CIFS A.02.01.02 error: NT_STATUS_WRONG_PASSWORD

[Eric Herr]

I have Samba version 3.0.7 based HP CIFS Server A.02.01.02 running on HPUX 11.11 and have one Windows 2003 Server client that makes many simultaneous connections to this server. Most of the time it works OK but occasionally fails. The are no errors in smbd.log and the error in the client log is the following:

setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.

check_ntlm_password: Authentication for user [cssuser] -> [cssuser] FAILED with error NT_STATUS_WRONG_PASSWORD

Here is my global configuration:

workgroup = AMEREN
netbios name = SCSSP4
server string = Samba Server
interfaces = 10.81.1.74/255.255.0.0 192.168.1.6/255.255.255.0
bind interfaces only = Yes
encrypt passwords = Yes
password server = scssp4
log file = /var/opt/samba/log.%m
lock dir = /var/opt/samba/locks
max log size = 1000
name resolve order = hosts wins
local master = No
wins server = 10.89.1.25
read only = No
preserve case = yes
short preserve case = No
dos filetime resolution = Yes
socket options = TCP_NODELAY
syslog = 0
log level=2
deadtime = 10
use spnego = no

Any help resolving this issue is appreciated.

[Steven E. Protter]

Shalom,

Seems that:
password server = scssp4
The password server is rejecting the password.

What is missing is the security = clause to tell us what type of security is needed.

security = user means that all users must be added with the smbpasswd command.

security = domain means there is a primary domaon controller that does this and makes the password server clause incorrect.

SEP

[Geoff Wild]

Your password server shouldn't be the same as the CIFS server if you are using server or domain or ADS security, and then add more then 1 password server.

Rgds...Geoff

[Eric Herr]

Thanks. I will add security = user to my config. I looked at this but security = user is the default for samba 3.