As already mentioned before - but now hardened by longer usage - the
CIFS service on OES11 is authenticating correctly only for a limited
period of time.

The issue is the following: If authentication works,all is OK. But out
of a sudden - mostly if the user trying to authenticate did not access
the CIFS share for some time (24-48h) authentication does not work. The
error in the cifs.log is:

WARNING: AUTH: Authentication failed due to password mismatch for user
, Err :-1647
WARNING: AUTH: Authentication failed due to password mismatch for user
, Err :-1647
WARNING: AUTH: Authentication failed due to password mismatch for user
, Err :-1647
WARNING: CODIR: SESNotLoggedIn: Failed to authenticate user: xxx from
10.100.0.78, nwErr: -1647, cifsErr: 0
WARNING: AUTH: SessionSetup : Login Failed -nwLoginError is -1647,
cifslogin err 0, dest ip :10.100.0.78

This is absolutely identical regardless from which PC you try to
authenticate with the same username (I tried Win7 32/64, WinXP, Win2K,
SLES 10, SLED 11.2, etc). After about 5 minutes all of a sudden
authentication takes place without any errors and from all PCs, which
you are trying. If this happens you are without problem for the
following 24-48 hours, but then the problem may reappear.

The error 1647 is probably the NMAS error code 1647 NMAS E AUTH
FAILURE, which means "The creation of eDirectory background
authentication materials failed".

So it seems, that the new cifslinlsm, which replaced LSMCIFS does not
work correctly on OES11 or that the server tries an inappropriate NMAS
method for some time, till he detects, that he has to switch to the
appropriate one.

As a remark this network has a DSfW server, but the CIFS authentication
is set to local edir *not* AD, but of course the GSSAPI method is
installed in the tree.

--
W. Prindl