samba - Dec 2006 - Could not authenticate user user%password with plaintext password

Hello,

I am new to samba however i am trying configure samba to attach to 2003 AD
as ADS which worked ok however i am getting this error message:
[root@linux user]# wbinfo -a user%password
plaintext password authentication failed
error code was NT_STATUS_ACCESS_DENIED (0xc0000022)
error messsage was: Access denied
Could not authenticate user user%password with plaintext password
challenge/response password authentication succeeded

I am able to run wbinfo -g and wbinfo -u and from windows xp client machine
i am able to browse the network and see the samba server but  its not
accessible. you might not have permission error.
my smb.conf is
[global]
        workgroup = CAD
        security = ADS
        realm = CAD.TESTDOMAIN
        client use spnego = no
        server signing = auto
        netbios name = linux
        winbind use default domain = yes
        winbind separator = +
       encrypt passwords = yes
        log level = 3
        log file = /var/log/samba/%m
        max log size = 50

        password server = VDC2.CAD.TESTDOMAIN
        template shell = /bin/bash
[test]
        comment = Test Share using Active Directory
        path = /data
        valid users = @"VDC2\Users"
        writeable = yes
        browseable = yes

There are numerous steps and possibilties, so it's hard to know where to 
start.  First, if you're going to use "valid users", make sure
you're
using Samba version 3.0.23c or 3.0.23d.  Second, since you're using 
winbind, you might have better luck with *valid users = @"CAD+Domain 
Users"*.  Two good how-to's for winbind setup and ADS membership are  
at http://www.enterprisenetworkingplanet.com/netos/article.php/3487081 
and 
http://www.enterprisenetworkingplanet.com/netos/article.php/10951_3502441_1 
.  They worked well for me.  Windows 2003 may not be exactly the same, 
but should be similar.

Good luck,
Dale

M Azer wrote:
> Hello,
>
> I am new to samba however i am trying configure samba to attach to 
> 2003 AD
> as ADS which worked ok however i am getting this error message:
> [root@linux user]# wbinfo -a user%password
> plaintext password authentication failed
> error code was NT_STATUS_ACCESS_DENIED (0xc0000022)
> error messsage was: Access denied
> Could not authenticate user user%password with plaintext password
> challenge/response password authentication succeeded
>
> I am able to run wbinfo -g and wbinfo -u and from windows xp client 
> machine
> i am able to browse the network and see the samba server but  its not
> accessible. you might not have permission error.
> my smb.conf is
> [global]
>        workgroup = CAD
>        security = ADS
>        realm = CAD.TESTDOMAIN
>        client use spnego = no
>        server signing = auto
>        netbios name = linux
>        winbind use default domain = yes
>        winbind separator = +
>       encrypt passwords = yes
>        log level = 3
>        log file = /var/log/samba/%m
>        max log size = 50
>
>        password server = VDC2.CAD.TESTDOMAIN
>        template shell = /bin/bash
> [test]
>        comment = Test Share using Active Directory
>        path = /data
>        valid users = @"VDC2\Users"
>        writeable = yes
>        browseable = yes