Windows Server 2003 SP1 Issues (3.0.15pre2)

classic Classic list List threaded Threaded
1 message Options
Reply | Threaded
Open this post in threaded view
|

Windows Server 2003 SP1 Issues (3.0.15pre2)

William R. Lorenz
Hi All,

I'm running into some issues accessing a Samba server that's in turn
authenticating against a Win2k3-SP1 domain controller (security=ads).  I
understand there were some known issues corrected in a patch, and I'm
currently running 3.0.15pre2, which I understand includes that patch.

  (http://samba.org/~jerry/patches/post-3.0.13/winbindd_2k3sp1.patch)

All was working fine before the Win2k3 server was upgraded with the SP1
service pack.  The `net ads join`, `wbinfo -t`, `wbinfo -u`, `wbinfo -p`,
`getent passwd`, and `getent group` commands all still work fine, but
users can't authenticate against the Samba box and view available shares.

For example, here's a local smbclient connection from the local console:

   [root@linux-test samba]# smbclient -L 192.168.0.52 -U polorx
   added interface ip=192.168.0.52 bcast=192.168.0.255 nmask=255.255.255.0
   Client started (version 3.0.15pre2).
   Connecting to 192.168.0.52 at port 445
   Password:
   Doing spnego session setup (blob length=112)
   got OID=1 2 840 113554 1 2 2
   got OID=1 2 840 48018 1 2 2
   got OID=1 3 6 1 4 1 311 2 2 10
   got principal=linux-test$@TCB.INTERNAL
   Got challenge flags:
   Got NTLMSSP neg_flags=0x60890215
   NTLMSSP: Set final flags:
   Got NTLMSSP neg_flags=0x60080215
   NTLMSSP Sign/Seal - Initialising with flags:
   Got NTLMSSP neg_flags=0x60080215
   SPNEGO login failed: Logon failure
   session setup failed: NT_STATUS_LOGON_FAILURE
   [root@linux-test samba]#

I have attached the Samba server's configuration file, and I can also
provide detailed logs upon request.  Does anyone have any ideas on this?

Thanks, in advance, for any insights you can offer!

-- William R. Lorenz <[hidden email]>
-- http://www.express.org/~wrl/ ; "Every revolution was first
-- a thought in one man's mind." - Ralph Waldo Emerson
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

broken-smb.conf (2K) Download Attachment