a member server on debian unstable using 3.0.0.final, member of 2000 AD, in ADS security mode & authenticating through winbind. XP/2000/2003 clients connect to shares OK, NT4 & DOS fail (suspect 9x the same not tested). NOT using NTLM v2. The logged error is "auth/pampass.c:smb_pam_accountcheck(781) smb_pam_accountcheck: PAM: Account Validation Failed - Rejecting User DOMAIN+user. winbind log generates No rid for Pre-Windows 2000 Compatible Access !?
Created attachment 335 [details] Patch for well known RID (Pre Windows-2000 Compatible Access") This should fix it. CHecking it in to the 3.0 tree.
checked in patch
sorry for the same, cleaning up the database to prevent unecessary reopens of bugs.
database cleanup