samba - Jul 2009 - Crazied NTLM_AUTH on samba 3.4.0

Hello,

For these days i'm trying to update the samba PDC of the network of the
version 3.0.28a to 3.4.0. I'm configured the ldap pass, winbind and the all
services, when they have sucess of update. But now i have a problem with the
ntlm_auth: he take and show random messages on auth. For example: 1 time
return 0xc00000c3 ( NT_STATUS_INVALID_NETWORK_RESPONSE) or 0x1c010002 (???)
and much others. I realized one thing: when the response is "Broken
Pipe"
the ntlm responds "OK" on first after try and back to the errors after
this
warning...

try and the logs:


RESULT OF NTLM_AUTH COMMAND:

insight-lin01 bin # ./ntlm_auth --username=gabriel -d10 --diagnostics
password:
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test LM failed!
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test LM and NTLM failed!
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test NTLM failed!
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test NTLM in LM failed!
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test NTLM in both failed!
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test NTLMv2 failed!
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test NTLMv2 and LMv2 failed!
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test LMv2 failed!
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test NTLMv2 and LMv2, LMv2 broken failed!
NT code 0x1c010002 (0x1c010002)
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test NTLM and LM, LM broken failed!
NT code 0x1c010002 (0x1c010002)
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test Plaintext failed!
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test Plaintext LM broken failed!
NT code 0x1c010002 (0x1c010002)
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test Plaintext NT only failed!
NT code 0x1c010002 (0x1c010002)
[2009/07/20 19:45:58,  1]
utils/ntlm_auth_diagnostics.c:600(diagnose_ntlm_auth)
  Test Plaintext LM only failed!

2 times after:

insight-lin01 bin # ./ntlm_auth --username=gabriel
password:
NT_STATUS_INVALID_NETWORK_RESPONSE: NT_STATUS_INVALID_NETWORK_RESPONSE
(0xc00000c3)
insight-lin01 bin # ./ntlm_auth --username=gabriel
password:
NT code 0x1c010002: NT code 0x1c010002 (0x1c010002)
insight-lin01 bin #
insight-lin01 bin # ./ntlm_auth --username=gabriel
password:
NT code 0x1c010002: NT code 0x1c010002 (0x1c010002)
insight-lin01 bin # ./ntlm_auth --username=gabriel
password:
NT code 0x1c010002: NT code 0x1c010002 (0x1c010002)
insight-lin01 bin # ./ntlm_auth --username=gabriel
password:
NT code 0x1c010002: NT code 0x1c010002 (0x1c010002)
insight-lin01 bin # ./ntlm_auth --username=gabriel
password:
NT code 0x1c010002: NT code 0x1c010002 (0x1c010002)
insight-lin01 bin # ./ntlm_auth --username=gabriel
password:
NT code 0x1c010002: NT code 0x1c010002 (0x1c010002)
insight-lin01 bin # ./ntlm_auth --username=gabriel
password:
NT code 0x1c010002: NT code 0x1c010002 (0x1c010002)
insight-lin01 bin #

I've realized when the error occurs the samba don't log the auth (or the
try
of auth). PLEASE SOMEONE CAN HELP ME:????? ITS a BuG?

On Mon, Jul 20, 2009 at 07:59:25PM -0300, Gabriel Cavalcante
wrote:
> 
> I've realized when the error occurs the samba don't log the auth
(or the try
> of auth). PLEASE SOMEONE CAN HELP ME:????? ITS a BuG?
Log a bug at bugzilla.samba.org and attach the debug level 10 logs from smbd
and ntlm_auth please.

Jeremy.

> . For example: 1 time
> return 0xc00000c3 ( NT_STATUS_INVALID_NETWORK_RESPONSE) or 0x1c010002 (???)
> and much others. I realized one thing: when the response is "Broken
Pipe"
> the ntlm responds "OK" on first after try and back to the errors
after this
> warning...
> 
I am seeing similar problems with 3.2.13 on my Squid server.

If it happens again I will try to get a log.

Alex Crow
-- 
This message is intended only for the addressee and may contain 
confidential information.  Unless you are that person, you may not 
disclose its contents or use it in any way and are requested to delete 
the message along with any attachments and notify us immediately. 

"Transact" is operated by Integrated Financial Arrangements plc 
Domain House, 5-7 Singer Street, London  EC2A 4BQ 
Tel: (020) 7608 4900 Fax: (020) 7608 1200
(Registered office: as above; Registered in England and Wales under
number: 3727592) 
Authorised and regulated by the Financial Services Authority (entered on
the FSA Register; number: 190856)