Samba was configured with the default compile flags. Same LDAP backend, same smb.conf (in /usr/local/samba/lib). Here is output from smbclient -L localhost, from different versions of smbclient: 3.0.13: oink:/usr/local/src/samba-3.0.13/source/bin # pwd /usr/local/src/samba-3.0.13/source/bin oink:/usr/local/src/samba-3.0.13/source/bin # ./smbclient -L localhost params.c:pm_process() - Processing configuration file "/usr/local/samba/lib/printers.smb" added interface ip=192.168.1.101 bcast=192.168.1.255 nmask=255.255.255.0 Client started (version 3.0.13). Connecting to 127.0.0.1 at port 445 Password: Doing spnego session setup (blob length=58) got OID=1 3 6 1 4 1 311 2 2 10 got principal=NONE Got challenge flags: Got NTLMSSP neg_flags=0x60890215 NTLMSSP: Set final flags: Got NTLMSSP neg_flags=0x60080215 NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x60080215 SPNEGO login failed: Logon failure session setup failed: NT_STATUS_LOGON_FAILURE 3.0.12: oink:/usr/local/src/samba-3.0.12/source/bin # ./smbclient -L localhost params.c:pm_process() - Processing configuration file "/usr/local/samba/lib/printers.smb" added interface ip=192.168.1.101 bcast=192.168.1.255 nmask=255.255.255.0 Client started (version 3.0.12). Connecting to 127.0.0.1 at port 445 Password: Doing spnego session setup (blob length=58) got OID=1 3 6 1 4 1 311 2 2 10 got principal=NONE Got challenge flags: Got NTLMSSP neg_flags=0x60890215 NTLMSSP: Set final flags: Got NTLMSSP neg_flags=0x60080215 NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x60080215 SPNEGO login failed: Logon failure session setup failed: NT_STATUS_LOGON_FAILURE 3.0.12-pre1: oink:/usr/local/src/samba-3.0.12pre1/source/bin # pwd /usr/local/src/samba-3.0.12pre1/source/bin oink:/usr/local/src/samba-3.0.12pre1/source/bin # ./smbclient -L localhost params.c:pm_process() - Processing configuration file "/usr/local/samba/lib/printers.smb" added interface ip=192.168.1.101 bcast=192.168.1.255 nmask=255.255.255.0 Client started (version 3.0.12pre1). Connecting to 127.0.0.1 at port 445 Password: Doing spnego session setup (blob length=58) got OID=1 3 6 1 4 1 311 2 2 10 got principal=NONE Got challenge flags: Got NTLMSSP neg_flags=0x60890215 NTLMSSP: Set final flags: Got NTLMSSP neg_flags=0x60080215 NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x60080215 Domain=[CORP] OS=[Unix] Server=[Samba 3.0.13] Sharename Type Comment --------- ---- ------- acct_hp8500 Printer Accounting Color Laser Printer plotter Printer Engineering Plotter netlogon Disk Network logon service software Disk Software for Samba computers public Disk Public Files PDF Disk Location of documents printed to PDFCreator printer EVERYTHING Disk All shares APPS Disk ACCT Disk HR_PR Disk ENGR Disk DATA Disk X Disk NETWORK Disk UTILS Disk CDROM Disk CD-ROM on CORPSRV IPC$ IPC IPC Service (Corp File Server) ADMIN$ IPC IPC Service (Corp File Server) truss_hp5n Printer HP Laserjet 5n truss_hp4050 Printer HP Laserjet 4050 truss_hp4 Printer HP Laserjet 4 PDFcreator Printer Create PDF files furnlaser Printer FAX Printer Create FAX Files engr_hp1300 Printer root Disk Home Directories Connecting to 127.0.0.1 at port 139 Doing spnego session setup (blob length=58) got OID=1 3 6 1 4 1 311 2 2 10 got principal=NONE Got challenge flags: Got NTLMSSP neg_flags=0x60890215 NTLMSSP: Set final flags: Got NTLMSSP neg_flags=0x60080215 NTLMSSP Sign/Seal - Initialising with flags: Got NTLMSSP neg_flags=0x60080215 Domain=[CORP] OS=[Unix] Server=[Samba 3.0.13] Server Comment --------- ------- CORPSRV Corp File Server FURNSRV Furniture File Server LNXMISTY Samba 3.0.13 NTCHUCK NTENGRECEPT NTFURNOFFICE NTJEREMY NTJERRY NTJOHNK NTLISA NTMARY NTMIKE NTMIKEL NTRECEPTIONIST NTTIM NTTRUSS SQW TRUSSRV Samba Server W2KANGIE W2KAVF W2KGENE W2KGREG W2KHANK W2KROGER W2KTOMMY XPBRANDON XPCARL XPCHAD 2.4 Celeron XP XPCHERI XPDWAYNE2 Dwayne's New Laptop XPHOWARD Toshiba Windows XP for Carl Bals XPJB XPJONATHAN XPJUDY XPKRIS XPLORENE Dell Dimension 2400 Windows XP Pro Lorene XPMARINA XPNORTON XPPAT XPPAUL Dell XP XPSCOTT Workgroup Master --------- ------- BORKHOLDER IFSS CORP CORPSRV HOME XPFREEMON WORKGROUP NTMISTY Following is an ldd of each of the smbclient's: 3.0.13: oink:/usr/local/src/samba-3.0.13/source/bin # ldd ./smbclient linux-gate.so.1 => (0xffffe000) libcrypt.so.1 => /lib/libcrypt.so.1 (0x4002a000) libresolv.so.2 => /lib/libresolv.so.2 (0x4005b000) libnsl.so.1 => /lib/libnsl.so.1 (0x4006d000) libdl.so.2 => /lib/libdl.so.2 (0x40083000) libldap-2.2.so.7 => /usr/local/openldap/lib/libldap-2.2.so.7 (0x40086000) liblber-2.2.so.7 => /usr/local/openldap/lib/liblber-2.2.so.7 (0x400b4000) libc.so.6 => /lib/tls/libc.so.6 (0x400c0000) /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000) libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0x401d5000) libssl.so.0.9.7 => /usr/lib/libssl.so.0.9.7 (0x401eb000) libcrypto.so.0.9.7 => /usr/lib/libcrypto.so.0.9.7 (0x4021b000) 3.0.12: oink:/usr/local/src/samba-3.0.12/source/bin # ldd ./smbclient linux-gate.so.1 => (0xffffe000) libcrypt.so.1 => /lib/libcrypt.so.1 (0x4002a000) libresolv.so.2 => /lib/libresolv.so.2 (0x4005b000) libnsl.so.1 => /lib/libnsl.so.1 (0x4006d000) libdl.so.2 => /lib/libdl.so.2 (0x40083000) libldap-2.2.so.7 => /usr/local/openldap/lib/libldap-2.2.so.7 (0x40086000) liblber-2.2.so.7 => /usr/local/openldap/lib/liblber-2.2.so.7 (0x400b4000) libc.so.6 => /lib/tls/libc.so.6 (0x400c0000) /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000) libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0x401d5000) libssl.so.0.9.7 => /usr/lib/libssl.so.0.9.7 (0x401eb000) libcrypto.so.0.9.7 => /usr/lib/libcrypto.so.0.9.7 (0x4021b000) 3.0.12-pre1: oink:/usr/local/src/samba-3.0.12pre1/source/bin # ldd ./smbclient linux-gate.so.1 => (0xffffe000) libcrypt.so.1 => /lib/libcrypt.so.1 (0x4002a000) libresolv.so.2 => /lib/libresolv.so.2 (0x4005b000) libnsl.so.1 => /lib/libnsl.so.1 (0x4006d000) libdl.so.2 => /lib/libdl.so.2 (0x40083000) libldap-2.2.so.7 => /usr/local/openldap/lib/libldap-2.2.so.7 (0x40086000) liblber-2.2.so.7 => /usr/local/openldap/lib/liblber-2.2.so.7 (0x400b4000) libc.so.6 => /lib/tls/libc.so.6 (0x400c0000) /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000) libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0x401d5000) libssl.so.0.9.7 => /usr/lib/libssl.so.0.9.7 (0x401eb000) libcrypto.so.0.9.7 => /usr/lib/libcrypto.so.0.9.7 (0x4021b000)
smbclient of 3.0.13 works for me authenticated and anonymous with Samba 2.2, 3.0.13 as server. The binaries of 3.0.11, .12, and .13 are compiled with the same settings. And even a 3.0.13 smbclient with the default configuration works well. Are you testing in all cases with the same 3.0.13 server? Did you call source/autogen.sh or autoreconf --force --install before you called configure? What Linux distribution vendor are you using?
(In reply to comment #1) > > Are you testing in all cases with the same 3.0.13 server? Yes. Also only my PDC is affected. A member server running 3.0.13 does not have the problem. > > Did you call source/autogen.sh or autoreconf --force --install before you called > configure? No. I don't even know what that is. > > What Linux distribution vendor are you using? SuSE 9.1. Why does it matter if I compiled from source?
Is it possible to the PDC with a Microsoft client (NT 4.0, 2000, or XP) while authenticated? Does 'pdbedit -L' at the PDC shell list the users? Did you try: 'smbclient -L localhost -U%' to do an anonymous connection? A smbclient compiled for and in the environment of SuSE Linux 9.1 with the Samba default settings works also fine. Therfore I expect that your problem is in the area of the SAM database. There are pre compiled packages available for SuSE Linux. See ftp://ftp.SuSE.com/pub/projects/samba/3.0/ or http://download.Samba.org/samba/ftp/Binary_Packages/SuSE/3.0/ with sub dirs ARCH and SuSE Linux version. If you switch to these packages from your own builds please take care about the TDB files - in particular secrets.tdb.
It is not the SAM database -- users are able to log in just fine, and pdbedit -L works just fine. I have replicated the problem on another SuSE 9.1 system. It does not occur on SuSE 9.2. It has got to be some library problem with the libraries in SuSE 9.1. Please help me know what info to give you to help debug this problem rather than just marking it as invalid!
Is it possible to you to do the same tests with the packages mentioned in comment #3? Why did you install a different OpenLDAP library version than the one from SuSE Linux 9.1?
(In reply to comment #5) > Is it possible to you to do the same tests with the packages mentioned in > comment #3? It is a production server. I guess I could arrange a time, if it is really necessary. Building my own gives me some flexibility as far as getting bug fixes fast. > > Why did you install a different OpenLDAP library version than the one from SuSE > Linux 9.1? Because it also is my LDAP server and the version of OpenLDAP shipped with SuSE 9.1 is woefully out of date.
> > Why did you install a different OpenLDAP library version than the one from > SuSE > > Linux 9.1? > > Because it also is my LDAP server and the version of OpenLDAP shipped with SuSE > 9.1 is woefully out of date. > I have two other 9.1 servers with all the Online Updates and with the stock openLDAP client / libraries which ship with 9.1. Same problem. >
Lars, this is probably the gcc 3.3.3 bug triggered by -O2 flags. Samba 3.0.1[23] had a bug in configure.in that reset the default compile flags to "-g -O2" *actually is an autoconf macro issue IMO).
yup. old gcc bug.