Thanks in advance for any help. Sorry for the long email, but wanted to include as much information as possible.

We're trying to migrate file storage from a NW65SP8 cluster to some OES11 VMs. The NW server have CIFS installed and users, both PC and Mac, can access the CIFS shares using their eDirectory credentials. We have migrated the data using miggui. Users can login using the NW client, map drives and access their files. CIFS fails to connect. The users keep getting prompted to login. The CIFS log contains the following:

Jul 11 11:58:10 oesfs111 CIFS[7327]: WARNING: AUTH: Authentication failed due to password mismatch for user cn=smithj.ou=xx.ou=yy.o=zzz, Err :-1642
Jul 11 11:58:10 oesfs111 CIFS[7327]: WARNING: CODIR: SESNotLoggedIn: Failed to authenticate user: smithj from 172.18.1.94, nwErr: -1642, cifsErr: 0
Jul 11 11:58:10 oesfs111 CIFS[7327]: WARNING: AUTH: SessionSetup : Login Failed -nwLoginError is -1642, cifslogin err 0, dest ip :172.18.1.94

The same error occurs for multiple users. All tested users have a simple password, and can connect to CIFS shares on the NetWare servers. The same error occurs on all the OES11 servers.

Checked CIFS configuration on OES11 servers and it appears correct. Can view CIFS status and shares in iManager. We even tried creating a new user just for testing, and this user fails with same error. We created and applied a Password Policy for this test user, and created a universal password, still no joy. Context settings are correct. Even tried creating a local workstation account with same username and password. Can access NW CIFS shares without being prompted, but OES shares throw a login prompt, which always fails. I've scoured the forums and knowledge base.

TIDs Consulted:

7003025, Accessing CIFS Fails with -1642
7009255, nfapCIFSDialect set to 4
7009224, 1660 NMAS login method
7002115, Failed to authenticate to CIFS
Article Example of Troubleshooting AFP NMAS Issues

Environment:
Master of Root:
NW65SP8
eDirectory 8.7.3.10
NDS 10554.34

Shares located on new OES11 server, updated to latest patches, which contains no replica. NW servers with CIFS shares also do not contain replicas. Tried placing a read only replica n OES server, no change. LDAP tested on OES11 using softerra LDAP Browser, and responds even more quickly than NW servers.

Running an NDS Trace ON OES server with CIFS share shows:

