We have an OES2 SP3 server we migrated from a Netware 6.5SP8 server.
Everything works fine as far as file access, user login, etc. I decided
to configure CIFS on this server for some testing (already have CIFS
working on another NW 6.5 SP8 server in the tree). Setup Universal
Password Policy and everything appears to be configured correctly.

Unfortunately, CIFS will not authenticate properly and I can't map a
drive. I get the following the in cifs.log file:

Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: INFO : SESSION:
cifsVcsm.c:509:Negprot obtained
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: INFO : SESSION:
cifsVcsm.c:549:authres_success
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: VERB: SMB_NegProt entry,
TID=0
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: VERB: Clients Dialect : 0
PC NETWORK PROGRAM 1.0
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: VERB: Clients Dialect : 1
LANMAN1.0
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: VERB: Clients Dialect : 2
Windows for Workgroups 3.1a
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: VERB: Clients Dialect : 3
LM1.2X002
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: VERB: Clients Dialect : 4
LANMAN2.1
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: VERB: Clients Dialect : 5
NT LM 0.12
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: INFO : VERB: NegProt : Selected
protocol NT LM 0.12 index 5
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: CODIR: SES Index: 7
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: CODIR: SES state: New,
event: init
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: CODIR: SES New state:
NotLoggedIn
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: VERB: negprot : secmode is
7
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: VERB: Negprot : fetching
curtime 1428344470
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: INFO : VERB: VERBS : my system
time in secs is 1428344470
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: INFO : VERB: sizeof long: 4, nint
: 4, outParmP->ServerTimeZone : 2
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: VERB: LM_NT_12 DAILECT
processed
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: INFO : VERB: SMB_SessionSetup2
entry, TID=0
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: CODIR: SES state:
NotLoggedIn, event: login
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: INFO : CODIR: SES Null User.
Allow Tcon's to IPC$ only. Stay in NotloggedIn state.
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: CODIR: SES New state:
NotLoggedIn
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: VERB: the session reply
includes 85 bytes "SUSE LINUX 10.1" "SUSE LINUX 10.1" "WORKGROUP"
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: INFO : VERB: SMB_SessionSetup2,
TID=0, error=0:0
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: SMB: SMB_TreeConnectAndX
entry, TID=0
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: VERB: share name obtained
in TconX : IPC$, ipc is set
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: CODIR: Tid index: 4
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: CODIR: TID State: New,
event: init
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: CODIR: TID New state:
Ready
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: SMB: SMB_TreeConnectAndX,
TID=4, error=0:0
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: INFO : VERB: SMB_SessionSetup2
entry, TID=0
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: CODIR: SES Index: 8
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: CODIR: SES state: New,
event: init
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: CODIR: SES New state:
NotLoggedIn
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: CODIR: SES state:
NotLoggedIn, event: login
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: INFO : AUTH:
GetCIFSSessionForNMASHandle: 488fd0
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: DEBUG: AUTH: ldapacc, after
replacing . with , and removing '\':cn=wcadmin,ou=xx,o=zzz
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: INFO : AUTH:
NMAS_ClientLoginExV2Init()returned mh: 9574064
Apr 6 14:21:10 MVR_FIELD1 CIFS[7969]: INFO : AUTH: Calling
NMAS_NCPClient_LoginwithMAF() with mafhandle: 9574064
Apr 6 14:21:13 MVR_FIELD1 CIFS[7969]: CRITICAL: AUTH: User
authentication failed for user: cn=wcadmin.ou=xx.o=zzz, Err: -1642
Apr 6 14:21:13 MVR_FIELD1 CIFS[7969]: CRITICAL: VERB:
NMASCIFSClientAuthenticate() failed
Apr 6 14:21:13 MVR_FIELD1 CIFS[7969]: INFO : AUTH:
GetCIFSSessionForNMASHandle: 488fd0
Apr 6 14:21:13 MVR_FIELD1 CIFS[7969]: DEBUG: AUTH: ldapacc, after
replacing . with , and removing '\':cn=wcadmin,ou=yy,o=zzz
Apr 6 14:21:13 MVR_FIELD1 CIFS[7969]: CRITICAL: AUTH: Failed to resolve
the context to the user: wcadmin.ou=yy.o=zzz, Err: -601
Apr 6 14:21:13 MVR_FIELD1 CIFS[7969]: CRITICAL: VERB:
NMASCIFSClientAuthenticate() failed
Apr 6 14:21:13 MVR_FIELD1 CIFS[7969]: WARNING: CODIR: Failed to
authenticate User : wcadmin , err : -601
Apr 6 14:21:13 MVR_FIELD1 CIFS[7969]: DEBUG: CODIR: SES New state:
NotLoggedIn
Apr 6 14:21:13 MVR_FIELD1 CIFS[7969]: CRITICAL: AUTH: Login
Failed.tempSES->nwLoginError is -601
Apr 6 14:21:13 MVR_FIELD1 CIFS[7969]: INFO : VERB: SMB_SessionSetup2,
TID=0, error=109:49152
Apr 6 14:21:21 MVR_FIELD1 CIFS[7969]: DEBUG: SMB: SMB_TreeDisconnect
entry, TID=4
Apr 6 14:21:21 MVR_FIELD1 CIFS[7969]: DEBUG: CODIR: TID State: Ready,
event: Disconnect
Apr 6 14:21:21 MVR_FIELD1 CIFS[7969]: DEBUG: CODIR: TID New state:
Ready
Apr 6 14:21:21 MVR_FIELD1 CIFS[7969]: DEBUG: SMB: SMB_TreeDisconnect,
TID=0, error=0:10214460
Apr 6 14:21:21 MVR_FIELD1 CIFS[7969]: DEBUG: SESSION: recv of nbt
header failed, Closing the client connection: retry count 20 errno= 0
Apr 6 14:21:21 MVR_FIELD1 CIFS[7969]: DEBUG: SESSION: Clearing all
connections from client fd : 20
Apr 6 14:21:21 MVR_FIELD1 CIFS[7969]: DEBUG: CODIR: SES state:
NotLoggedIn, event: prepareToDie
Apr 6 14:21:21 MVR_FIELD1 CIFS[7969]: INFO : CODIR: SESNotLoggedIn
user: Logging Off..
Apr 6 14:21:21 MVR_FIELD1 CIFS[7969]: DEBUG: CODIR: SES New state: New
Apr 6 14:21:56 MVR_FIELD1 CIFS[7969]: DEBUG: BROWSER: Announcement sent
8 th time
Apr 6 14:21:56 MVR_FIELD1 CIFS[7969]: DEBUG: BROWSER: Browser is not
LMB, so no MA frame sent

