
  [050] EB 70 9E 56 EF 3F AD 0E  F8 2D 00 93 EE ED 7A 97  ?p.V???. ?-..??z.
[2003/10/22 14:55:41, 6] lib/util_sock.c:write_socket(407)
  write_socket(5,159)
[2003/10/22 14:55:41, 6] lib/util_sock.c:write_socket(410)
  write_socket(5,159) wrote 159

Beschorner Daniel

2003-Oct-23 00:09 UTC

head link

[Samba] Clear text authentication impossible???

So I'm only the 2nd winner with this bug :-)

Thank you, it works! (got to move the definition of pwhash[16] one line
higher in the patch to compile)

Daniel

-----Urspr?ngliche Nachricht-----
Von: Andrew Bartlett [mailto:abartlet@samba.org]
Gesendet: Donnerstag, 23. Oktober 2003 00:51
An: Jeremy Allison
Cc: Beschorner Daniel; 'samba@lists.samba.org'
Betreff: Re: [Samba] Clear text authentication impossible???


On Thu, 2003-10-23 at 05:16, Jeremy Allison wrote:> On Wed, Oct 22, 2003 at 03:27:31PM +0200, Beschorner Daniel wrote:
> > We have an Exchange 5.5 server in our Samba 3 domain und want to have
POP3> > access with clear text authentication from clients.
> > But no kind of credentials is accepted.
> > 
> > It did a level 10 log on the Samba server and found my clear text
password> > in the log (in nt_chal_resp and lm_chal_resp fields) during
authentication.> > 
> > Is it possible that Samba can't handle the clear-text pass-through
from
> > POP3-Client per Exchange server and takes it for NTLMv2 challenge????
> 
> Can you post the debug level 10 log please (obfuscate all passwords ofcourse :-).

I picked this one up at the end of last week.   I never got it into CVS,
because I didn't have the setup to test it.  (And I wanted to clean it
up a bit, we should also handle the 'interactive' login in a similar
way, and possibly 'ascii' passwords against the LM hash).

Thanks to Fabien Chevalier for providing the information that made
fixing this so easy.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet@pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet@samba.org
Student Network Administrator, Hawker College   abartlet@hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net

Maybe Matching Threads

Search for more seemingly similar threads

samba - Oct 2003 - Clear text authentication impossible???

[Samba] Clear text authentication impossible???

[Samba] Clear text authentication impossible???

[Samba] Clear text authentication impossible???

[Samba] Clear text authentication impossible???

[Samba] Clear text authentication impossible???

Maybe Matching Threads