[Samba] "conversion error" and NT_STATUS_LOGON_FAILURE

Wolfgang Wegner
Sat, 11 Jun 2005 21:26:12 -0000

Hi list,

sorry in case I do ask a FAQ, but I did in fact find some more mentions
of a problem like this, but always without a solution.

I upgraded our Samba server today (from 2.10/SuSE to 3.0x/Debian) and
have problems with some of the clients (Windows XP). When trying to
access a share from these clients, I get a NT_STATUS_LOGON_FAILURE, and
increasing the log level reveals several occurences of things like this:
[2005/06/11 17:00:45, 3] lib/charcnv.c:convert_string_internal(256)
  convert_string_internal: Conversion error: Illegal multibyte sequence()

Neither user name nor password of the account I used do have special
characters in them. It seems the client in question does not get even
that far to negotiate the share, the share name does not even show up
in the server log.

Unfortunately I forgot to take the configuration file with me, but
attached is the log (log level 3) of such a connection attempt
from the client "software" (no, i did not assign that name!).

Configuration basics:
- plain text passwords (unix accounts)
- security = user
- 3 shares + printing

Other clients work flawlessly (i.e. as before, with the same stupid
XP cacheing and stuff), only two have these problems. The only
difference I could see (as a complete non-windows-expert) is that
these XP versions seem to be a bit different: the working ones are
completely german while the ones with problem have many parts in
english, looking like a mixed installation?!

There are also some strange things with printing, but it seems to me
that these are only the XP boxes requiring to re-install the printer.

Any help is greatly appreciated.

I can get access to the server on monday, but as I was trying so long
today without any success I wanted to take the time to get some hint
on what I should look for at all.