1363257088 LDAP: [2012/07/11 11:57:22.375] (127.0.0.1:42077)(0x005f:0x63) DoSearch on connection 0xdc45040
1363257088 LDAP: [2012/07/11 11:57:22.375] get_filter: EXTENSIBLE
1363257088 LDAP: [2012/07/11 11:57:22.375] (127.0.0.1:42077)(0x005f:0x63) Search request:
base: "o=zzz"
scope:2 dereference:0 sizelimit:0 timelimit:10 attrsonly:0
filter: "(cn:dn:=smithj)"
attribute: "1.1"
1363257088 LDAP: [2012/07/11 11:57:22.379] (127.0.0.1:42077)(0x005f:0x63) Sending search result entry "cn=smithj.ou=xx.ou=yy.o=zzz" to connection 0xdc45040
1363257088 LDAP: [2012/07/11 11:57:22.385] (127.0.0.1:42077)(0x005f:0x63) Sending operation result 0:"":"" to connection 0xdc45040
995264256 LDAP: [2012/07/11 11:57:25.391] (127.0.0.1:42077)(0x0060:0x63) DoSearch on connection 0xdc45040
995264256 LDAP: [2012/07/11 11:57:25.391] get_filter: EXTENSIBLE
995264256 LDAP: [2012/07/11 11:57:25.391] (127.0.0.1:42077)(0x0060:0x63) Search request:
base: "OU=xx,OU=yy,O=zzz"
scope:2 dereference:0 sizelimit:0 timelimit:10 attrsonly:0
filter: "(cn:dn:=smithj)"
attribute: "1.1"
995264256 LDAP: [2012/07/11 11:57:25.395] (127.0.0.1:42077)(0x0060:0x63) Sending search result entry "cn=smithj.ou=xx.ou=yy.o=zzz" to connection 0xdc45040
995264256 LDAP: [2012/07/11 11:57:25.395] (127.0.0.1:42077)(0x0060:0x63) Sending operation result 0:"":"" to connection 0xdc45040
1362204416 LDAP: [2012/07/11 11:57:28.398] (127.0.0.1:42077)(0x0061:0x63) DoSearch on connection 0xdc45040
1362204416 LDAP: [2012/07/11 11:57:28.398] get_filter: EXTENSIBLE
1362204416 LDAP: [2012/07/11 11:57:28.398] (127.0.0.1:42077)(0x0061:0x63) Search request:
base: "OU=ss,OU=tt,O=zzz"
scope:2 dereference:0 sizelimit:0 timelimit:10 attrsonly:0
filter: "(cn:dn:=smithj)"
attribute: "1.1"
1362204416 LDAP: [2012/07/11 11:57:28.399] (127.0.0.1:42077)(0x0061:0x63) Sending operation result 0:"":"" to connection 0xdc45040
993158912 LDAP: [2012/07/11 11:58:04.245] (127.0.0.1:42077)(0x0062:0x63) DoSearch on connection 0xdc45040
993158912 LDAP: [2012/07/11 11:58:04.245] get_filter: EXTENSIBLE
993158912 LDAP: [2012/07/11 11:58:04.245] (127.0.0.1:42077)(0x0062:0x63) Search request:
base: "o=zzz"
scope:2 dereference:0 sizelimit:0 timelimit:10 attrsonly:0
filter: "(cn:dn:=smithj)"
attribute: "1.1"
993158912 LDAP: [2012/07/11 11:58:04.249] (127.0.0.1:42077)(0x0062:0x63) Sending search result entry "cn=smithj.ou=xx.ou=yy.o=zzz" to connection 0xdc45040
993158912 LDAP: [2012/07/11 11:58:04.251] (127.0.0.1:42077)(0x0062:0x63) Sending operation result 0:"":"" to connection 0xdc45040
990000896 LDAP: [2012/07/11 11:58:07.263] (127.0.0.1:42077)(0x0063:0x63) DoSearch on connection 0xdc45040
990000896 LDAP: [2012/07/11 11:58:07.263] get_filter: EXTENSIBLE
990000896 LDAP: [2012/07/11 11:58:07.263] (127.0.0.1:42077)(0x0063:0x63) Search request:
base: "ou=xx.ou=yy.o=zzz"
scope:2 dereference:0 sizelimit:0 timelimit:10 attrsonly:0
filter: "(cn:dn:=smithj)"
attribute: "1.1"
990000896 LDAP: [2012/07/11 11:58:07.266] (127.0.0.1:42077)(0x0063:0x63) Sending search result entry "cn=smithj.ou=xx.ou=yy.o=zzz" to connection 0xdc45040
990000896 LDAP: [2012/07/11 11:58:07.266] (127.0.0.1:42077)(0x0063:0x63) Sending operation result 0:"":"" to connection 0xdc45040
1019660032 LDAP: [2012/07/11 11:58:10.273] (127.0.0.1:42077)(0x0064:0x63) DoSearch on connection 0xdc45040
1019660032 LDAP: [2012/07/11 11:58:10.273] get_filter: EXTENSIBLE
1019660032 LDAP: [2012/07/11 11:58:10.273] (127.0.0.1:42077)(0x0064:0x63) Search request:
base: "OU=ss,OU=tt,O=zzz"
scope:2 dereference:0 sizelimit:0 timelimit:10 attrsonly:0
filter: "(cn:dn:=smithj)"
attribute: "1.1"
1019660032 LDAP: [2012/07/11 11:58:10.275] (127.0.0.1:42077)(0x0064:0x63) Sending operation result 0:"":"" to connection 0xdc45040


Any help would be greatly appreciated. I'm stuck until I get this figured out.