Samba Authentication Bug

[Mark Fisher_4]

Anyone seen this issue before and know if there is a work around or fix? Can someone attempt to reproduce this?

We run Samba (HP CIFS Server) A.01.11.04

After adding more user accounts to a Samba share, these users are unable to log into the share and authenticate. The logfile has this typical event:

[2007/04/03 12:51:43, 2] smbd/service.c:make_connection(331)
Invalid username/password for mcindv3b []
[2007/04/03 12:51:43, 3] smbd/error.c:error_packet(113)
error packet at smbd/reply.c(166) cmd=117 (SMBtconX) NT_STATUS_WRONG_PASSWORD

What I discovered was the "valid users" field for the share is VERY LARGE and contains a lot of account names. If I place an account at the end of the string for "valid users", it will not authenticate. But if I move the account to the begining of the list, it will authenticate correctly.

So it appears to be a character string limitation with this field in the samba config file. Is this a known bug with a solution? Can someone else try to reproduce this?

Thanks in advance for any help you can provide,

Mark

[Heironimus]

Off the top of my head I don't know Samba's limit on that field, but I'll give you a workaround. You can probably use the "@groupname" syntax to allow a UNIX group instead of listing all the individual users.

You should probably also consider upgrading to a newer release of CIFS Server. The version of Samba used as the basis for your version is now very, very old. I don't know that it would change the limit on that field, but other problems have been fixed (in particular, much better compatibility with newer versions of Windows).

[Steven E. Protter]

Shalom Mark,

I've seen threads on this topic before. The answer as with most CIFS/Samba bugs is to get a newer version from http://software.hp.com and update your system.

Before doing that you did a net join with the machine? A windows PDC administrative password is required to do net join.

SEP