Regards,
Wolfgang

-------------- next part --------------
[2005/06/11 17:30:12, 3] smbd/process.c:process_smb(1091)
  Transaction 1 of length 137
[2005/06/11 17:30:12, 3] smbd/process.c:switch_message(886)
  switch message SMBnegprot (pid 4566) conn 0x0
[2005/06/11 17:30:12, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:12, 3] smbd/negprot.c:reply_negprot(461)
  Requested protocol [PC NETWORK PROGRAM 1.0]
[2005/06/11 17:30:12, 3] smbd/negprot.c:reply_negprot(461)
  Requested protocol [LANMAN1.0]
[2005/06/11 17:30:12, 3] smbd/negprot.c:reply_negprot(461)
  Requested protocol [Windows for Workgroups 3.1a]
[2005/06/11 17:30:12, 3] smbd/negprot.c:reply_negprot(461)
  Requested protocol [LM1.2X002]
[2005/06/11 17:30:12, 3] smbd/negprot.c:reply_negprot(461)
  Requested protocol [LANMAN2.1]
[2005/06/11 17:30:12, 3] smbd/negprot.c:reply_negprot(461)
  Requested protocol [NT LM 0.12]
[2005/06/11 17:30:12, 3] smbd/negprot.c:reply_nt1(327)
  not using SPNEGO
[2005/06/11 17:30:12, 3] smbd/negprot.c:reply_negprot(555)
  Selected protocol NT LM 0.12
[2005/06/11 17:30:12, 3] smbd/process.c:process_smb(1091)
  Transaction 2 of length 188
[2005/06/11 17:30:12, 3] smbd/process.c:switch_message(886)
  switch message SMBsesssetupX (pid 4566) conn 0x0
[2005/06/11 17:30:12, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:12, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
  wct=13 flg2=0xc807
[2005/06/11 17:30:12, 3] smbd/sesssetup.c:reply_sesssetup_and_X(801)
  Domain=[]  NativeOS=[Windows 2002 2600] NativeLanMan=[Windows 2002 5.1]
PrimaryDomain=[]
[2005/06/11 17:30:12, 2] smbd/sesssetup.c:setup_new_vc_session(608)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old
resources.
[2005/06/11 17:30:12, 3] smbd/sesssetup.c:reply_sesssetup_and_X(816)
  sesssetupX:name=[]\[]@[software]
[2005/06/11 17:30:12, 3] smbd/sesssetup.c:check_guest_password(116)
  Got anonymous request
[2005/06/11 17:30:12, 3] auth/auth.c:check_ntlm_password(219)
  check_ntlm_password:  Checking password for unmapped user []\[]@[] with the
new password interface
[2005/06/11 17:30:12, 3] auth/auth.c:check_ntlm_password(222)
  check_ntlm_password:  mapped user is: []\[]@[]
[2005/06/11 17:30:12, 3] auth/auth.c:check_ntlm_password(268)
  check_ntlm_password: guest authentication for user [] succeeded
[2005/06/11 17:30:12, 3] smbd/password.c:register_vuid(222)
  User name: nobody	Real name: nobody
[2005/06/11 17:30:12, 3] smbd/password.c:register_vuid(241)
  UNIX uid 65534 is UNIX user nobody, and will be vuid 100
[2005/06/11 17:30:12, 3] smbd/process.c:chain_reply(1231)
  Chained message
[2005/06/11 17:30:12, 3] smbd/process.c:switch_message(886)
  switch message SMBtconX (pid 4566) conn 0x0
[2005/06/11 17:30:12, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:12, 3] smbd/service.c:make_connection_snum(479)
  Connect path is '/tmp' for service [IPC$]
[2005/06/11 17:30:12, 3] lib/util_seaccess.c:se_access_check(251)
[2005/06/11 17:30:12, 3] lib/util_seaccess.c:se_access_check(252)
  se_access_check: user sid is S-1-5-21-1266279160-574976746-2406303312-501
  se_access_check: also S-1-5-21-1266279160-574976746-2406303312-514
  se_access_check: also S-1-1-0
  se_access_check: also S-1-5-2
  se_access_check: also S-1-5-32-546
  se_access_check: also S-1-5-21-1266279160-574976746-2406303312-132069
[2005/06/11 17:30:12, 3] smbd/vfs.c:vfs_init_default(206)
  Initialising default vfs hooks
[2005/06/11 17:30:12, 3] lib/util_seaccess.c:se_access_check(251)
[2005/06/11 17:30:12, 3] lib/util_seaccess.c:se_access_check(252)
  se_access_check: user sid is S-1-5-21-1266279160-574976746-2406303312-501
  se_access_check: also S-1-5-21-1266279160-574976746-2406303312-514
