samba - Sep 2016 - ntlmssp_server_postauth: invalid NTLMSSP_MIC on CTDB fileserver (NT-style domain)

On 22/09/16 12:12, Rowland Penny via samba wrote:
> On Thu, 22 Sep 2016 10:58:18 +0100
> Alex Crow via samba <samba at lists.samba.org> wrote:
>
>> Hi List,
>>
>> As the subject states, I'm running a CTDB cluster. Samba is Sernet
>> 4.4.5 in an NT-Style Samba domain (DCs are Centos 6 packaged samba,
>> 3.6.22)
>>
>> Every so often, users are unable to connect to network shares. Most of
>> the problems seem to happen on Windows 7 domain members, but smbclient
>> will also fail to connect. I see these lines in the logs for every
>> attempted connection:
>>
> This sounds very like this bug:
>
> https://bugzilla.samba.org/show_bug.cgi?id=11847
>
> But it is supposed to be fixed ?
>
> Rowland
>
I have "map to guest = bad user". Sorry, I must have missed pasting
that in.

However the bug only seems to reference guest share access. This is 
happening on normal, restricted shares.

Thanks,

Alex

--
This message is intended only for the addressee and may contain
confidential information. Unless you are that person, you may not
disclose its contents or use it in any way and are requested to delete
the message along with any attachments and notify us immediately.
This email is not intended to, nor should it be taken to, constitute advice.
The information provided is correct to our knowledge & belief and must not
be used as a substitute for obtaining tax, regulatory, investment, legal or
any other appropriate advice.

"Transact" is operated by Integrated Financial Arrangements Ltd.
29 Clement's Lane, London EC4N 7AE. Tel: (020) 7608 4900 Fax: (020) 7608
5300.
(Registered office: as above; Registered in England and Wales under
number: 3727592). Authorised and regulated by the Financial Conduct
Authority (entered on the Financial Services Register; no. 190856).

This sounds very like this bug:
>>
>> https://bugzilla.samba.org/show_bug.cgi?id=11847
>>
>> But it is supposed to be fixed ?
>>
>> Rowland
>>
> I have "map to guest = bad user". Sorry, I must have missed
pasting
> that in.
>
> However the bug only seems to reference guest share access. This is
> happening on normal, restricted shares.
>
> Thanks,
>
> Alex
>
Should a bugzilla be raised on this?

It usually seems to happen on Monday mornings (grr!) so I will keep my
eye on it tomorrow.

Cheers

Alex
--
This message is intended only for the addressee and may contain
confidential information. Unless you are that person, you may not
disclose its contents or use it in any way and are requested to delete
the message along with any attachments and notify us immediately.
This email is not intended to, nor should it be taken to, constitute advice.
The information provided is correct to our knowledge & belief and must not
be used as a substitute for obtaining tax, regulatory, investment, legal or
any other appropriate advice.

"Transact" is operated by Integrated Financial Arrangements Ltd.
29 Clement's Lane, London EC4N 7AE. Tel: (020) 7608 4900 Fax: (020) 7608
5300.
(Registered office: as above; Registered in England and Wales under
number: 3727592). Authorised and regulated by the Financial Conduct
Authority (entered on the Financial Services Register; no. 190856).

We actrually have the same problem. However, we are running a normal fileserver
(also Sernet 4.4.5)
no cluster in an NT-Style domain with Centos 5 (Samba 3.6.23) as the DC.
IT works OK for some days then just stops. Any idea how to debug?


Regards

Christian


--