Prev: Samba and ZFS
Next: [Samba] Domain trust between a Samba PDC domain and W2K AD domain
From: Michael Wood on 5 Aug 2010 03:40
Hi

On 4 August 2010 00:39, Karotu Tannang <karotu(a)nauoi.com.ki> wrote:
> Hi,
>
> I just upgraded my server to support Windows 7 and so installed Samba
> 3.5.4 from 3.2.5. OS is Debian Lenny.
> Now my Windows XP clients cannot join the Domain.

Are the Windows 7 clients able to join the domain?

> When joining the Domain, I get a wrong password error on Windows. In
> my samba logs it shows the following:
>
> [2010/08/03 12:10:19.681501,  0] lib/util_sock.c:1432(get_peer_addr_internal)
>  getpeername failed. Error was Transport endpoint is not connected
> [2010/08/03 12:10:19.681859,  0] lib/util_sock.c:675(write_data)
> [2010/08/03 12:10:19.681931,  0] lib/util_sock.c:1432(get_peer_addr_internal)
>  getpeername failed. Error was Transport endpoint is not connected
>  write_data: write failure in writing to client 0.0.0.0. Error
> Connection reset by peer
> [2010/08/03 12:10:19.682030,  0] smbd/process.c:79(srv_send_smb)
>  Error writing 4 bytes to client. -1. (Transport endpoint is not connected)
> [2010/08/03 12:10:19.987801,  0]
> ../libcli/auth/smbencrypt.c:589(decode_pw_buffer)
>  decode_pw_buffer: incorrect password length (1720729972).

Something definitely seems wrong here. Obviously the password can't
be that long.

> [2010/08/03 12:10:19.987986,  0]
> ../libcli/auth/smbencrypt.c:590(decode_pw_buffer)
>  decode_pw_buffer: check that 'encrypt passwords = yes'
>
> My smb.conf is --
>
> [global]
>        workgroup = LMD
>        netbios name = LAND
>        force user = root

Using "force user = root" seems like a bad idea to me, especially in
the global section.

>        security = user
>        local master = yes
>        domain logons = yes
>        encrypt passwords = yes

Did you have encrypted passwords enabled in your old version of Samba
too? Or did you just enable this when you upgraded?

>        interfaces = eth0
>        log level = 1
>        passdb backend = smbpasswd

The default passwd backend is tdbsam. The smbpasswd backend is the
old format that doesn't support all of the features supported by other
backends. I don't know if this has anything to do with the problem,
but maybe you could try switching to tdbsam.

>        log file = /var/log/samba/mainlog
>        logon drive = P:
>        logon script = logon.bat
>        logon home = \\LAND\%U
>        logon path =
>        hide files = /desktop.ini/
>        os level = 99
>        preferred master = yes
>        wins support = yes
>
>        #Automatically add them users/machines
>        add machine script = /usr/sbin/useradd -d /dev/null -g machines -c
> 'Machine Account' -s /bin/false '%u'
>        name resolve order = wins lmhosts hosts bcast
[...]

Regards,
Michael

--
Michael Wood <esiotrot(a)gmail.com>
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
 | 
Pages: 1
Prev: Samba and ZFS
Next: [Samba] Domain trust between a Samba PDC domain and W2K AD domain