  se_access_check: also S-1-1-0
  se_access_check: also S-1-5-2
  se_access_check: also S-1-5-32-546
  se_access_check: also S-1-5-21-1266279160-574976746-2406303312-132069
[2005/06/11 17:30:12, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:12, 3] smbd/service.c:make_connection_snum(642)
  software (192.168.1.21) connect to service IPC$ initially as user nobody
(uid=65534, gid=65534) (pid 4566)
[2005/06/11 17:30:12, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:12, 3] smbd/reply.c:reply_tcon_and_X(455)
  tconX service=IPC$
[2005/06/11 17:30:12, 3] smbd/process.c:process_smb(1091)
  Transaction 3 of length 122
[2005/06/11 17:30:12, 3] smbd/process.c:switch_message(886)
  switch message SMBtrans (pid 4566) conn 0x8402c00
[2005/06/11 17:30:12, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:12, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\LANMAN> data=0 params=26 setup=0
[2005/06/11 17:30:12, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <LANMAN> name
[2005/06/11 17:30:12, 3] smbd/lanman.c:api_reply(3569)
  Got API command 104 of form <WrLehDO> <B16BBDz>
(tdscnt=0,tpscnt=26,mdrcnt=4200,mprcnt=8)
[2005/06/11 17:30:12, 3] smbd/lanman.c:api_reply(3573)
  Doing NetServerEnum
[2005/06/11 17:30:12, 3] smbd/lanman.c:api_RNetServerEnum(1267)
  NetServerEnum domain = WORKGROUP uLevel=1 counted=3 total=3
[2005/06/11 17:30:12, 3] smbd/process.c:process_smb(1091)
  Transaction 4 of length 43
[2005/06/11 17:30:12, 3] smbd/process.c:switch_message(886)
  switch message SMBulogoffX (pid 4566) conn 0x0
[2005/06/11 17:30:12, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:12, 3] smbd/reply.c:reply_ulogoffX(1264)
  ulogoffX vuid=100
[2005/06/11 17:30:12, 3] smbd/process.c:process_smb(1091)
  Transaction 5 of length 39
[2005/06/11 17:30:12, 3] smbd/process.c:switch_message(886)
  switch message SMBtdis (pid 4566) conn 0x8402c00
[2005/06/11 17:30:12, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:12, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:12, 3] smbd/service.c:close_cnum(830)
  software (192.168.1.21) closed connection to service IPC$
[2005/06/11 17:30:12, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to IPC$
[2005/06/11 17:30:12, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:12, 3] smbd/process.c:timeout_processing(1334)
  timeout_processing: End of file from client (client has disconnected).
[2005/06/11 17:30:12, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:12, 2] smbd/server.c:exit_server(609)
  Closing connections
[2005/06/11 17:30:12, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to
[2005/06/11 17:30:12, 3] smbd/server.c:exit_server(652)
  Server exit (normal exit)
[2005/06/11 17:30:14, 3] smbd/process.c:timeout_processing(1334)
  timeout_processing: End of file from client (client has disconnected).
[2005/06/11 17:30:14, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:14, 2] smbd/server.c:exit_server(609)
  Closing connections
[2005/06/11 17:30:14, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to
[2005/06/11 17:30:14, 3] smbd/connection.c:yield_connection(76)
  yield_connection: tdb_delete for name  failed with error Record does not
exist.
[2005/06/11 17:30:14, 3] smbd/server.c:exit_server(652)
  Server exit (normal exit)
[2005/06/11 17:30:14, 3] smbd/process.c:process_smb(1091)
  Transaction 1 of length 137
[2005/06/11 17:30:14, 3] smbd/process.c:switch_message(886)
  switch message SMBnegprot (pid 4569) conn 0x0
[2005/06/11 17:30:14, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:14, 3] smbd/negprot.c:reply_negprot(461)
  Requested protocol [PC NETWORK PROGRAM 1.0]
[2005/06/11 17:30:14, 3] smbd/negprot.c:reply_negprot(461)
