From: John Lawler on
Hi guys,

Thanks for those of you whole kept reading after seeing the subject line
-- I know, it's like a flashback to about 2000 or so, but for mostly
uninteresting reasons, I've got a situation that I wanted to run by the
list just in case there's a work around.

I have an NT 4 server that's the PDC that my new Samba box, running
3.4.0 w/ "security = domain" uses to authenticate users for the Samba
shares.

This was done to begin migrating away from the NT server, but we still
need it for the PDC.

Anyway, I've got everything (finally) working with a little help from
the list for my Win2k and WinXP clients. I'm happy with that, but when
I tried to connect one of the two remaining Win95 machines, I get
authentication failures.

The interesting thing is, this worked fine in a couple of older Samba
boxes I'm running with version 3.0.28, with a very similar configuration
(security = domain, using the same NT 4 PDC to authenticate, etc.).

So, the question is, is anyone aware of what might've changed between
3.0.28 and 3.4.0 that could affect Win95 clients in this situation? I
tried the few ideas I found like:

lanman auth = yes
client lanman auth = yes
client plaintext auth = yes
ntlm auth = yes

(I assume the client options may not do me any good here anyway), and
I'm still not getting any joy.

Any help would be greatly appreciated. Thanks for reading.

Here are samples of the same Win95 box connecting first to the 3.0.28
box, which works, and then to the 3.4.0 one, which doesn't:

------------------------------------------------------------------------

[2010/06/04 18:18:45, 2] smbd/sesssetup.c:setup_new_vc_session(1200)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
[2010/06/04 18:18:45, 3] auth/auth.c:check_ntlm_password(221)
check_ntlm_password: Checking password for unmapped user
[MAIN]\[NODE008]@[node008] with the new password interface
[2010/06/04 18:18:45, 3] auth/auth.c:check_ntlm_password(224)
check_ntlm_password: mapped user is: [MAIN]\[NODE008]@[node008]
[2010/06/04 18:18:45, 3] auth/auth.c:check_ntlm_password(270)
check_ntlm_password: winbind authentication for user [NODE008] succeeded
[2010/06/04 18:18:45, 2] auth/auth.c:check_ntlm_password(309)
check_ntlm_password: authentication for user [NODE008] -> [NODE008]
-> [MAIN\node008] succeeded

------------------------------------------------------------------------

[2010/06/04 18:25:54, 2] smbd/sesssetup.c:1360(setup_new_vc_session)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
[2010/06/04 18:25:54, 3] auth/auth.c:222(check_ntlm_password)
check_ntlm_password: Checking password for unmapped user
[MAIN]\[NODE008]@[node008] with the new password interface
[2010/06/04 18:25:54, 3] auth/auth.c:225(check_ntlm_password)
check_ntlm_password: mapped user is: [MAIN]\[NODE008]@[node008]
[2010/06/04 18:25:54, 2] auth/auth.c:320(check_ntlm_password)
check_ntlm_password: Authentication for user [NODE008] -> [NODE008]
FAILED wi
th error NT_STATUS_LOGON_FAILURE
[2010/06/04 18:25:54, 2] smbd/sesssetup.c:1360(setup_new_vc_session)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old
resources.
[2010/06/04 18:25:54, 3] auth/auth.c:222(check_ntlm_password)
check_ntlm_password: Checking password for unmapped user
[MAIN]\[NODE008]@[no
de008] with the new password interface
[2010/06/04 18:25:54, 3] auth/auth.c:225(check_ntlm_password)
check_ntlm_password: mapped user is: [MAIN]\[NODE008]@[node008]
[2010/06/04 18:25:54, 2] auth/auth.c:320(check_ntlm_password)
check_ntlm_password: Authentication for user [NODE008] -> [NODE008]
FAILED with error NT_STATUS_LOGON_FAILURE

------------------------------------------------------------------------
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba