samba-users May 2010 archive
Main Archive Page > Month Archives  > samba-users archives
samba-users: Re: [Samba] Vista error 67 The network name cannot

Re: [Samba] Vista error 67 The network name cannot be found

From: <osp_at_nospam>
Date: Wed May 05 2010 - 00:40:34 GMT
To: Samba list <samba@lists.samba.org>

On Tue, 4 May 2010 15:28:38 -0700 Jeremy Allison <jra@samba.org> wrote:
> On Tue, May 04, 2010 at 10:27:35AM +0000, osp@aloha.com wrote:
> > On Tue, 4 May 2010 02:42:37 -0700 Jeremy Allison <jra@samba.org> wrote:
> > > On Mon, May 03, 2010 at 08:26:41PM -1000, Gary Dunn wrote:
> > > > This is a repost. Original sent last Friday afternoon received no
> > > > response. Any ideas would be appreciated. Should I try Samba 4?
> > > >
> >
> > [snip]
> >
> > > > 95 [2010/04/29 15:06:36, 2] auth/auth.c:check_ntlm_password(318)
> > > > 96 check_ntlm_password: Authentication for user [g8team] ->
> > > > [g8team]
> > > > FAILED with error NT_STATUS_WRONG_PASSWORD
> > > > 97 [2010/04/29 15:06:36, 3] smbd/error.c:error_packet_set(61)
> > > > 98 error packet at smbd/sesssetup.c(127) cmd=115 (SMBsesssetupX)
> > > > NT_STATUS_LOGON_FAILURE
> > >
> > > This is the problem. You're getting NT_STATUS_WRONG_PASSWORD.
> > > I'm assuming the password is correct you're typing here ?
> > >
> > > Jeremy.
> > >
> >
> > Thanks Jeremy for taking a look at this. I do not know enough to say
> > whether or not you are correct. I can say that I am as certain as anyone
> > could be that I entered the correct password, but that is always an issue.I
> > will test again just to be sure, after I set up my test LAN.
> >
> > The thing is, there are other lines in this log file that tell a different
> > story. As you noticed, things begin badly:
> >
> > 1 [2010/04/29 15:06:36, 3] auth/auth.c:check_ntlm_password(220)
> > 2 check_ntlm_password: Checking password for unmapped user
> > [g8dr01]\[g8team]@[SHAFP09WK102123] with the new password interface
> > 3 [2010/04/29 15:06:36, 3] auth/auth.c:check_ntlm_password(223)
> > 4 check_ntlm_password: mapped user is:
> > [g8dr01]\[g8team]@[SHAFP09WK102123]
> > ..
> > 95 [2010/04/29 15:06:36, 2] auth/auth.c:check_ntlm_password(318)
> > 96 check_ntlm_password: Authentication for user [g8team] -> [g8team]
> > FAILED with error NT_STATUS_WRONG_PASSWORD
> > 97 [2010/04/29 15:06:36, 3] smbd/error.c:error_packet_set(61)
> > 98 error packet at smbd/sesssetup.c(127) cmd=115 (SMBsesssetupX)
> > NT_STATUS_LOGON_FAILURE
> > 99 [2010/04/29 15:06:48, 3] smbd/process.c:smbd_process(1930)
> > 100 receive_message_or_smb failed: NT_STATUS_END_OF_FILE, exiting
> > 101 [2010/04/29 15:06:48, 3] smbd/sec_ctx.c:set_sec_ctx(324)
> > 102 setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
> > 103 [2010/04/29 15:06:48, 3] smbd/connection.c:yield_connection(31)
> > 104 Yielding connection to
> > 105 [2010/04/29 15:06:48, 3] smbd/server.c:exit_server_common(974)
> > 106 Server exit (normal exit)
> >
> > then, during the same connection attempt we see "sam authentication":
>
> What are the domain names (or NBT names) of the client
> and server ? Are both the client and server in a domain,
> or are they standalone ? Or is one in a domain and the
> other not ?

The Vista clients will be members of some domain. In use they will not be
connected to their domain. "Off Site" or "On the Road" if you will. Users
authenticate with a smartcard, so they will really be using the local copy
of their credentials. The server is not in any domain.

During these tests the upstream network was connected to the organizational
network, so the domain controllers are reachable through the NAT firewall
and are authenticating Vista user logons.

In smb.conf:

workgroup = G8DOWNRANGE
netbios name = g8dr01
security = user
guest account = g8team
wins support = yes
dns proxy = yes

In /etc/hosts:

10.0.1.1 g8dr01 g8dr01.g8dr

In /etc/rc.conf:

hostname="g8dr01"

>From /usr/local/etc/dhcpd.conf:

option domain-name "g8dr";
option netbios-name-servers 10.0.1.1;
option domain-name-servers 10.0.1.1;

The server is running dnsmasq and will resolve g8dr01 as 10.0.1.1 and
forward unknown names upstream to the ISP DNS. I can google from the Vista
client just fine.

Naturally these entries are incomplete, I am including only what I think is
relevant. Let me know what else might help.

I think I can run a test using plain, out-of-the-box Vista. Maybe even XP.
Will post results when I have them.

Gary Dunn
Open Slate Project

-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba