samba - Dec 2005 - 3.0.21 and "Rejecting auth request from client"

Hi,
I have migrate from samba 3.0.20b to 3.0.21.
I restored the backup of all .tdb and when starting samba and a
Windows XP tries to connect, I get this error:

[2005/12/28 09:19:04, 0] libsmb/credentials.c:creds_server_check(159)
  creds_server_check: credentials check failed.
[2005/12/28 09:19:04, 0] rpc_server/srv_netlog_nt.c:_net_sam_logon(667)
  _net_sam_logon: creds_server_step failed. Rejecting auth request from 
client COMPUTER machine account COMPUTER$

I still can access the shares in the samba PDC.

Is this a warning or an error?

Many thanks
Oliver

-- 
Oliver Schulze L.
<oliver@samera.com.py>

Oliver Schulze L. wrote:
> Hi,
> I have migrate from samba 3.0.20b to 3.0.21.
> I restored the backup of all .tdb and when starting samba and a
> Windows XP tries to connect, I get this error:
>
> [2005/12/28 09:19:04, 0] libsmb/credentials.c:creds_server_check(159)
>  creds_server_check: credentials check failed.
> [2005/12/28 09:19:04, 0] rpc_server/srv_netlog_nt.c:_net_sam_logon(667)
>  _net_sam_logon: creds_server_step failed. Rejecting auth request from 
> client COMPUTER machine account COMPUTER$
>
> I still can access the shares in the samba PDC.
>
> Is this a warning or an error?
Sorry, I don't have an answer for you, but I'm seeing the same
thing.  In my case I re-built the tdb files anew.  The PDC I just
upgraded was v3.0.7.

I tend to think the problem is real.  Most of the time, the files
on the server can be seen from the workstation, but we have
an application whose binaries are on the server .  the app is
unreliable.

I am seeing AutoEnrollment Errors in the Application Event Logs.

Description:
Automatic certificate enrollment for local system failed to contact
the active directory (0x8007054b).  The specified domain either
does not exist or could not be contacted.

Enrollment will not be performed.

Are you seeing these AutoEnrollment errors too?

Ray

On Wed, 2005-12-28 at 10:41 -0300, Oliver Schulze L.
wrote:
> Hi,
> I have migrate from samba 3.0.20b to 3.0.21.
> I restored the backup of all .tdb and when starting samba and a
> Windows XP tries to connect, I get this error:
> 
> [2005/12/28 09:19:04, 0] libsmb/credentials.c:creds_server_check(159)
>   creds_server_check: credentials check failed.
> [2005/12/28 09:19:04, 0] rpc_server/srv_netlog_nt.c:_net_sam_logon(667)
>   _net_sam_logon: creds_server_step failed. Rejecting auth request from 
> client COMPUTER machine account COMPUTER$
> 
> I still can access the shares in the samba PDC.
You can, because the above is compiling about domain membership
problems.  Your machine thinks it is part of the domain, but your
DC/sever does not.  It will now however prevent you accessing a share,
if you can somehow log in.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Student Network Administrator, Hawker College  http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20051229/fa9e0484/attachment.bin

Hi Andrew,
the WinXP machine was in the domain in samba 3.0.20b, I have
done a backup off all .tdb, upgraded, started without the old
.tdb(I forgot to restore them), and finally restarted samba with
the old .tdb

I will try doing a tdbbackup and joining the domain again in
a test PC

Oliver

Andrew Bartlett wrote:
>
> You can, because the above is compiling about domain membership
> problems.  Your machine thinks it is part of the domain, but your
> DC/sever does not.  It will now however prevent you accessing a share,
> if you can somehow log in.
>
> Andrew Bartlett
>   
-- 
Oliver Schulze L.
<oliver@samera.com.py>

Andrew Bartlett wrote:
> On Wed, 2005-12-28 at 10:41 -0300, Oliver Schulze L. wrote:
>   
>> Hi,
>> I have migrate from samba 3.0.20b to 3.0.21.
>> I restored the backup of all .tdb and when starting samba and a
>> Windows XP tries to connect, I get this error:
>>
>> [2005/12/28 09:19:04, 0] libsmb/credentials.c:creds_server_check(159)
>>   creds_server_check: credentials check failed.
>> [2005/12/28 09:19:04, 0] rpc_server/srv_netlog_nt.c:_net_sam_logon(667)
>>   _net_sam_logon: creds_server_step failed. Rejecting auth request from
>> client COMPUTER machine account COMPUTER$
>>
>> I still can access the shares in the samba PDC.
>>     
>
> You can, because the above is compiling about domain membership
> problems.  Your machine thinks it is part of the domain, but your
> DC/sever does not.  It will now however prevent you accessing a share,
> if you can somehow log in.
>   
Hi Andrew,
I can use the samba server normally. I can log in, and use all shares 
normally, this is
what this error confuses me

Will try with 3.0.21a and see what happend.

Oliver

-- 
Oliver Schulze L.
<oliver@samera.com.py>

Hi Joern,
Happy 2006 to you too!

I'm having this same errors on samba 3.0.21x, so I'm downgrading to
samba 3.0.20b because I'm having some errors in printer shares.

HTH
Oliver

Joern Nettingsmeier wrote:
> hi andrew, hi oliver!
>
> a happy new year to you all (provided you are using the same calender as
> i am, if not, a happy generic 365 days!)
>
> Andrew Bartlett wrote:
>   
>> On Wed, 2005-12-28 at 10:41 -0300, Oliver Schulze L. wrote:
>>     
>>> Hi,
>>> I have migrate from samba 3.0.20b to 3.0.21.
>>> I restored the backup of all .tdb and when starting samba and a
>>> Windows XP tries to connect, I get this error:
>>>
>>> [2005/12/28 09:19:04, 0]
libsmb/credentials.c:creds_server_check(159)
>>>   creds_server_check: credentials check failed.
>>> [2005/12/28 09:19:04, 0]
rpc_server/srv_netlog_nt.c:_net_sam_logon(667)
>>>   _net_sam_logon: creds_server_step failed. Rejecting auth request
from
>>> client COMPUTER machine account COMPUTER$
>>>
>>> I still can access the shares in the samba PDC.
>>>       
>
> same problem here with 3.0.21a. i have just migrated from 3.0.20b using
> lars mueller's suse packages. os is suse linux 9.1 on ia32, clients are
> win2k/winxp.
>
> the error is definitely caused by the new samba version, there are no
> such messages in my old logs.  to me it looks like either i have a
> latent configuration problem that the new samba version chokes on, or
> the new samba behaves differently (bug?/feature?).
>
> could you or some other samba elder clarify?
>
>   
>> You can, because the above is compiling about domain membership
>> problems.  Your machine thinks it is part of the domain, but your
>> DC/sever does not.  It will now however prevent you accessing a share,
>> if you can somehow log in.
>>     
>
> hmm. the funny thing is that everything works - i can access server
> shares, login, you name it.
>
>
> regards,
>
> j?rn
>
>
>   
-- 
Oliver Schulze L.
<oliver@samera.com.py>

It seems to be uncritical because the client falls back to another call:

https://bugzilla.samba.org/show_bug.cgi?id=3366

Daniel