similar to: win xp pro: can't login to samba domainNT_STATUS_WRONG_PASSWORD

Dear List! I am having a problem when trying to login from win xp prof sp 2 to samba 3.0.10 pdc (with ldap) on my Gentoo box: samba log says: check_ntlm_password: mapped user is: [TUXNT]\[root]@[P9WS] ntlm_password_check: NT MD4 password check failed for user root init_ldap_from_sam: Setting entry for user: root check_ntlm_password: Authentication for user [root] -> [root] FAILED with

Hi Daryl, > I recently migrated our samba PDC to an LDAP backend on a test machine. > Testing my account policies, I found out that the password lockout did not > work. bad password lockout works fine in Samba AD mode. Is there a technical reason for you to keep on using PDC NT4 mode? In AD mode, you'll also get a LDAP, and it will be much easier to setup and manage! By the way,

I found out the answer to why the bad password count was failing by following the stack trace If anyone has the same problem, this was caused by my access rights being too restrictive. source/passdb/Init_sam_from_ldap.c:1064 => There is a "goto fn_exit;" in case ldapsam_get_entry_timestamp() fails before the cache is read via login_cache_read. This function will fail if it cannot

Hi Denis, Thanks for your suggestion When I looked into Samba4 AD, I figured it would take too much effort to port our infrastructure to it, seemingly without benefits We already have a quite extensive network architecture with OpenLDAP acting as a LDAP server. Samba4 AD seems to require its own LDAP implementation (and some more quirks IIRC). There's also the additional DNS configuration

Hi List: My setup: cups-1.3.5 nss_ldap-259 openldap-2.4.7 openslp-1.2.1 perl-5.10.0 samba-3.0.28 I have an application that is a Win32 app. We share the application on a Samba server. The application has 3 DLLs that it opens and uses code from. Originally we were running a 2.x version of Samba and all users had local accounts. Samba was not acting in a domain controller role. Users had

Hello! I'm trying to join a Windows XP (64 bit version) machine to a Samba 3.0.21a domain via smbldap-tools 0.9.1 on FreeBSD 6.0-RELEASE-p4 and I'm continually getting the message "The user name could not be found." I am attempting to join using members of the Domain Admins group (mapped to Unix group 515), and I'm noticing in the logs (below) that even though the machine

I'm trying to configure Samba's vscan on-access VFS module on a box with a working CLAM installation. [CLAM is merrily scanning mail on this box via clamav-milter]. I've set this up before, but this time it seems to be giving me grief. If I remove the vscan-clamav module then everything works, and I can open files. When I try to open a file with the module enable I just get a file

I recently migrated our samba PDC to an LDAP backend on a test machine. Testing my account policies, I found out that the password lockout did not work. When authentication fail, samba seems to call init_ldap_from_sam asking to update the bad password count. When I set the lockout threshold to 1, the account is locked after a failed attempt and the badPasswordCount attribute is updated correctly

List, we are working on implementing an antivirus solution (samba-vscan + clamav)on our samba shares. We performed the steps mentioned on some guides we found in Portuguese and things seems to be installed ok. But when we make a test and try to access a share, every file on it is not accessible (though we can mount the share) and after looking at /var/log/messages we see the following: ... Mar 11

Hi there, I was looking through examples of puppet recipes and came across: http://reductivelabs.com/trac/puppet/wiki/ClamAV I notice the exhaustive listing of each files properties and settings and wonder if there is a way to have a file inherit settings from other files? Ie instead of: file { "main_cvd": path => "/var/lib/clamav/main.cvd",

Dear all, I have installed Samba (3.6.6) on Debian wheezy and configured it to authenticate against LDAP (encrypted passwords, no lanman). I want simple shares with user security. I have configured PAM/NSS from the same LDAP and it works fine. WinXP works fine, smbclient works fine, but Windows 7 only works for SOME passwords. Some work, some do not. Samba is configured with restricted LDAP

Dear All, I have upgrade my samba from 3.0.33 to 3.3.3, that proces are success but I have a problem for samba-vscan. Error : [2012/01/16 10:32:00.074547, 0] smbd/vfs.c:167(vfs_init_custom) error probing vfs module 'vscan-clamav': NT_STATUS_UNSUCCESSFUL [2012/01/16 10:32:00.074559, 0] smbd/vfs.c:309(smbd_vfs_init) smbd_vfs_init: vfs_init_custom failed for vscan-clamav [2012/01/16

Hi All. I have a SAMBA PDC that uses LDAP as its back end. The OS, is UBUNTU 6.10 Server. SAMBA Version is 3.022 The problem is, when a client logs onto the Domain, he presses Control+Alt+Del, and chooses Change Password. He types in the old password, then the new one, and confirms this. When he clicks on OK, it thinks for a bit (about 30 seconds) and then says: "The system cannot change

Hello list - I am not sure my messages are getting out to the list, so I will attempt in this message to summarize the problems I am having that have been the subject of a few other posts. I recently upgraded from a command-line Slackware installation to Debian Jessie. As part of that exercise, Samba was upgraded from 3.5.x to 4.1.17. My upgrade method was probably not idea: I recursively

Hello Recently I migrated from samba 3.0.24 to samba 3.2.5 on Debian etch amd64. In old system I have working samba-vscan used with ClamAV 0.91. Now I have ClamAV 0.94.2. I compiled vscan-clamav successfully, but when I try to connect to the share, it fails and I get some strange messages in the samba logs: "Error trying to resolve symbol 'init_samba_module' in

I'm running Centos 4.3 and Samba 3.0.24. I have an OpenLDAP backend. I have successfully got a Windows Domain to work, Windows XP -> Samba -> OpenLDAP. I can add machines to the domain and I can login and change passwords. The trouble is that I'm using NTLM and have been told that I must upgrade to NTLMv2, but I'm having great difficulty doing so. I have existing NTLM users. I

Hi everyone, I'm unable to make the account lockout to work properly. & this is driving me mad. I am running samba Version 3.0.23c-1.fc5 as a PDC with openldap 2.3.19 on a fc5 (all packages from yum). I was running a 3.0.21 with the same issue. I'm using as well the Idealx script to manage the LDAP. The fact: I have a very strange behavior. The domain policy have been setup with the

I just installed samba3+samba-vscan via ports on a FreeBSD 4.x system. Samba is running just fine and thanks to the help of webmin it was easily configured. Today I finally was able to get windows shares to be mounted on my FreeBSD server. So naturally I want to run av scans on it. I set it up to mount the entire C drive and to scan it using clamav which is also installed from ports. I recompiled

Good Morning! We got in some troubles using trusted domains and winbind. First i will tell you something about the network and samba configuration. For our SMB Environment we use Samba 3.2.12. We have three trusted domains. Our Samba Server uses LDAP as Backend. Most of the time it worked nice, but after some time Winbind loses User Entrys. On the windows side i can see "unknown user

Hello, I have installed samba-vscan module but when I try to read a test file: May 24 12:14:12 va2 smbd_vscan-clamav[15035]: ERROR: file /home/testav/eicar.com not found, not readable or an error occured why ? my smb.conf for homes: [homes] comment = home of %U, %u read only = No valid users = %U create mask = 0644 directory mask = 0775