I posted this earlier, but never saw it show up in the mailing list so I'm posting it again.

I have a Samba 3.0 PDC using LDAP as it's password database backend, but I can't get a user to log on to a Win2k machine on the domain. In the log file for the PC (on the Samba machine), I see that the user is found in the LDAP backend but that getpwnam failed. The username does not exist on the Linux machine in any form. These usernames are ment to be for Windows only (at this time anyway). I set log level at 5 and tried again and I see that the Lanman and NT password checks fail. I used the mkntpwd that comes with samba 3.0 to create the passwords I put in the LDAP database, but obviously I've done something wrong. Is the mkntpwd program supposed to be for NT4.0 machines? Does Win2k use a different password algorithm? The entries in the LDAP database for a user have these fields:

sambaLMPassword: <1st hash from mkntpwd>
sambaNTPassword: <2nd hash from mkntpwd>

Should I have something preceeding the passwords in the LDAP database (like {SSHA})? Any help on this would be much appreciated.

Rob

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Reply via email to