encrypted password problem with XP

[philatwork]

Hi all,

I'm new to samba, but an experienced programmer.
I'm trying to configure Samba 2.2.12 on an old Unix system from
Teradata. MP-RAS Unix has a fairly old compiler that won't support
Samba 3 source code and libraries, which is why I'm on this version.


I've downloaded the source code, compiled and installed it. Had to
tweak a few header files to get it to run up.


I've configured the config file, shown below.
Not trying for anything fancy, just want to Connect a Network drive
from several PCs.
I have a username mapping file, and a smbpasswd file, both with one
user in. The smb password is set to the same as the unix password.


the smbd & nmbd servers run up ok.


I can get a local connection from the unix side.


However, when I try and connect a share from XP Pro 2002 SP2, using
"net use" or "net view", I always get a "Logon failure: unknown user
name or bad password"


I've turned on debugging, and checked the log file.
It looks like the server is correctly mapping the PC user to my unix
user, but then fails matching the encrypted password.


Just to check, I hacked the password code, to allow entry, and i then
get a network drive fine. I can see the directories, and open files
on the PC.
So I figure my problem is just down to the password matching.
Any ideas?


smb.conf
=======


[global]
workgroup = EDW
lock directory = /usr/local/samba/var/locks


# Edit this file to assing mappings between Windows & Unix users.
username map = /usr/local/samba/lib/usermap.txt


# XP uses encrypted passwords by default. let's set this up.
# Add each user to the password file with smbpasswd -a laiptc6
# Each user should update their current password with smbpasswd.
security = user
encrypt passwords = yes
smb passwd file = /usr/local/samba/private/smbpasswd
preserve case = yes


[homes]
# this will allow any user, e.g. laiptc6 to connect,
# and will create a temporary share (called laiptc6), pointed at the
# user's home directory (/home/laiptc6).


comment = Home Directories
browseable = no
read only = no
create mode = 0750
path = /home1/DEP/phil
user = laiptc1, laiptc2, laiptc3, laiptc4, laiptc5, laiptc6, laiptc7


[phil]
# this share should allow anyone (with a valid account) to connect
with;
# net use P: \\25.167.165.113\phil *


Comment = Phil's test dev directory
guest ok = no
read only = no
path = /home1/DEP/phil
create mode = 0750


