<pre style="margin-top:1.5em;margin-bottom:1.5em;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;border-top-width:0px;border-right-width:0px;border-bottom-width:0px;border-left-width:0px;border-style:initial;border-color:initial;outline-width:0px;outline-style:initial;outline-color:initial;font-size:13px;vertical-align:baseline;overflow-x:auto;overflow-y:auto;background-color:rgb(255,255,255)">
Package: winbind</pre><pre style="margin-top:1.5em;margin-bottom:1.5em;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;border-top-width:0px;border-right-width:0px;border-bottom-width:0px;border-left-width:0px;border-style:initial;border-color:initial;outline-width:0px;outline-style:initial;outline-color:initial;font-size:13px;vertical-align:baseline;overflow-x:auto;overflow-y:auto;background-color:rgb(255,255,255)">
<pre style="margin-top:1.5em;margin-bottom:1.5em;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;border-top-width:0px;border-right-width:0px;border-bottom-width:0px;border-left-width:0px;border-style:initial;border-color:initial;outline-width:0px;outline-style:initial;outline-color:initial;vertical-align:baseline;overflow-x:auto;overflow-y:auto">
Version: 2:3.5.6~dfsg-3squeeze5</pre><pre style="margin-top:1.5em;margin-bottom:1.5em;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;border-top-width:0px;border-right-width:0px;border-bottom-width:0px;border-left-width:0px;border-style:initial;border-color:initial;outline-width:0px;outline-style:initial;outline-color:initial;vertical-align:baseline;overflow-x:auto;overflow-y:auto">
Severity: <span class="Apple-style-span" style="line-height:19px;white-space:normal">important</span></pre><pre style="margin-top:1.5em;margin-bottom:1.5em;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;border-top-width:0px;border-right-width:0px;border-bottom-width:0px;border-left-width:0px;border-style:initial;border-color:initial;outline-width:0px;outline-style:initial;outline-color:initial;vertical-align:baseline;overflow-x:auto;overflow-y:auto">
<pre class="message" style="padding-top:0px;margin-top:0px;border-top-width:0px;border-top-style:initial;border-top-color:initial;line-height:19px;background-color:rgb(254,254,254)">I have a samba server connected to a samba PDC. I can connect fine to the share folders but next a login failure appear the error NT code 0x1c010002 (0x1c010002) and it is impossible to connect with any user. I have to delete samba cache and restart samba and winbind to have a normal use. <br>
1) First I can login without any problem from different clients with
different OS.
On the client:
myuser@mycomputer:~$ smbclient -L sambaserver -U user1
Enter user1's password:
Domain=[ORG1] OS=[Unix] Server=[Samba 3.5.6]
Sharename Type Comment
--------- ---- -------
mynewshare Disk My test share
IPC$ IPC IPC Service (Samba 3.5.6)
Domain=[ORG1] OS=[Unix] Server=[Samba 3.5.6]
Server Comment
--------- -------
SAMBASERVER samba 3.5.6
Workgroup Master
--------- -------
ORG1
On the server:
id user1 is running ok.
getent passwd, getent group is running ok.
wbinfo -u, wbinfo -g, wbinfo -a user1%passwd is running ok.
2) If I the passwd for user1 is wrong:
On the client:
myuser@mycomputer:~$ smbclient -L sambaserver -U user1
Enter user1's password:
session setup failed: NT code 0x1c010002
On the server:
id user1 is running ok.
getent passwd, getent group is running ok.
wbinfo -u, wbinfo -g is running ok.
wbinfo -a user1%passwd:
plaintext password authentication failed
Could not authenticate user user1%user with plaintext password
challenge/response password authentication failed
error code was NT code 0x1c010002 (0x1c010002)
error messsage was: NT code 0x1c010002
Could not authenticate user user1 with challenge/response
3) If the passwd for user1 is right but next the previous failure:
On the client:
myuser@mycomputer:~$ smbclient -L sambaserver -U user1
Enter user1's password:
session setup failed: NT code 0x1c010002
On the server:
id user1 not found user but yes other users from de domain.
getent passwd(even user1), getent group is running ok.
wbinfo -u, wbinfo -g is running ok.
wbinfo -a user1%passwd:
plaintext password authentication failed
Could not authenticate user user1%user with plaintext password
challenge/response password authentication failed
error code was NT code 0x1c010002 (0x1c010002)
error messsage was: NT code 0x1c010002
Could not authenticate user user1 with challenge/response
4) Commands for going to the first point:
rm /var/cache/samba/*tdb
/etc/init.d/samba restart
/etc/init.d/winbind restart
<pre class="message" style="padding-top:0px;margin-top:0px;border-top-width:0px;border-top-style:initial;border-top-color:initial">I have to add that the same test in a Debian Lenny server with the same
configuration and samba version 3.2.5-4lenny15 is working fine.
If user/passwd is right, I can login. If not give the message "dsession setup
failed: NT_STATUS_LOGON_FAILURE" as normal.</pre><pre class="message" style="padding-top:0px;margin-top:0px;border-top-width:0px;border-top-style:initial;border-top-color:initial">** I have found a bug in samba that it looks like to be the same problem => <a href="https://bugzilla.samba.org/show_bug.cgi?id=7888">https://bugzilla.samba.org/show_bug.cgi?id=7888</a> and have patches for different samba versions.</pre>
<pre class="message" style="padding-top:0px;margin-top:0px;border-top-width:0px;border-top-style:initial;border-top-color:initial">Regards</pre><pre class="message" style="padding-top:0px;margin-top:0px;border-top-width:0px;border-top-style:initial;border-top-color:initial">
<br></pre>
<br></pre></pre><pre style="margin-top:1.5em;margin-bottom:1.5em;padding-top:0px;padding-right:0px;padding-bottom:0px;padding-left:0px;border-top-width:0px;border-right-width:0px;border-bottom-width:0px;border-left-width:0px;border-style:initial;border-color:initial;outline-width:0px;outline-style:initial;outline-color:initial;vertical-align:baseline;overflow-x:auto;overflow-y:auto">
<br></pre></pre>