Samba + W2K question
JMoran at Roadstone.ie
JMoran at Roadstone.ie
Thu Jul 3 05:08:09 EDT 2003
> -----Original Message-----
> From: Cole Tuininga [mailto:cole at tuininga.org]
> Sent: 02 July 2003 21:17
> To: GNHLUG List
> Subject: Samba + W2K question
>
> ...
> In any case, I have it set up, created users both locally and in the
> smbpasswd file. Getting 95/98/Me machines to auth against it was a
> piece of cake - no problem. However, trying to get 2K to auth is
> proving to be a royal PITA.
>
> I understand that NT/2K(/XP?) systems need to have a "machine account"
> set up for them. No problem. The host in question has the system name
> of "gary". I created a gary$ user, and set the password. I created the
> machine account for gary also (smbpasswd -a -m gary). When I try to
> convince the 2K box to connect to the domain, it requests a username and
> password for "an account that's authorized to add the system". Reading
> samba docs (specifically
> http://hr.uoregon.edu/davidrl/samba/samba-pdc.html) leads me to believe
> that the correct username/password comba is that of root, which I had to
> add into the smbpasswd file. However, when I enter root/passwd on the
> NT box, the connection failes and in the log file I see things like the
> following in the appropriate log file:
>
> [2003/07/02 07:02:15, 2] smbd/password.c:pass_check_smb(584)
> pass_check_smb failed - invalid password for user [root]
> [2003/07/02 07:02:15, 2] smbd/reply.c:reply_sesssetup_and_X(962)
> NT Password did not match for user 'root'!
> [2003/07/02 07:02:15, 2] smbd/reply.c:reply_sesssetup_and_X(972)
> Defaulting to Lanman password for root
> [2003/07/02 07:02:15, 2] smbd/password.c:pass_check_smb(584)
> pass_check_smb failed - invalid password for user [root]
> [2003/07/02 07:02:15, 1] smbd/reply.c:reply_sesssetup_and_X(988)
> Rejecting user 'root': authentication failed
> [2003/07/02 07:02:15, 2] smbd/server.c:exit_server(458)
> Closing connections
> [2003/07/02 07:02:23, 0] smbd/service.c:make_connection(564)
> Can't become connected user!
> [2003/07/02 07:02:23, 2] smbd/server.c:exit_server(458)
> Closing connections
> [2003/07/02 07:07:16, 0] smbd/service.c:make_connection(564)
> Can't become connected user!
> [2003/07/02 07:07:16, 2] smbd/server.c:exit_server(458)
> Closing connections
NT/2K/XP machines encrypt the password before sending it to the server, and
this can cause problems.
There's an option in the smb.conf file which (I think) is
'encrypt passwords = yes' which has to be added (if it's not there) to allow
those clients to authenticate.
This may be the problem, as smbd seems to be trying the Lanman password,
which is (IIRC) the 95/98/ME password.
Hope this helps
John
More information about the gnhlug-discuss
mailing list