  Requested protocol [LANMAN1.0]
[2005/06/11 17:30:14, 3] smbd/negprot.c:reply_negprot(461)
  Requested protocol [Windows for Workgroups 3.1a]
[2005/06/11 17:30:14, 3] smbd/negprot.c:reply_negprot(461)
  Requested protocol [LM1.2X002]
[2005/06/11 17:30:14, 3] smbd/negprot.c:reply_negprot(461)
  Requested protocol [LANMAN2.1]
[2005/06/11 17:30:14, 3] smbd/negprot.c:reply_negprot(461)
  Requested protocol [NT LM 0.12]
[2005/06/11 17:30:14, 3] smbd/negprot.c:reply_nt1(327)
  not using SPNEGO
[2005/06/11 17:30:14, 3] smbd/negprot.c:reply_negprot(555)
  Selected protocol NT LM 0.12
[2005/06/11 17:30:14, 3] smbd/process.c:process_smb(1091)
  Transaction 2 of length 188
[2005/06/11 17:30:14, 3] smbd/process.c:switch_message(886)
  switch message SMBsesssetupX (pid 4569) conn 0x0
[2005/06/11 17:30:14, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:14, 3] smbd/sesssetup.c:reply_sesssetup_and_X(655)
  wct=13 flg2=0xc807
[2005/06/11 17:30:14, 3] smbd/sesssetup.c:reply_sesssetup_and_X(801)
  Domain=[]  NativeOS=[Windows 2002 2600] NativeLanMan=[Windows 2002 5.1]
PrimaryDomain=[]
[2005/06/11 17:30:14, 3] smbd/sesssetup.c:reply_sesssetup_and_X(816)
  sesssetupX:name=[]\[]@[software]
[2005/06/11 17:30:14, 3] smbd/sesssetup.c:check_guest_password(116)
  Got anonymous request
[2005/06/11 17:30:14, 3] auth/auth.c:check_ntlm_password(219)
  check_ntlm_password:  Checking password for unmapped user []\[]@[] with the
new password interface
[2005/06/11 17:30:14, 3] auth/auth.c:check_ntlm_password(222)
  check_ntlm_password:  mapped user is: []\[]@[]
[2005/06/11 17:30:14, 3] auth/auth.c:check_ntlm_password(268)
  check_ntlm_password: guest authentication for user [] succeeded
[2005/06/11 17:30:14, 3] smbd/password.c:register_vuid(222)
  User name: nobody	Real name: nobody
[2005/06/11 17:30:14, 3] smbd/password.c:register_vuid(241)
  UNIX uid 65534 is UNIX user nobody, and will be vuid 100
[2005/06/11 17:30:14, 3] smbd/process.c:chain_reply(1231)
  Chained message
[2005/06/11 17:30:14, 3] smbd/process.c:switch_message(886)
  switch message SMBtconX (pid 4569) conn 0x0
[2005/06/11 17:30:14, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:14, 3] smbd/service.c:make_connection_snum(479)
  Connect path is '/tmp' for service [IPC$]
[2005/06/11 17:30:14, 3] lib/util_seaccess.c:se_access_check(251)
[2005/06/11 17:30:14, 3] lib/util_seaccess.c:se_access_check(252)
  se_access_check: user sid is S-1-5-21-1266279160-574976746-2406303312-501
  se_access_check: also S-1-5-21-1266279160-574976746-2406303312-514
  se_access_check: also S-1-1-0
  se_access_check: also S-1-5-2
  se_access_check: also S-1-5-32-546
  se_access_check: also S-1-5-21-1266279160-574976746-2406303312-132069
[2005/06/11 17:30:14, 3] smbd/vfs.c:vfs_init_default(206)
  Initialising default vfs hooks
[2005/06/11 17:30:14, 3] lib/util_seaccess.c:se_access_check(251)
[2005/06/11 17:30:14, 3] lib/util_seaccess.c:se_access_check(252)
  se_access_check: user sid is S-1-5-21-1266279160-574976746-2406303312-501
  se_access_check: also S-1-5-21-1266279160-574976746-2406303312-514
  se_access_check: also S-1-1-0
  se_access_check: also S-1-5-2
  se_access_check: also S-1-5-32-546
  se_access_check: also S-1-5-21-1266279160-574976746-2406303312-132069
[2005/06/11 17:30:14, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:14, 3] smbd/service.c:make_connection_snum(642)
  software (192.168.1.21) connect to service IPC$ initially as user nobody
(uid=65534, gid=65534) (pid 4569)
[2005/06/11 17:30:14, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:14, 3] smbd/reply.c:reply_tcon_and_X(455)
  tconX service=IPC$
[2005/06/11 17:30:14, 3] smbd/process.c:process_smb(1091)
