samba - Oct 2004 - wbinfo -a always failing with NT_STATUS_WRONG_PASSWORD

Hello!

Please help!  I have been googling and experimenting for the past few
days, but I can't get user authentications to work with my AD domain.

Fedora Core 2 running Samba 3.0.7-2.FC2
Windows Server 2003 Standard Edition

After much fuss, I was able to get it to join the domain (had to
disable client signing).
"wbinfo -u" and "wbinfo -g" both work fine, and I can see
the user I'm
trying to authenticate with.  "wbinfo -a user%pass" always gives me:

# wbinfo -a user%pass
plaintext password authentication failed
error code was NT_STATUS_WRONG_PASSWORD (0xc000006a)
error messsage was: Wrong Password
Could not authenticate user user%pass with plaintext password
challenge/response password authentication failed
error code was NT_STATUS_WRONG_PASSWORD (0xc000006a)
error messsage was: Wrong Password
Could not authenticate user user with challenge/response

It eventually locks out the account.  I've tried multiple accounts,
and even creating a new account with the same results.  Trying with a
bogus user gives me NT_STATUS_NO_SUCH_USER (0xc0000064).

I think I've read every how-to out there on this, and searched every
forum I can find.  I am at a loss.  Can someone give me an idea of
what settings I can play with that would affect this?  Or what to look
for in a debug?

Any suggestions would be GREATLY appreciated!

Thanks!

-Jeremy

My current smb.conf:

[global]
  realm = DOTP.NCP.NET
  workgroup = DOTP
  password server = dotdc1p.dotp.ncp.net
  security = ads
  encrypt passwords = yes
  winbind use default domain = yes 
  log level = 3

testparm output:
Load smb config files from /etc/samba/smb.conf
Loaded services file OK.
Server role: ROLE_DOMAIN_MEMBER
Press enter to see a dump of your service definitions

# Global parameters
[global]
        workgroup = DOTP
        realm = DOTP.NCP.NET
        security = ADS
        password server = dotdc1p.dotp.ncp.net
        log level = 3
        winbind use default domain = Yes

Thanks!

On Tue, 05 Oct 2004 11:36:15 -0600, Gerald Bird <rocknrollgolfer@shaw.ca>
wrote:
> A look at your smb.conf might be helpful in this situation. Also the output
of running a testparm.
> 
> Regards,
> 
> Gerald Bird
> 
> 
> 
> ----- Original Message -----
> From: Jeremy Naylor <jnaylor@gmail.com>
> Date: Tuesday, October 5, 2004 11:24 am
> Subject: [Samba] wbinfo -a always failing with NT_STATUS_WRONG_PASSWORD
> 
> > Hello!
> >
> > Please help!  I have been googling and experimenting for the past few
> > days, but I can't get user authentications to work with my AD
domain.
> >
> > Fedora Core 2 running Samba 3.0.7-2.FC2
> > Windows Server 2003 Standard Edition
> >
> > After much fuss, I was able to get it to join the domain (had to
> > disable client signing).
> > "wbinfo -u" and "wbinfo -g" both work fine, and I
can see the user I'm
> > trying to authenticate with.  "wbinfo -a user%pass" always
gives me:
> >
> > # wbinfo -a user%pass
> > plaintext password authentication failed
> > error code was NT_STATUS_WRONG_PASSWORD (0xc000006a)
> > error messsage was: Wrong Password
> > Could not authenticate user user%pass with plaintext password
> > challenge/response password authentication failed
> > error code was NT_STATUS_WRONG_PASSWORD (0xc000006a)
> > error messsage was: Wrong Password
> > Could not authenticate user user with challenge/response
> >
> > It eventually locks out the account.  I've tried multiple
accounts,
> > and even creating a new account with the same results.  Trying
> > with a
> > bogus user gives me NT_STATUS_NO_SUCH_USER (0xc0000064).
> >
> > I think I've read every how-to out there on this, and searched
every
> > forum I can find.  I am at a loss.  Can someone give me an idea of
> > what settings I can play with that would affect this?  Or what to look
> > for in a debug?
> >
> > Any suggestions would be GREATLY appreciated!
> >
> > Thanks!
> >
> > -Jeremy
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> >
> 
>