Hi,

I want to move from Samba 2.2.12 to 3.0.10. I downloade the 3.0.10
sources and compiled them (Solaris 8). Everything went fine. After the
install, I tested the new 3.0.10 Samba with the old smb.conf from 2.2.12
(the docs say this should work). I could not log in anymore.

I switched back to 2.2.12 and tried the 3.0.10 install on a Suse Linux
8.0 - with the same results. I used most parts from the solaris
smb.conf.

This is the Samba config of the Linux sytem. It acts as samba server,
and later for testing as client too.

[global]
workgroup = ERS
netbios name = workstation
os level = 0
name resolve order = host lmhost wins
encrypt passwords = Yes
guest account = Nobody
map to guest = Bad User
hide dot files = yes
unix extensions = yes
username map = /etc/samba/smbusers
log file = /var/log/samba/%m
log level = 3
security = server
password server = passwordserver
socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
local master = No
wins support = No
wins server = winsserver
character set = ISO8859-15
client code page = 850
veto files = /*.eml/*.nws/riched20.dll/*.{*}/
....

The server is not member in our company domain EMEA. At the moment it is
not possible to use 'security = domain', so we use 'security = server'.
The server is in the workgroup ERS, witch is the name of our department.
Authentication happens against the EMEA password server with the
UID/PASS users have in the EMEA domain. Mapping between the unix UIDs
and domain UIDs is done with the option 'username map'. This worked fine
with 2.2.12.

I did the tests on the linux system (both client and server).
ralfgro is my EMEA domain account, rg the local unix account.

smbclient //workstation/ralfgro -U ralfgro -W emea

[2005/01/11 09:14:57, 3] smbd/sesssetup.c:reply_sesssetup_and_X(789)
Domain=[EMEA] NativeOS=[Unix] NativeLanMan=[Samba] PrimaryDomain=[]
[2005/01/11 09:14:57, 3] smbd/sesssetup.c:reply_sesssetup_and_X(804)
sesssetupX:name=[EMEA]\[RALFGRO]@[workstation]
[2005/01/11 09:14:57, 3] lib/username.c:map_username(173)
Mapped user RALFGRO to rg
[2005/01/11 09:14:57, 3] libsmb/trusts_util.c:enumerate_domain_trusts(149)
enumerate_domain_trusts: can't locate a DC for domain ERS
[2005/01/11 09:14:57, 3] auth/auth.c:check_ntlm_password(219)
check_ntlm_password: Checking password for unmapped user
[EMEA]\[RALFGRO]@[workstation] with the new password interface
[2005/01/11 09:14:57, 3] auth/auth.c:check_ntlm_password(222)
check_ntlm_password: mapped user is: [ERS]\[rg]@[workstation]
[2005/01/11 09:15:03, 1] auth/auth_server.c:check_smbserver_security(363)
password server passwordserver rejected the password
[2005/01/11 09:15:03, 2] auth/auth.c:check_ntlm_password(312)
check_ntlm_password: Authentication for user [RALFGRO]
-> [rg] FAILED with error NT_STATUS_LOGON_FAILURE
[2005/01/11 09:15:03, 3] smbd/error.c:error_packet(129)
error packet at smbd/sesssetup.c(887) cmd=115 (SMBsesssetupX)
NT_STATUS_LOGON_FAILURE
[2005/01/11 09:15:03, 3] smbd/process.c:timeout_processing(1336)
timeout_processing: End of file from client (client has disconnected).

If I change workgroup in the smb.conf file to EMEA it works. But the
server should stay in the ERS workgroup. Users always set the
workgroup/domain name during the login process. Most of the windows
standard clients are in the EMEA domain, so this is no problem.

This worked fine in 2.2.12. Have there been any changes in Samba 3.x.x
that could be important in this case? I know that Samba 3 comes with
winbind, but since the server is not member of the EMEA domain, I can't
use it (or am I wrong in this?).

Ralf