[Pkg-samba-maint] Bug#652339: Error code was NT code 0x1c010002 next a login failure in a samba server with winbind

[Jorge Bueno Magdalena]

Package: winbind

Version: 2:3.5.6~dfsg-3squeeze5

Severity: important

I have a samba server connected to a samba PDC. I can connect fine to
the share folders but next a login failure appear the error NT code
0x1c010002 (0x1c010002) and it is impossible to connect with any user.
I have to delete samba cache and restart samba and winbind to have a
normal use.


1) First I can login without any problem from different clients with
different OS.

On the client:

myuser at mycomputer:~$ smbclient -L sambaserver -U user1
Enter user1's password:
Domain=[ORG1] OS=[Unix] Server=[Samba 3.5.6]

        Sharename       Type      Comment
        ---------       ----      -------
        mynewshare      Disk      My test share
        IPC$                 IPC       IPC Service (Samba 3.5.6)
Domain=[ORG1] OS=[Unix] Server=[Samba 3.5.6]

        Server                   Comment
        ---------                    -------
        SAMBASERVER   samba 3.5.6

        Workgroup            Master
        ---------                   -------
        ORG1

On the server:

id user1 is running ok.
getent passwd, getent group is running ok.
wbinfo -u, wbinfo -g, wbinfo -a user1%passwd is running ok.

2) If I the passwd for user1 is wrong:

On the client:

myuser at mycomputer:~$ smbclient -L sambaserver -U user1
Enter user1's password:
session setup failed: NT code 0x1c010002

On the server:

id user1 is running ok.
getent passwd, getent group is running ok.
wbinfo -u, wbinfo -g  is running ok.

wbinfo -a user1%passwd:
plaintext password authentication failed
Could not authenticate user user1%user with plaintext password
challenge/response password authentication failed
error code was NT code 0x1c010002 (0x1c010002)
error messsage was: NT code 0x1c010002
Could not authenticate user user1 with challenge/response

3) If the passwd for user1 is right but next the previous failure:

On the client:

myuser at mycomputer:~$ smbclient -L sambaserver -U user1
Enter user1's password:
session setup failed: NT code 0x1c010002

On the server:

id user1 not found user but yes other users from de domain.
getent passwd(even user1), getent group is running ok.
wbinfo -u, wbinfo -g  is running ok.
wbinfo -a user1%passwd:
plaintext password authentication failed
Could not authenticate user user1%user with plaintext password
challenge/response password authentication failed
error code was NT code 0x1c010002 (0x1c010002)
error messsage was: NT code 0x1c010002
Could not authenticate user user1 with challenge/response

4) Commands for going to the first point:

rm /var/cache/samba/*tdb
/etc/init.d/samba restart
/etc/init.d/winbind restart



I have to add that the same test in a Debian Lenny server with the same
configuration and samba version 3.2.5-4lenny15 is working fine.

If user/passwd is right, I can login. If not give the message "dsession setup
failed: NT_STATUS_LOGON_FAILURE" as normal.

** I have found a bug in samba that it looks like to be the same
problem => https://bugzilla.samba.org/show_bug.cgi?id=7888 and have
patches for different samba versions.

Regards
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20111216/f1ec7fec/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smb.conf
Type: application/octet-stream
Size: 437 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-samba-maint/attachments/20111216/f1ec7fec/attachment.obj>