Bug 936 - SMBCLIENT printing only works intermittently
SMBCLIENT printing only works intermittently
Product: Samba 3.0
Classification: Unclassified
Component: smbclient
All Linux
: P1 regression
: none
Assigned To: Gerald (Jerry) Carter
: 946 (view as bug list)
Depends on:
Blocks: 807
  Show dependency treegraph
Reported: 2004-01-02 19:13 UTC by Ralph Thomas
Modified: 2005-11-14 09:29 UTC (History)
1 user (show)

See Also:

Here is a trace where SMBCLIENT works for printing (17.58 KB, text/plain)
2004-01-02 19:18 UTC, Ralph Thomas
no flags Details
Here is a trace where SMBCLIENT fails (13.26 KB, text/plain)
2004-01-02 19:19 UTC, Ralph Thomas
no flags Details
fix schannel bind credentials in smbd (2.62 KB, patch)
2004-01-14 22:53 UTC, Gerald (Jerry) Carter
no flags Details

Note You need to log in before you can comment on or make changes to this bug.
Description Ralph Thomas 2004-01-02 19:13:48 UTC
RH linux 7.3 @ 2.4.20-27.7 running SAMBA 3.0.1 installed off the rh7.3 rpm (on 
ur site :) )

The target printer is a win2000 pro WS (DESK1) with a share called HPOffice.

The source system is linux (SERVER2) running samba 3.0.1 as a PDC for the 

Two attached files shows the commands run at debug 5.  same command. ?

TIA! !
Comment 1 Ralph Thomas 2004-01-02 19:18:53 UTC
Created attachment 346 [details]
Here is a trace where SMBCLIENT works for printing
Comment 2 Ralph Thomas 2004-01-02 19:19:34 UTC
Created attachment 347 [details]
Here is a trace where SMBCLIENT fails
Comment 3 Volker Lendecke 2004-01-04 04:51:26 UTC
Your PDC (server2) has to authenticate the root password. So it would be helpful
to get

* a sniff of the traffic between the PDC and the workstation where the
  printer is attached

* a debug-level 10 log of the pdc's log.smbd
Comment 4 Gerald (Jerry) Carter 2004-01-14 21:24:39 UTC
*** Bug 946 has been marked as a duplicate of this bug. ***
Comment 5 Gerald (Jerry) Carter 2004-01-14 21:49:51 UTC
ok.  I've reproduced this one.  

  * Samba PDC (domain VALE)
  * Win2k client (XERA) joined to domain VALE
  * VALE trusts the AD domain (named AD)

This fails:

 # smbclient -L xera -U Administrator -W AD --debuglevel=3
 SPENGO login failed: Undetermined error
 session setup failed: NT_STATUS_UNSUCCESSFUL

These 2 works:

 # smbclient -L xera -U Administrator -W VALE --debuglevel=3
 # smbclient -L xera -U Administrator -W XERA --debuglevel=3

Looks like the error is caused by an rpc bind failure (NETLOGON)
from the VALE DC to the AD DC.  Looks like schannel again. :-(
Comment 6 Gerald (Jerry) Carter 2004-01-14 21:57:53 UTC
setting 'client schannel = no' causes the failure case 
to work now.  Trying to track down the real cause of
the bug....
Comment 7 Gerald (Jerry) Carter 2004-01-14 22:11:30 UTC
It's an schannel bug in smbd.  Tunneling the auth request through
winbindd works correctly.
Comment 8 Gerald (Jerry) Carter 2004-01-14 22:13:59 UTC
The failure case looks like this

  * smbd does a bind to the NETLOGON pipe (no schannel)
  * net_req_challenge()
  * net_auth2()
  * new bind to NETLOGON pipe (with schannel)
    -> rpc bind failure

Comment 9 Gerald (Jerry) Carter 2004-01-14 22:53:02 UTC
Created attachment 362 [details]
fix schannel bind credentials in smbd
Comment 10 Gerald (Jerry) Carter 2004-01-14 22:55:32 UTC
Fixed for 3.0.2rc1
Comment 11 Markus Greil 2004-01-15 02:35:09 UTC
The last version from CVS seems to work in our enviroment! (->Bug #946)
Comment 12 Gerald (Jerry) Carter 2005-08-24 10:18:51 UTC
sorry for the same, cleaning up the database to prevent unecessary reopens of bugs.
Comment 13 Gerald (Jerry) Carter 2005-11-14 09:29:16 UTC
database cleanup