[Samba] Issues with domain auth

2003-03-04 Thread Siebert, Aaron
Ver smb 2.2.7a

Managers, I am having trouble configuring samba as a domain member
authenticating to a win2k domain controller. All other aspects seem to
be functioning but samba is generating a log event when attempting to
connect to the password server as follows.
Machine NDEVDC1 rejected the tconX on the IPC$ share. Error as follows:
NT_STATUS_ACCESS_DENIED

Any help is appreciated. 

Aaron Siebert
IT Systems Engineer Nagrastar
w 303-706-5492
f 303-706-5719
[EMAIL PROTECTED] 
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Issues with domain auth

2003-03-04 Thread Andrew Bartlett
On Wed, 2003-03-05 at 09:40, Siebert, Aaron wrote:
 Ver smb 2.2.7a
 
 Managers, I am having trouble configuring samba as a domain member
 authenticating to a win2k domain controller. All other aspects seem to
 be functioning but samba is generating a log event when attempting to
 connect to the password server as follows.
 Machine NDEVDC1 rejected the tconX on the IPC$ share. Error as follows:
 NT_STATUS_ACCESS_DENIED
 
 Any help is appreciated. 

Your DC may have 'RestrictAnonymous = 2' set (an NT/Win2k registry
setting, also accessible as a group policy).  This would cause all
non-win2k domain members significant problems, as you then cannot access
the NETLOGON pipe required for domain authenticaion (among other
things).

Andrew Bartlett

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Issues with domain auth

2003-03-04 Thread Andrew Bartlett
On Wed, 2003-03-05 at 09:40, Siebert, Aaron wrote: 
 Ver smb 2.2.7a
 
 Managers, I am having trouble configuring samba as a domain member
 authenticating to a win2k domain controller. All other aspects seem to
 be functioning but samba is generating a log event when attempting to
 connect to the password server as follows.
 Machine NDEVDC1 rejected the tconX on the IPC$ share. Error as follows:
 NT_STATUS_ACCESS_DENIED
 
 Any help is appreciated. 
Your DC may have 'RestrictAnonymous = 2' set (an NT/Win2k registry
setting, also accessible as a group policy).  This would cause all
non-win2k domain members significant problems, as you then cannot access
the NETLOGON pipe required for domain authenticaion (among other
things). 

Andrew Bartlett 

-- 
Andrew Bartlett [EMAIL PROTECTED]
Manager, Authentication Subsystems, Samba Team  [EMAIL PROTECTED]
Student Network Administrator, Hawker College   [EMAIL PROTECTED]
http://samba.org http://build.samba.org http://hawkerc.net


signature.asc
Description: This is a digitally signed message part
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba