samba - Apr 2007 - the challenge that the password server.. supplied us is not the one we gave our client

Hi,

periodically we are seeing the following error in our samba log. At this time
nobody can connect to the shares of this server anymore.

[2007/04/17 09:05:59, 2] auth/auth.c:check_ntlm_password(312)
  check_ntlm_password:  Authentication for user [PID33C1] -> [PID33C1] FAILED
  with error NT_STATUS_LOGON_FAILURE
[2007/04/17 09:06:03, 1] auth/auth_server.c:check_smbserver_security(263)
  the challenge that the password server (our_password_server) supplied us
  is not the one we gave our client. This just can't work :-(
[2007/04/17 09:06:03, 2] auth/auth.c:check_ntlm_password(312)
  check_ntlm_password:  Authentication for user [PID33C1] -> [PID33C1] FAILED
  with error NT_STATUS_LOGON_FAILURE
[2007/04/17 09:06:07, 1] auth/auth_server.c:check_smbserver_security(263)
  the challenge that the password server (our_password_server) supplied us
  is not the one we gave our client. This just can't work :-(

We're using security = SERVER because the server is not member of the
domain.
The few users that use that server can authenticate against the ADS password
server.

After restarting samba everything is fine again. Other server that use the
same config don't show this problem at the same time, hence I don't
think it's
an ADS problem.

System:
Debian Sarge, Samba 3.0.14

Any hints what to look for? This problem is a bit anoying and I haven't
found
much about it in the list archive.

Ralf

On Tue, Apr 17, 2007 at 11:12:00AM +0200, Ralf Gross
wrote:
> Any hints what to look for? This problem is a bit anoying and I haven't
found
> much about it in the list archive.
Don't use security=server, join that box to the domain. No
way around that.

Volker
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url :
http://lists.samba.org/archive/samba/attachments/20070417/e36e1ed3/attachment.bin