Bug 8069 - No guest access if names used on client and netbios name of samba box are different
Summary: No guest access if names used on client and netbios name of samba box are dif...
Status: NEW
Alias: None
Product: Samba 3.2
Classification: Unclassified
Component: Domain Control (show other bugs)
Version: 3.2.5
Hardware: x86 Linux
: P5 normal
Target Milestone: ---
Assignee: Guenther Deschner
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2011-04-07 16:49 UTC by Alexander Harlampov
Modified: 2011-04-07 16:49 UTC (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Alexander Harlampov 2011-04-07 16:49:42 UTC
Hello,

I have the following setup :

Samba 3.2.5 runs Primary Domain Controller (further referenced as PDC).

In the domain I have another Samba box (3.0.10), which is domain member and runs some shares. (further referenced as STORAGE).

STORAGE has few name aliases assigned to its IP-address, for example install,storage,... , and in smb.conf of STORAGE 'netbios name' value is 'storage'.


So, what happens :

When I, from my client laptop, try to mount some share from STORAGE(by any alias), with my domain account, it works fine.
But when I want to mount it as a guest (guest access is set on STORAGE), 
it works for the case when I use \\storage name (same as in 'netbios name' on STORAGE) and it does not work when I use another alias (different than 'netbios name'), f.e. \\install . in this case in the log on STORAGE I can see  :

[2011/04/01 17:29:58, 1] auth/auth_server.c:check_smbserver_security(373)
  password server * gave us guest only
[2011/04/01 17:29:58, 2] auth/auth.c:check_ntlm_password(312)
  check_ntlm_password:  Authentication for user [guest] -> [guest] FAILED with error NT_STATUS_LOGON_FAILURE
[2011/04/01 17:30:09, 2] smbd/server.c:exit_server(571)

and on client I'm getting "Bad user or password" error.

here is the code I noticed about this error:
auth/auth_server.c
...
/* if logged in as guest then reject */
    if ((SVAL(cli->inbuf,smb_vwv2) & 1) != 0) {
        DEBUG(1,("password server %s gave us guest only\n", cli->desthost));
        nt_status = NT_STATUS_LOGON_FAILURE;
    }
...

==

PS
before upgrade to 3.2.5 I had samba 3.0.10 and there it worked in all cases.