Samba issues.

[Chirag Parekh]

We had Samba/CIFS configured and working on an HP-UX 11.11 server. Three weeks back the server had crashed and we did the recovery from ignite & tape backup. After that we are having issues with Samba. It works fine for users until they change their Windows password. Once they change the password in order to make Samba work for them I have to run the command ./smbpasswd -u for each user and have them type their new windows password on the server. After that it works fine.

I have tried removing & recreating an entry for the server from the PDC, which is a Windows server and joined the server to the domain. But still have the same issue.

Thanks.

[Florian Heigl (new acc)]

it could be a corrupted password / TCB database (I think it's in /var/opt/samba/private) - I'd suggest You back up all samba related directories, reinstall and remove and after that rejoin the domain.

Or You could just look at Your samba logs :)

[Chirag Parekh]

Hi Florian,

Below is the log file for a user who tried to access the samba share after changing the Windows password:

[2006/05/18 15:12:26, 0] rpc_client/cli_netlogon.c:(157)
cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
[2006/05/18 15:12:26, 0] rpc_client/cli_login.c:(74)
cli_nt_setup_creds: auth2 challenge failed
[2006/05/18 15:12:26, 0] smbd/password.c:(1335)
connect_to_domain_password_server: unable to setup the PDC credentials to mach
ine LOSANGELES.BELKIN.COM. Error was : NT_STATUS_OK.
[2006/05/18 15:12:26, 0] rpc_client/cli_netlogon.c:(157)
cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
[2006/05/18 15:12:26, 0] rpc_client/cli_login.c:(74)
cli_nt_setup_creds: auth2 challenge failed
[2006/05/18 15:12:26, 0] smbd/password.c:(1335)
connect_to_domain_password_server: unable to setup the PDC credentials to mach
ine PHOENIX.BELKIN.COM. Error was : NT_STATUS_OK.
[2006/05/18 15:12:27, 0] rpc_client/cli_netlogon.c:(157)
cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
[2006/05/18 15:12:27, 0] rpc_client/cli_login.c:(74)
cli_nt_setup_creds: auth2 challenge failed
[2006/05/18 15:12:27, 0] smbd/password.c:(1335)
connect_to_domain_password_server: unable to setup the PDC credentials to mach
ine MONTECARLO.BELKIN.COM. Error was : NT_STATUS_OK.
[2006/05/18 15:12:27, 0] smbd/password.c:(1554)
domain_client_validate: Domain password server not available.

[Anthony Villanueva]

Hi Chirag,

Can you post your smb.conf? I think it's something in the settings, either in that file or in inetd.conf.

[Chirag Parekh]

Hi Anthony,

Attached herewith it the smb.conf file.

[Florian Heigl (new acc)]

Now *that's* contradictive:

[2006/05/18 15:12:26, 0] smbd/password.c:(1335)
connect_to_domain_password_server: unable to setup the PDC credentials to mach
ine LOSANGELES.BELKIN.COM. Error was : NT_STATUS_OK.

I'll see if I can google something about it, otherwise the samba<->pdc log file might be needed.

But there definitely is a communications issue between pdc and samba server, it's not a problem with the accounts as such.