I have a similar problem, except I get the error NT_STATUS_UNSUCCESSFUL checking the trust account password. Again downgrading to 3.0.2a worked fine. Looks like bit rot has creeped into the code between .2a and .3.
Tom -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Tom Dickson Sent: Friday, 7 May 2004 12:01 p.m. To: samba mailing list Subject: [Samba] Samba 3.0.3 breaks domain somehow. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 After upgrading from 3.0.2 to 3.0.3 in a Windows 2000 Native Domain environment, 9x clients can't connect and wbinfo -t doesn't work: bash-2.05a# wbinfo -t checking the trust secret via RPC calls failed error code was NT_STATUS_PIPE_NOT_AVAILABLE (0xc00000ac) Could not check secret Downgrading to 3.0.2 fixes this. I can get log files, but they don't seem to have anything very useful in them. Server: Windows 2000 Native Domain Client: Windows ME or Mac OS X smb.conf follows: #======================= Global Settings ===================================== [global] printcap name = /etc/printcap load printers = no log file = /var/log/samba/log.%m max log size = 50 encrypt passwords = yes socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 dns proxy = no passwd program = /usr/bin/passwd min password length = 3 logon path = "" # override some defaults enhanced browsing = no map archive = no max connections = 1000 max smbd processes = 1000 follow symlinks = no username map = /etc/samba/smbusers winbind separator = + winbind enum users = yes winbind enum groups = yes template shell = /sbin/nologin template homedir = /dev/null # # smbv3.0+ # create mask = 0700 directory mask = 0700 directory security mask = 0700 # map acl inherit = yes inherit permissions = yes inherit acls = yes force group = nobody #======================== Changable Global Settings ========================== ~ password server = WIN2KNATIVE ~ winbind uid = 10000-19999 ~ map to guest = never ~ security = ads ~ realm = NATIVEDOMAIN.LOCAL ~ domain logons = no ~ server string = ~ workgroup = NATIVEDOMAIN ~ winbind gid = 10000-19999 ~ netbios name = inlab ~ admin users = "@NATIVEDOMAIN.LOCAL+Domain Admins" [terabyte] ~ path = /mnt/H00/terabyte ~ comment = terabyte ~ valid users = ~ read only = no ~ available = yes ~ admin users = ! ~ write list = Thank you! More random output: bash-2.05a# wbinfo -t checking the trust secret via RPC calls failed error code was NT_STATUS_PIPE_NOT_AVAILABLE (0xc00000ac) Could not check secret bash-2.05a# wbinfo --get-auth-user NATIVEDOMAIN.LOCAL+nasadmin%nas bash-2.05a# wbinfo -a NATIVEDOMAIN.LOCAL+nasadmin%nas plaintext password authentication failed error code was NT_STATUS_PIPE_NOT_AVAILABLE (0xc00000ac) error messsage was: Named pipe not available Could not authenticate user NATIVEDOMAIN.LOCAL+nasadmin%nas with plaintext password challenge/response password authentication failed error code was NT_STATUS_PIPE_NOT_AVAILABLE (0xc00000ac) error messsage was: Named pipe not available Could not authenticate user NATIVEDOMAIN.LOCAL+nasadmin with challenge/response wbinfo -u works fine, and connections from the windows 2000 CLIENT works, also, so kerberos tickets seem to be happy times and dates: net time ; date Thu May 6 17:04:56 2004 Thu May 6 17:04:37 PDT 2004 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD4DBQFAmtHF2dxAfYNwANIRAomLAJdEM/PBdg8OA8m17gQP5QTIo5XtAKCNt6p7 wGxOx7PDN1WAVPNVbk5esg== =Cxcf -----END PGP SIGNATURE----- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
