"smbclient -L" gives NT_STATUS_LOGON_FAILURE

[Ervin Hegedüs]

After we have upgraded our system to 8.04, smbclient gives report as above.

Here are the results:

# smbclient -L 192.168.117.2 -U myuser
Password:
session setup failed: NT_STATUS_LOGON_FAILURE
# mount -t cifs -o username=myuser //192.168.117.2/data1 /mnt
Password:
[share has mounted]
# mount | grep mnt
//192.168.117.2/data1 on /mnt type cifs (rw,mand)

On remote system the samba authenticates the users from a Windows AD (2003 SBS). If I try from another host (eg: Ubuntu 7.04), with same user and same password, I can check the list of shares:

$ /usr/bin/smbclient -L 192.168.117.21 -U myuser
Password:
Domain=[MYDOMAIN] OS=[Unix] Server=[Samba 3.0.22]

        Sharename Type Comment
        --------- ---- -------
        ADMIN$ IPC IPC Service (myserver server (Samba, Ubuntu))
        IPC$ IPC IPC Service (myserver server (Samba, Ubuntu))
...

The different between traffic of two hosts is when I came from 7.04, the packets contains these:
ANSI Password: 1C468E...
Unicode Password: 002AF...

but when I came from 8.04, all of these two fields has '1F1F1F...' value.

(I checked it with tcpdump).

Thank you:

a.

[Ervin Hegedüs (airween)]

Sorry, the IP of second smbclient test is same as first: 192.168.117.2 - of course.

[Chuck Short (zulcss)]

Can you please attach the sanitized log file when this happens?

Thanks
chuck

[nogac (nogacsoid)]

I think I have the same problem, only hardy gives NT_STATUS_LOGON_FAILURE, other linux machines work just fine

Attached is the log file generated by smbclient -L 192.168.0.125 -U aaaa -logfile=logdir -d 10

[Steve Langasek (vorlon)]

Hi airween,

What is the server that you're connecting against?

The presence of ANSI and Unicode password fields at /all/ in your packet trace suggests that the server is using plaintext password authentication. This is disabled by default in 8.04 for security reasons; to enable it, you would set 'client plaintext auth = yes' in the [global] section of /etc/samba/smb.conf. However, if this is the cause of the failure then there should also be an error message saying:

  Server requested plaintext password but 'client use plaintext auth' is disabled

which you don't have here; so maybe getting information about your server would help diagnose this further.

[Lucas Pottersky (lucaspottersky)]

I also have the same problem with ubuntu 8.04...

i'm able to access shares via nautilus by typing smb://machine/sharename (but not no list the shares, although I don't think that info helps you).

what kind of information on the server do you need Steve?

[dreamerns (dreamerns-ns-linux)]

We are closing this bug report because it lacks the information we need to investigate the problem, as described in the previous comments. Please reopen it if you can give us the missing information, and don't hesitate to submit bug reports in the future. To reopen the bug report you can click on the current status, under the Status column, and change the Status back to "New". Thanks again!