Doing an NDSTRACE gets me the following:

1086343488 NMAS: [2015/04/06 14:21:10.450] 262393: Create NMAS Session
1086343488 NMAS: [2015/04/06 14:21:10.450] 262393: Pregathered
information NMAS_AID = 2 ignored
1086343488 NMAS: [2015/04/06 14:21:10.450] 262393: Pregathered
information NMAS_AID = 1 value cn=wcadmin.ou=xx.o=zzz
1086343488 NMAS: [2015/04/06 14:21:10.450] 262393: Pregathered
information NMAS_AID = 11 value cifslinlsm
1086343488 NMAS: [2015/04/06 14:21:10.450] 262393: NMAS Client supplied
user DN cn=wcadmin.ou=xx.o=zzz
1086343488 NMAS: [2015/04/06 14:21:10.451] 262393: Create thread request
1086343488 NMAS: [2015/04/06 14:21:10.451] 262393: No free threads in
pool. Creating a new thread.
1086343488 NMAS: [2015/04/06 14:21:10.451] 0: Created thread
0xe051168, handle 1271953728
1086343488 NMAS: [2015/04/06 14:21:10.451] 262393: Created a new thread.
Pool contains 1 free threads, 0 running threads
1086343488 NMAS: [2015/04/06 14:21:10.451] 262393: Using thread
0xe051168
1086343488 NMAS: [2015/04/06 14:21:10.451] 262393: Server thread started
1086343488 NMAS: [2015/04/06 14:21:10.451] 262393: Started login session
1086343488 NMAS: [2015/04/06 14:21:10.452] 262393: NCP client address
type 1
1086343488 NMAS: [2015/04/06 14:21:10.452] 262393: NCP client address
127 0 0 1
1086343488 NMAS: [2015/04/06 14:21:10.452] 262393:
PxySendProxyClientInfo Bad Client MAF Handle
1271953728 NMAS: [2015/04/06 14:21:10.452] 262393: Pool thread 0xe051168
awake with new work
1271953728 NMAS: [2015/04/06 14:21:10.454] 262393: OEM
1271953728 NMAS: [2015/04/06 14:21:10.454] 262393: OEM Verb 1
1271953728 NMAS: [2015/04/06 14:21:10.458] 262393: OEM
1271953728 NMAS: [2015/04/06 14:21:10.458] 262393: OEM Verb 3
1271953728 NMAS: [2015/04/06 14:21:10.458] 262393: NMAS Audit with Audit
PA not installed
1271953728 NMAS: [2015/04/06 14:21:10.459] 262393: NMAS Audit with XDAS
not installed
1271953728 NMAS: [2015/04/06 14:21:10.459] 262393: CanDo
1271953728 NMAS: [2015/04/06 14:21:10.459] 262393: IP client network
address
1271953728 NMAS: [2015/04/06 14:21:10.459] 262393: Selected requested
login sequence == "cifslinlsm"
1271953728 NMAS: [2015/04/06 14:21:10.459] 262393: Login Method
0x000002B6
1271953728 NMAS: [2015/04/06 14:21:10.460] 262393: Begin Server Module
0x000002B6
1271953728 NMAS: [2015/04/06 14:21:10.460] 262393: Server Module
0x000002B6 Read
1271953728 NMAS: [2015/04/06 14:21:10.461] 262393: Server Module
0x000002B6 Get Password
1271953728 NMAS: [2015/04/06 14:21:10.461] 262393: Server Module
0x000002B6 Get Password
1271953728 NMAS: [2015/04/06 14:21:10.461] 262393: Server Module
0x000002B6 Write
1271953728 NMAS: [2015/04/06 14:21:10.461] 262393: ERROR: -1 Server
Module 0x000002B6 End
1271953728 NMAS: [2015/04/06 14:21:10.461] 262393: NMAS Audit with Audit
PA not installed
1271953728 NMAS: [2015/04/06 14:21:10.461] 262393: NMAS Audit with XDAS
not installed
1271953728 NMAS: [2015/04/06 14:21:10.462] 262393: WhatNext
1271953728 NMAS: [2015/04/06 14:21:10.478] 262393: Failed login delay 3
seconds
1271953728 NMAS: [2015/04/06 14:21:13.480] 262393: Failed login
1271953728 NMAS: [2015/04/06 14:21:13.480] 262393: NACK
1271953728 NMAS: [2015/04/06 14:21:13.480] 262393: NMAS Audit with Audit
PA not installed
1271953728 NMAS: [2015/04/06 14:21:13.480] 262393: NMAS Audit with XDAS
not installed
1271953728 NMAS: [2015/04/06 14:21:13.480] 262393: Server thread exited
1271953728 NMAS: [2015/04/06 14:21:13.480] 262393: Pool thread 0xe051168
work complete
1275111744 NMAS: [2015/04/06 14:21:13.480] 262393: NMAS session failed
1275111744 NMAS: [2015/04/06 14:21:13.480] 262393: Client Session
Destroy Request
1275111744 NMAS: [2015/04/06 14:21:13.480] 262393: Local Session Cleared
(Not Destroyed)

I've been searching the forums and TID's all day and can't figure this
out. Any ideas?


--
gwurst
------------------------------------------------------------------------
gwurst's Profile: https://forums.netiq.com/member.php?userid=9447
View this thread: https://forums.netiq.com/showthread.php?t=53265