[Samba] NetLogin error 5722 / Domain password server not available.

[Michael Bartosh]

When W2K clients try to access a samba server joined to the domain, we get a NETLOGIN 5722 event:

The session setup from the computer SAMBA failed to authenticate. The name of the account referenced in the security database is SAMBA$. The following error occured:
Access is denied.

The samba side of things is a bit more verbose (note error at bottom of page)

I've found numerous references to this error online, but no solutions. One post suggested re-joining the domain, which I've attempted- the join succeeds, but authentication still fails.

Join process:

a) Add pre-Win2K account with AD Users and computers
b) sudo smbpasswd -j EXAMPLE -r W2K -U Administrator%passwd
c) in smb.conf:
security = domain
password server = W2K


[2003/01/05 16:49:38, 3] /SourceCache/samba/samba-21/source/lib/util_sock.c:open_socket_out(830)
Connecting to 192.168.1.2 at port 445
[2003/01/05 16:49:38, 4] /SourceCache/samba/samba-21/source/rpc_client/cli_netlogon.c:cli_net_req_chal(221)
cli_net_req_chal: LSA Request Challenge from W2K to SAMBA: 965B45EE4F419A71
[2003/01/05 16:49:38, 4] /SourceCache/samba/samba-21/source/libsmb/credentials.c:cred_session_key(60)
cred_session_key
[2003/01/05 16:49:38, 4] /SourceCache/samba/samba-21/source/libsmb/credentials.c:cred_create(91)
cred_create
[2003/01/05 16:49:38, 4] /SourceCache/samba/samba-21/source/rpc_client/cli_netlogon.c:cli_net_auth2(132)
cli_net_auth2: srv:\\WI2K acct:SAMBA$ sc:2 mc: SAMBA chal B58AF439B186C221 neg: 1ff
[2003/01/05 16:49:38, 0] /SourceCache/samba/samba-21/source/rpc_client/cli_netlogon.c:cli_net_auth2(157)
cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
[2003/01/05 16:49:38, 0] /SourceCache/samba/samba-21/source/rpc_client/cli_login.c:cli_nt_setup_creds(74)
cli_nt_setup_creds: auth2 challenge failed
[2003/01/05 16:49:38, 0] /SourceCache/samba/samba-21/source/smbd/password.c:connect_to_domain_password_server(1340)
connect_to_domain_password_server: unable to setup the PDC credentials to machine W2K. Error was : NT_STATUS_OK.
[2003/01/05 16:49:38, 0] /SourceCache/samba/samba-21/source/smbd/password.c:domain_client_validate(1558)
domain_client_validate: Domain password server not available.
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba