Samba -- XP user can log in to shares but smbclient user always gets password errors

ejoe · 04-17-2005, 09:08 AM

I have a samba server set up with two shares - one requires a password, one doesn't. I can access both shares using an XP box just fine - access the public share, it works; access the password-protected share, it asks for the password, then it works. Problem is I can't do the same thing from a Linux box. Using smbclient, I can access the public share fine, but when I access the password-protected share, I type the password in, and it won't accept the password.

//blinky/shared is my public share. Both XP box and smbclient have no trouble with it.
//blinky/joe is my password-protected share...

[root@rocko ~]# smbclient //blinky/joe
Password: (I type the password in)
Domain=[NEWIEHOUSE] OS=[Unix] Server=[Samba 3.0.10-1.fc3]
tree connect failed: NT_STATUS_WRONG_PASSWORD

[root@rocko ~]# smbmount //blinky/joe /mnt/joe
Password: (I type the password in)
6451: tree connect failed: ERRSRV - ERRbadpw (Bad password - name/password pairin a Tree Connect or Session Setup are invalid.)
SMB connection failed

If I try connecting to smb://blinky/joe in Konquerer, it asks for the login details, but doesn't accept anything. It just keeps asking for the login details, over and over.

I know the password I am typing is correct, because it works in XP.

I have also tried:
smbclient //blinky/joe username=joe
smbclient //blinky/joe username=Joe
but I am led to believe that having "security = share" in smb.conf means the username does not matter.

Any hints as to why smbclient is failing while XP is getting through? Perhaps this is something to do with whether plain-text or encrypted passwords are being used? I guess this because smbclient will successfully connect to my public share, just not to the password protected one, though I can't find much info on this. I'm probably way off anyway

I am using Fedora Core 3 on both server and client. Here's the server's config files:

smb.conf

Code:

[global]
        workgroup = newiehouse
        server string = Newiehouse Samba
        hosts allow = 192.168.19. 127.
        dns proxy = yes
        guest account = newie
        bind interfaces only = yes
        interfaces = 192.168.19.0/24 lo
        lanman auth = no
        log file = /var/log/samba/%m.log
        max log size = 50
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        domain master = yes
        preferred master = yes
        wins support = yes

        idmap uid = 16777216-33554431
        idmap gid = 16777216-33554431
        template shell = /bin/false
        winbind use default domain = no
        username map = /etc/samba/smbusers
        security = share
        encrypt passwords = yes
        guest ok = yes

[joe]
        comment = Joe's Files
        path = /home/joe/files
        valid users = joe
        writeable = yes
        printable = no
        browseable = no

        create mask = 0600
        force create mode = 0600
        directory mask = 0700
        force directory mode = 0700

[shared]
        comment = Newiehouse Shared
        path = /home/shared
        writeable = yes
        printable = no
        guest ok = yes

        create mask = 0660
        force create mode = 0660
        security mask = 0660
        force security mode = 0660
        directory mask = 0770
        force directory mode = 0770
        directory security mask = 0770
        force directory security mode = 0770

        follow symlinks = no
        force user = newie

smbusers

Code:

# Unix_name = SMB_name1 SMB_name2 ...
#root = administrator admin
#nobody = guest pcguest smbguest
joe = Joe

smbpasswd

Code:

joe:500:0B7C116B4B217D98D3FA0823D124F9E0:93477CE0040622CF348900E0600D4397:[U      ]:LCT-426262BF:
newie:501:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:[DU        ]:LCT-00000000:

szszekel · 04-17-2005, 09:29 AM

You should trie machinename/username when you log in. (smbclient //blinky/joe username=blinky/joe .

ejoe · 04-18-2005, 01:41 AM

Quote:

smbclient //blinky/joe username=blinky/joe

No luck. I've tried:
smbmount //blinky/joe /mnt/joe username=blinky/joe
smbmount //blinky/joe /mnt/joe username=blinky/Joe
smbmount //blinky/joe /mnt/joe username=blinky\joe
smbmount //blinky/joe /mnt/joe username=blinky\Joe
smbmount //blinky/joe /mnt/joe username=rocko/joe (and all the other / or \, Joe or joe combinations...)
smbmount //blinky/joe /mnt/joe username=newiehouse/joe (and the other combinations...)
smbmount //blinky/joe /mnt/joe username=USERS/joe (and the other combinations...)
smbmount //blinky/joe /mnt/joe username=BLINKY/joe (and the other combinations...)
...

The smbclient man page doesn't say much about usernames and passwords. Anyone know where I can find some better info?

ejoe · 04-18-2005, 10:55 AM

Fixed.

Shouldn't have had lanman auth = no in smb.conf.