[Samba] DOS client connection

2003-07-11 Thread Vincent . Badier
I have a problem login on a samba share using a DOS client, whereas using
NT/2000/XP, i connect correctly

The context:

Active directory arch.
All NT/2000/XP are in the domain.
samba version 2.2.3a-12.3 for Debian (from debian stable package).

I can directly connect to my samba shares from my current xp login session.
When i boot from a dos boot disk (made from 95), i log in my domain with my
login/pass. However when i try to connect to my share (net use), it is
refused. Here is le log on the server :

[2003/07/11 12:07:32, 0] smbd/password.c:domain_client_validate(1572)
  domain_client_validate: unable to validate password for user MYLOGON in
domain  to Domain controller ip.of.my.dc. Error was
NT_STATUS_WRONG_PASSWORD.

however, a net use to a w2k share server work fine.

I've also the default configuration for protocol level :

protocol = NT1
large readwrite = No
max protocol = NT1
min protocol = CORE


Any idea to help me please?

Regard's
Vincent


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: Réf. : [Samba] DOS client connection

2003-07-11 Thread Vincent . Badier
Ok, so what do you mean i need to change in the conf?
When i try to change the encrypt passwords setting to No, it doesn't work
with xp/2k.


Hi,

DOS client and win95 client send password in clear text password, XP, w2k,
win98 sent encrypted password.

---
Stéphane PURNELLE [EMAIL PROTECTED]
Service Informatique   Corman S.A.   Tel : 00 32 087/342467


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: Réf. : [Samba] DOS client connection

2003-07-11 Thread Andrew Bartlett
On Fri, Jul 11, 2003 at 12:50:47PM +0200, [EMAIL PROTECTED] wrote:
 Ok, so what do you mean i need to change in the conf?
 When i try to change the encrypt passwords setting to No, it doesn't work
 with xp/2k.
 
 
 Hi,
 
 DOS client and win95 client send password in clear text password, XP, w2k,
 win98 sent encrypted password.

This is incorrect.  All modern clients (including DOS) can send the Lanman
form of the encrypted password, and we will always accept a plaintext password
from the truly ancient clients.

What 'encrypt passwords = yes' does is allow modern clients to use encrypted
passwords - which must exist in an smbpasswd file.  In particular, XP, Win2k,
Win98 will all *refuse* to send a plaintext password, leaving you no other
option.

Andrew Bartlett
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] DOS client connection

2003-07-11 Thread Andrew Bartlett
On Fri, Jul 11, 2003 at 12:40:36PM +0200, [EMAIL PROTECTED] wrote:
 I have a problem login on a samba share using a DOS client, whereas using
 NT/2000/XP, i connect correctly
 
 The context:
 
 Active directory arch.
 All NT/2000/XP are in the domain.
 samba version 2.2.3a-12.3 for Debian (from debian stable package).
 
 I can directly connect to my samba shares from my current xp login session.
 When i boot from a dos boot disk (made from 95), i log in my domain with my
 login/pass. However when i try to connect to my share (net use), it is
 refused. Here is le log on the server :
 
 [2003/07/11 12:07:32, 0] smbd/password.c:domain_client_validate(1572)
   domain_client_validate: unable to validate password for user MYLOGON in
 domain  to Domain controller ip.of.my.dc. Error was
 NT_STATUS_WRONG_PASSWORD.
 
 however, a net use to a w2k share server work fine.

Your Win2k DC is probably set to refuse 'LANMAN' encrypted passwords, as used
by DOS and Win9X.  Can you connect to the DC directly with this client?

Andrew Bartlett
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] DOS client connection

2003-07-11 Thread Vincent . Badier
Your Win2k DC is probably set to refuse 'LANMAN' encrypted passwords, as
used
by DOS and Win9X.  Can you connect to the DC directly with this client?

I didn't tried to connect directly to the DC since all share i have to
connect to are not here.
I tried to connect to a Win2k member server and this work fine with this
client


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] DOS client connection

2003-07-11 Thread Andrew Bartlett
On Fri, Jul 11, 2003 at 02:05:12PM +0200, [EMAIL PROTECTED] wrote:
 Your Win2k DC is probably set to refuse 'LANMAN' encrypted passwords, as
 used
 by DOS and Win9X.  Can you connect to the DC directly with this client?
 
 I didn't tried to connect directly to the DC since all share i have to
 connect to are not here.
 I tried to connect to a Win2k member server and this work fine with this
 client

If it is not too much trouble, you might want to try Samba 3.0 (in beata) - 
it tries much harder to get this stuff right.  

Andrew Bartlett
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] DOS client connection

2003-07-11 Thread Vincent . Badier
If it is not too much trouble, you might want to try Samba 3.0 (in beata)
-
it tries much harder to get this stuff right.

Andrew Bartlett

I tried this just before and have trouble to join the active directory
domain :

#/usr/local/samba/bin/net join MEMBER -s /usr/local/samba/lib/smb.conf -U
MyOperatorAccount -S ip.of.my.dc
[2003/07/11 14:49:35, 0] rpc_client/cli_netlogon.c:cli_nt_setup_creds(249)
  cli_nt_setup_creds: request challenge failed
[2003/07/11 14:49:35, 1] utils/net_rpc.c:run_rpc_command(154)
  rpc command function failed! (NT_STATUS_INVALID_COMPUTER_NAME)
Password:
[2003/07/11 14:50:45, 1] libsmb/cliconnect.c:cli_full_connection(1311)
  failed session setup with NT_STATUS_LOGON_FAILURE
[2003/07/11 14:50:45, 1] utils/net.c:connect_to_ipc(148)
  Cannot connect to server.  Error was NT_STATUS_LOGON_FAILURE
The username or password was not correct.


In previous message, Someone said i need to have Kerberos and LDAP
compiled. I have Kerberos but not ldap.

config.h :

/* Whether KRB5 is available */
#define HAVE_KRB5 1

/* Whether ldap is available */
/* #undef HAVE_LDAP */



So, does i need to spend time to really try to install the beta version or
does the previous version normaly work with DOs lan manager V2.1?


Regard's
Vincent


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba