samba - May 2011 - api_pipe_bind_req: unknown auth type 9 requested.

Hi,

I have two machines opteron1 and opteron2, both amd64 that have to
authenticate users via winbind.

On opteron1 I have samba 3.2.5 (packaged by debian) and everything works
fine.

On opteron2 with samba 3.2.5 everything worked fine too. We now
"upgraded" this to the current version in debian sid, namely 3.5.8.
And
a problem we previously had with some versions before 3.2.5 and some
after has arisen again:

Authentication appears to fail. On the server we see the error message:

[2011/05/18 13:27:57, 0] rpc_server/srv_pipe.c:api_pipe_bind_req(993)
  api_pipe_bind_req: unknown auth type 9 requested.
[2011/05/18 13:27:57, 0] rpc_server/srv_netlog.c:api_net_sam_logon(201)
  api_net_sam_logon: Failed to unmarshall NET_Q_SAM_LOGON.
[2011/05/18 13:27:57, 0] rpc_server/srv_pipe.c:api_rpcTNP(1560)

On the client thecorresonding commands were:

opteron2:/var/log/samba# /etc/init.d/winbind start
Starting the Winbind daemon: winbind.

opteron2:/var/log/samba# wbinfo -a math_lab%goodpass
plaintext password authentication succeeded
challenge/response password authentication failed
error code was NT code 0x1c010002 (0x1c010002)
error messsage was: NT code 0x1c010002
Could not authenticate user math_lab with challenge/response

opteron2:/var/log/samba# wbinfo -a math_lab%goodpass
plaintext password authentication failed
Could not authenticate user math_lab%goodpass with plaintext password
challenge/response password authentication failed
error code was NT code 0x1c010002 (0x1c010002)
error messsage was: NT code 0x1c010002
Could not authenticate user math_lab with challenge/response

opteron2:/var/log/samba# wbinfo -t
checking the trust secret for domain STUDENT via RPC calls succeeded

opteron2:/var/log/samba# wbinfo -a math_lab%goodpass
plaintext password authentication succeeded
challenge/response password authentication failed
error code was NT code 0x1c010002 (0x1c010002)
error messsage was: NT code 0x1c010002
Could not authenticate user math_lab with challenge/response

Our smb.conf file:
[global]
        workgroup = STUDENT
        server string = %h server
        interfaces = 127.0.0.0/8, eth1
        bind interfaces only = Yes
        security = DOMAIN
        passdb backend = tdbsam
        passwd program = /usr/bin/passwd %u
        passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n *password\supdated\ssuccessfully* .
        syslog = 0
        log file = /var/log/samba/log.%m
        max log size = 1000
        dns proxy = No
        panic action = /usr/share/samba/panic-action %d
        idmap uid = 1000-20000
        idmap gid = 1000-2000
        template homedir = /home_samba/%D/%U
        template shell = /bin/bash
        winbind separator = +
        winbind enum users = Yes
        winbind enum groups = Yes
        winbind use default domain = Yes
        invalid users = root

[homes]
        comment = Home Directories
        valid users = %S
        create mask = 0700
        directory mask = 0700
        browseable = No

[printers]
        comment = All Printers
        path = /var/spool/samba
        create mask = 0700
        printable = Yes
        browseable = No

[print$]
        comment = Printer Drivers
        path = /var/lib/samba/printers

In the client log files I see in /var/log/samba/log.wb-STUDENT:
[2011/05/18 13:27:57.480799,  1]
rpc_client/cli_pipe.c:1046(cli_pipe_validate_current_pdu)
  cli_pipe_validate_current_pdu: RPC fault code DCERPC_FAULT_OP_RNG_ERROR
received from host UNCLEHENRY!
[2011/05/18 13:27:57.480904,  0]
rpc_client/cli_pipe.c:3853(cli_rpc_pipe_open_ntlmssp_internal)
  cli_rpc_pipe_open_ntlmssp_internal: cli_rpc_pipe_bind failed with error NT
code 0x1c010002

Any suggestions would be greatly appreciated.

Andreas



-- 
Andreas Guelzow <aguelzow at pyrshep.ca>