log.smbd
=======


[2008/04/24 10:28:24, 3] smbd/sec_ctx.c172)
get_current_groups: user is in 11 groups: 1, 0, 2, 3, 4, 6, 7, 8,
12, 5, 10
[2008/04/24 10:28:24, 0] smbd/server.c791)
smbd version 2.2.12 started.
Copyright Andrew Tridgell and the Samba Team 1992-2002
[2008/04/24 10:28:24, 2] smbd/server.c795)
uid=0 gid=0 euid=0 egid=0
[2008/04/24 10:28:24, 3] param/loadparm.c1275)
Initialising global parameters
[2008/04/24 10:28:24, 3] param/params.c577)
params.cm_process() - Processing configuration file "/usr/local/
samba/lib/smb.conf"
[2008/04/24 10:28:24, 3] param/loadparm.c3055)
Processing section "[global]"
[2008/04/24 10:28:24, 2] param/loadparm.c3073)
Processing section "[homes]"
[2008/04/24 10:28:24, 2] param/loadparm.c3073)
Processing section "[phil]"
[2008/04/24 10:28:24, 3] param/loadparm.c2028)
adding IPC service IPC$
[2008/04/24 10:28:24, 3] param/loadparm.c2028)
adding IPC service ADMIN$
[2008/04/24 10:28:24, 2] lib/interface.c81)
added interface ip=172.28.1.7 bcast=172.28.255.255 nmask=255.255.0.0
[2008/04/24 10:28:24, 2] lib/interface.c81)
added interface ip=25.167.165.113 bcast=25.167.175.255
nmask=255.255.240.0
[2008/04/24 10:28:24, 2] lib/interface.c81)
added interface ip=172.29.1.7 bcast=172.29.255.255 nmask=255.255.0.0
[2008/04/24 10:28:24, 2] lib/interface.c81)
added interface ip=192.0.0.15 bcast=192.0.0.255 nmask=255.255.255.0
[2008/04/24 10:28:24, 3] smbd/server.c831)
loaded services
[2008/04/24 10:28:24, 3] smbd/server.c846)
Becoming a daemon.
[2008/04/24 10:28:24, 3] lib/util_sock.c813)
bind succeeded on port 139
[2008/04/24 10:28:24, 2] smbd/server.c249)
waiting for a connection
[2008/04/24 10:28:31, 3] smbd/oplock.c1214)
open_oplock_ipc: opening loopback UDP socket.
[2008/04/24 10:28:31, 3] lib/util_sock.c813)
bind succeeded on port 0
[2008/04/24 10:28:31, 3] smbd/oplock.c1245)
open_oplock ipc: pid = 367, global_oplock_port = 1391
[2008/04/24 10:28:31, 3] smbd/process.c846)
Transaction 0 of length 72
[2008/04/24 10:28:31, 2] smbd/reply.c92)
netbios connect: name1=*SMBSERV name2=YVL-EDW-WRK-05
[2008/04/24 10:28:31, 2] smbd/reply.c111)
netbios connect: local=_smbserv remote=yvl-edw-wrk-05
[2008/04/24 10:28:31, 3] smbd/process.c846)
Transaction 1 of length 137
[2008/04/24 10:28:31, 3] smbd/process.c685)
switch message SMBnegprot (pid 367)
[2008/04/24 10:28:31, 3] smbd/sec_ctx.c329)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2008/04/24 10:28:31, 3] smbd/negprot.c342)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2008/04/24 10:28:31, 3] smbd/negprot.c342)
Requested protocol [LANMAN1.0]
[2008/04/24 10:28:31, 3] smbd/negprot.c342)
Requested protocol [Windows for Workgroups 3.1a]
[2008/04/24 10:28:31, 3] smbd/negprot.c342)
Requested protocol [LM1.2X002]
[2008/04/24 10:28:31, 3] smbd/negprot.c342)
Requested protocol [LANMAN2.1]
[2008/04/24 10:28:31, 3] smbd/negprot.c342)
Requested protocol [NT LM 0.12]
[2008/04/24 10:28:31, 3] smbd/negprot.c426)
Selected protocol NT LM 0.12
[2008/04/24 10:28:31, 3] smbd/process.c846)
Transaction 2 of length 159
[2008/04/24 10:28:31, 3] smbd/process.c685)
switch message SMBsesssetupX (pid 367)
[2008/04/24 10:28:31, 3] smbd/sec_ctx.c329)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2008/04/24 10:28:31, 3] smbd/reply.c880)
Domain=[] NativeOS=[Windows 2002 Service Pack 2 2600]
NativeLanMan=[Windows 2002 5.1]
[2008/04/24 10:28:31, 3] smbd/reply.c890)
sesssetupX:name=[]
[2008/04/24 10:28:31, 3] smbd/reply.c1070)
No such user nobody [] - using guest account
[2008/04/24 10:28:31, 1] smbd/reply.c1104)
Username nobody is invalid on this system
[2008/04/24 10:28:31, 3] smbd/error.c94)
error string = No such file or directory
[2008/04/24 10:28:31, 3] smbd/error.c113)
error packet at smbd/reply.c(1106) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
[2008/04/24 10:28:31, 3] smbd/process.c846)
Transaction 3 of length 254
[2008/04/24 10:28:31, 3] smbd/process.c685)
switch message SMBsesssetupX (pid 367)
[2008/04/24 10:28:31, 3] smbd/sec_ctx.c329)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2008/04/24 10:28:31, 3] smbd/reply.c880)
Domain=[EDW] NativeOS=[Windows 2002 Service Pack 2 2600]
NativeLanMan=[Windows 2002 5.1]
[2008/04/24 10:28:31, 3] smbd/reply.c890)
sesssetupX:name=[horderp]
[2008/04/24 10:28:31, 3] lib/username.c168)
Mapped user horderp to laiptc6
[2008/04/24 10:28:31, 2] smbd/reply.c997)
NT Password did not match for user 'laiptc6'!
[2008/04/24 10:28:31, 2] smbd/reply.c1007)
Defaulting to Lanman password for laiptc6
[2008/04/24 10:28:31, 2] smbd/password.c575)
pass_check_smb failed - invalid password for user [laiptc6]
[2008/04/24 10:28:31, 1] smbd/reply.c1023)
Rejecting user 'laiptc6': authentication failed
[2008/04/24 10:28:31, 3] smbd/error.c94)
error string = No such file or directory
[2008/04/24 10:28:31, 3] smbd/error.c113)
error packet at smbd/reply.c(1025) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
[2008/04/24 10:28:31, 3] smbd/process.c1066)
end of file from client
[2008/04/24 10:28:31, 3] smbd/sec_ctx.c329)
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2008/04/24 10:28:31, 2] smbd/server.c511)
Closing connections
[2008/04/24 10:28:31, 3] smbd/connection.c48)
Yielding connection to
[2008/04/24 10:28:31, 3] smbd/server.c545)
Server exit (normal exit)

 

[danomac]

While I don't know how to solve your problems, I do remember something about the encryption not being bundled with the Samba source code. They couldn't due to legal reasons for redistributing code in some countries.

I'm very unfamiliar with Samba 2.x, but you may want check to see if the required encryption libraries were even built. You might have to download the encryption source from elsewhere.