smb: is this bad?

[smp]

Couldn't find user 'administrator' in UNIX password database.
[2001/06/01 09:22:26, 1] smbd/reply.c:reply_sesssetup_and_X(925)
Rejecting user 'administrator': authentication failed
[2001/06/01 09:22:26, 1] smbd/password.c😛ass_check_smb(492)
Couldn't find user 'administrator' in UNIX password database.
[2001/06/01 09:22:26, 1] smbd/password.c😛ass_check_smb(492)
Couldn't find user 'administrator' in UNIX password database.
[2001/06/01 09:22:26, 1] smbd/reply.c:reply_sesssetup_and_X(925)
Rejecting user 'administrator': authentication failed
[2001/06/01 09:22:33, 1] smbd/password.c😛ass_check_smb(492)
Couldn't find user 'administrator' in UNIX password database.
[2001/06/01 09:22:33, 1] smbd/password.c😛ass_check_smb(492)
Couldn't find user 'administrator' in UNIX password database.
[2001/06/01 09:22:33, 1] smbd/reply.c:reply_sesssetup_and_X(925)
Rejecting user 'administrator': authentication failed

This is my smb log file.. what was that? Is that someone trying to get root access? Thanks..

 

[n0cmonkey]

It looks like someone is trying to connect to a SMB share. What OS? If you are running a UNIX compatible system (like linux) and SAMBA, this is normal. Just someone trying to connect to a random share 🙂

 

[smp]

Thanks n0c

 

[n0cmonkey]

<< Thanks n0c >>



No problem. I can see where that might cause some concern. One of these days I should actually "secure" my samba shares instead of just making them wide open where anyone on my network can get to them (at work).

 

[smp]

What about this? my nmb log (wtf is nmb?) 😱

[2001/06/11 03:35:16, 0] nmbd/nmbd_incomingrequests.c😛rocess_name_refresh_request(181)
Error - should be sent to WINS server
[2001/06/11 03:43:16, 0] nmbd/nmbd_incomingrequests.c😛rocess_name_refresh_request(180)
process_name_refresh_request: unicast name registration request received for name ADMIN$
[2001/06/11 03:43:16, 0] nmbd/nmbd_incomingrequests.c😛rocess_name_refresh_request(181)
Error - should be sent to WINS server
[2001/06/11 03:43:16, 0] nmbd/nmbd_incomingrequests.c😛rocess_name_refresh_request(180)
process_name_refresh_request: unicast name registration request received for name THUND$
[2001/06/11 03:43:16, 0] nmbd/nmbd_incomingrequests.c😛rocess_name_refresh_request(181)
Error - should be sent to WINS server
[2001/06/11 03:43:16, 0] nmbd/nmbd_incomingrequests.c😛rocess_name_refresh_request(180)
process_name_refresh_request: unicast name registration request received for name THUND$
[2001/06/11 03:43:16, 0] nmbd/nmbd_incomingrequests.c😛rocess_name_refresh_request(181)
Error - should be sent to WINS server
[2001/06/11 03:43:16, 0] nmbd/nmbd_incomingrequests.c😛rocess_name_refresh_request(180)
process_name_refresh_request: unicast name registration request received for name THUND$
[2001/06/11 03:43:16, 0] nmbd/nmbd_incomingrequests.c😛rocess_name_refresh_request(181)
Error - should be sent to WINS server

 

[n0cmonkey]

nmb is the second half of samba (smbd and nmbd). It does netbios name resolutions I think.

 

[smp]

Thanks again n0c