SOLVED CIFS: One user can authenticate one can’t, FAILED with error NT_STATUS_NO_SUCH_USER

[NaX]

I have 2 user accounts setup both have the “user” group allocated. I have created a windows share called Media that has full permission for that group and that both these accounts are meant have joint full access to this share. The problem is the one account cant authenticate at all.

When I put Allow Guest Access On, then I am able to authenticate but only as a guest.

The first account "justin" was created before I setup or enabled CIFS. Its like this account was never added to SAMBA as valid user. Justin and Jacqui can both login via SSH.

Any help or guidance would be greatly appreciated.

Here are some test I ran using net us and the related output from log.smbd.

Code:

net use \\192.168.0.2\Media /user:localhost\justin PASSWORD
System error 5 has occurred.
Access is denied

log.smbd

Code:

[2014/04/16 07:34:46.447805, 2] ../source3/param/loadparm.c:535(max_open_files)
max_open_files: increasing sysctl_max (11095) to minimum Windows limit (16384)
[2014/04/16 07:34:46.447864, 2] ../source3/param/loadparm.c:543(max_open_files)
rlimit_max: increasing rlimit_max (11095) to minimum Windows limit (16384)
[2014/04/16 07:34:46.448490, 2] ../source3/param/loadparm.c:3581(do_section)
Processing section "[homes]"
[2014/04/16 07:34:46.448575, 2] ../source3/param/loadparm.c:3581(do_section)
Processing section "[Media]"
[2014/04/16 07:34:46.449357, 2] ../source3/auth/auth.c:288(auth_check_ntlm_password)
check_ntlm_password: Authentication for user [justin] -> [justin] FAILED with error NT_STATUS_NO_SUCH_USER
[2014/04/16 07:34:46.457605, 2] ../source3/smbd/service.c:407(create_connection_session_info)
guest user (from session setup) not permitted to access this share (Media)
[2014/04/16 07:34:46.457643, 1] ../source3/smbd/service.c:550(make_connection_snum)
 create_connection_session_info failed: NT_STATUS_ACCESS_DENIED

Code:

net use \\192.168.0.2\Media /user:localhost\jacqui PASSWORD
The command completed successfully.

log.smbd

Code:

[2014/04/16 07:45:59.238454, 2] ../source3/param/loadparm.c:535(max_open_files)
max_open_files: increasing sysctl_max (11095) to minimum Windows limit (16384)
[2014/04/16 07:45:59.238553, 2] ../source3/param/loadparm.c:543(max_open_files)
rlimit_max: increasing rlimit_max (11095) to minimum Windows limit (16384)
[2014/04/16 07:45:59.239473, 2] ../source3/param/loadparm.c:3581(do_section)
Processing section "[homes]"
[2014/04/16 07:45:59.239603, 2] ../source3/param/loadparm.c:3581(do_section)
Processing section "[Media]"
[2014/04/16 07:45:59.286934, 2] ../source3/auth/auth.c:278(auth_check_ntlm_password)
check_ntlm_password: authentication for user [jacqui] -> [jacqui] -> [jacqui] succeeded
[2014/04/16 07:45:59.353010, 2] ../lib/util/modules.c:191(do_smb_load_module)
Module 'aio_pthread' loaded
[2014/04/16 07:45:59.353432, 2] ../lib/util/modules.c:191(do_smb_load_module)
Module 'streams_xattr' loaded
[2014/04/16 07:45:59.354349, 2] ../lib/util/modules.c:191(do_smb_load_module)
Module 'zfsacl' loaded
[2014/04/16 07:45:59.354835, 2] ../lib/util/modules.c:191(do_smb_load_module)
Module 'shadow_copy2' loaded
[2014/04/16 07:45:59.355299, 2] ../source3/smbd/service.c:848(make_connection_snum)
  justin-hp (ipv4:192.168.0.102:49687) connect to service Media initially as user jacqui (uid=1002, gid=1004) (pid 15540)

 

[dlavigne]

It might be related to this bug: https://bugs.freenas.org/issues/2043#note-13.

Does changing the password in the GUI for the problematic user fix it?

 

[NaX]

Thank you very much. That was exactly the issue.

If you first change the password to the same password as it is currently the error changes from invalid user to wrong password.

Code:

[2014/04/17 07:33:43.356233,  2] ../source3/auth/auth.c:288(auth_check_ntlm_password)
  check_ntlm_password:  Authentication for user [justin] -> [justin] FAILED with error NT_STATUS_WRONG_PASSWORD
[2014/04/17 07:33:43.356299,  2] ../auth/gensec/spnego.c:743(gensec_spnego_server_negTokenTarg)
  SPNEGO login failed: NT_STATUS_WRONG_PASSWORD

Then I changed it to something different and then it worked. Then I changed it back to what it was originally and it worked as expected.

I can also confirm with another account, when I first created it, same error, then I reset the password and it worked as expected. I tried to recall how I created my wife's account and I actually remember first creating it with a test generic password and then later read that it is a good idea to make the FreeNAS password the same as the windows password because then the user does not need to re-authenticate, so I reset her password a second time.

Thank you very much for the help, this bug has messed me around for many hours. I really hope the devs find and fix this very frustrating bug.