  Transaction 3 of length 106
[2005/06/11 17:30:14, 3] smbd/process.c:switch_message(886)
  switch message SMBntcreateX (pid 4569) conn 0x8402c00
[2005/06/11 17:30:14, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (65534, 65534) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:14, 3] smbd/nttrans.c:nt_open_pipe(514)
  nt_open_pipe: Known pipe spoolss opening.
[2005/06/11 17:30:14, 3] smbd/process.c:process_smb(1091)
  Transaction 4 of length 140
[2005/06/11 17:30:14, 3] smbd/process.c:switch_message(886)
  switch message SMBwriteX (pid 4569) conn 0x8402c00
[2005/06/11 17:30:14, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(887)
  api_pipe_bind_req: \PIPE\spoolss -> \PIPE\spoolss
[2005/06/11 17:30:14, 3] rpc_server/srv_pipe.c:check_bind_req(762)
  check_bind_req for \PIPE\spoolss
[2005/06/11 17:30:14, 3] smbd/pipes.c:reply_pipe_write_and_X(199)
  writeX-IPC pnum=725f nwritten=72
[2005/06/11 17:30:14, 3] smbd/process.c:process_smb(1091)
  Transaction 5 of length 63
[2005/06/11 17:30:14, 3] smbd/process.c:switch_message(886)
  switch message SMBreadX (pid 4569) conn 0x8402c00
[2005/06/11 17:30:14, 3] smbd/pipes.c:reply_pipe_read_and_X(242)
  readX-IPC pnum=725f min=1024 max=1024 nread=68
[2005/06/11 17:30:14, 3] smbd/process.c:process_smb(1091)
  Transaction 6 of length 458
[2005/06/11 17:30:14, 3] smbd/process.c:switch_message(886)
  switch message SMBtrans (pid 4569) conn 0x8402c00
[2005/06/11 17:30:14, 3] smbd/ipc.c:reply_trans(539)
  trans <\PIPE\> data=370 params=0 setup=2
[2005/06/11 17:30:14, 3] smbd/ipc.c:named_pipe(334)
  named pipe command on <> name
[2005/06/11 17:30:14, 3] smbd/ipc.c:api_fd_reply(294)
  Got API command 0x26 on pipe "spoolss" (pnum 725f)
[2005/06/11 17:30:14, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
  free_pipe_context: destroying talloc pool of size 0
[2005/06/11 17:30:14, 3] rpc_server/srv_pipe.c:api_rpcTNP(1538)
  api_rpcTNP: rpc command: SPOOLSS_ADDPRINTEREX
[2005/06/11 17:30:14, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(542)
  free_pipe_context: destroying talloc pool of size 244
[2005/06/11 17:30:14, 3] smbd/process.c:process_smb(1091)
  Transaction 7 of length 45
[2005/06/11 17:30:14, 3] smbd/process.c:switch_message(886)
  switch message SMBclose (pid 4569) conn 0x8402c00
[2005/06/11 17:30:25, 3] smbd/process.c:process_smb(1091)
  Transaction 8 of length 43
[2005/06/11 17:30:25, 3] smbd/process.c:switch_message(886)
  switch message SMBulogoffX (pid 4569) conn 0x0
[2005/06/11 17:30:25, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:25, 3] smbd/reply.c:reply_ulogoffX(1264)
  ulogoffX vuid=100
[2005/06/11 17:30:25, 3] smbd/process.c:process_smb(1091)
  Transaction 9 of length 39
[2005/06/11 17:30:25, 3] smbd/process.c:switch_message(886)
  switch message SMBtdis (pid 4569) conn 0x8402c00
[2005/06/11 17:30:25, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:25, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:25, 3] smbd/service.c:close_cnum(830)
  software (192.168.1.21) closed connection to service IPC$
[2005/06/11 17:30:25, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to IPC$
[2005/06/11 17:30:25, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:25, 3] smbd/process.c:timeout_processing(1334)
  timeout_processing: End of file from client (client has disconnected).
[2005/06/11 17:30:25, 3] smbd/sec_ctx.c:set_sec_ctx(288)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2005/06/11 17:30:25, 2] smbd/server.c:exit_server(609)
  Closing connections
[2005/06/11 17:30:25, 3] smbd/connection.c:yield_connection(69)
  Yielding connection to
[2005/06/11 17:30:25, 3] smbd/server.c:exit_server(652)
  Server exit (normal exit)