Gerald Carter wrote:
You've got Windows 2000 SP4 SR1 installed don't you? The only current fix is to either set 'client schannel = no' in smb.conf or to just disable schannel connections oln the SAMR pipe in nsswitch/winbindd_cm.c.
Is it possible, that with 3.0.20rc1 it is necessarily to set 'client schannel = no' in smb.conf to properly join an mixed mode W2K SP4 (not SR1) AD domain with
net rpc join even if winbind is not used? A user of 3.0.20rc1 wrote: eisfair # /usr/bin/net rpc join -d 3 -U "Administrator"%"***" -S "***" -w "***" [2005/08/02 16:27:48, 3] param/loadparm.c:lp_load(4082) lp_load: refreshing parameters [2005/08/02 16:27:48, 3] param/loadparm.c:init_globals(1366) Initialising global parameters [2005/08/02 16:27:48, 3] param/params.c:pm_process(574) params.c:pm_process() - Processing configuration file "/etc/smb.conf" [2005/08/02 16:27:48, 3] param/loadparm.c:do_section(3542) Processing section "[global]" [2005/08/02 16:27:48, 2] lib/interface.c:add_interface(81) added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0 [2005/08/02 16:27:48, 2] lib/interface.c:add_interface(81) added interface ip=192.168.100.253 bcast=192.168.100.255 nmask=255.255.255.0 [2005/08/02 16:27:48, 3] libsmb/namequery.c:resolve_wins(752) resolve_wins: Attempting wins lookup for name Serv01<0x20> [2005/08/02 16:27:48, 3] libsmb/namequery.c:resolve_wins(791) resolve_wins: using WINS server 192.168.100.1 and tag '*' [2005/08/02 16:27:48, 2] libsmb/namequery.c:name_query(492) Got a positive name query response from 192.168.100.1 ( 192.168.100.111 ) [2005/08/02 16:27:48, 3] libsmb/cliconnect.c:cli_start_connection(1407) Connecting to host=Serv01 [2005/08/02 16:27:48, 3] lib/util_sock.c:open_socket_out(867) Connecting to 192.168.100.111 at port 445 [2005/08/02 16:27:49, 3] rpc_client/cli_netlogon.c:cli_nt_setup_creds(394) cli_nt_setup_creds: auth2 challenge failed NT_STATUS_ACCESS_DENIED [2005/08/02 16:27:49, 3] libsmb/trusts_util.c:just_change_the_password(43) just_change_the_password: unable to setup creds (NT_STATUS_ACCESS_DENIED)! [2005/08/02 16:27:49, 1] utils/net_rpc.c:run_rpc_command(140) rpc command function failed! (NT_STATUS_ACCESS_DENIED) [2005/08/02 16:27:49, 3] libsmb/cliconnect.c:cli_start_connection(1407) Connecting to host=Serv01 [2005/08/02 16:27:49, 3] lib/util_sock.c:open_socket_out(867) Connecting to 192.168.100.111 at port 445 [2005/08/02 16:27:49, 3] libsmb/cliconnect.c:cli_session_setup_spnego(709) Doing spnego session setup (blob length=109) [2005/08/02 16:27:49, 3] libsmb/cliconnect.c:cli_session_setup_spnego(734) got OID=1 2 840 48018 1 2 2 [2005/08/02 16:27:49, 3] libsmb/cliconnect.c:cli_session_setup_spnego(734) got OID=1 2 840 113554 1 2 2 [2005/08/02 16:27:49, 3] libsmb/cliconnect.c:cli_session_setup_spnego(734) got OID=1 2 840 113554 1 2 2 3 [2005/08/02 16:27:49, 3] libsmb/cliconnect.c:cli_session_setup_spnego(734) got OID=1 3 6 1 4 1 311 2 2 10 [2005/08/02 16:27:49, 3] libsmb/cliconnect.c:cli_session_setup_spnego(743) got [EMAIL PROTECTED] [2005/08/02 16:27:49, 3] libsmb/ntlmssp.c:ntlmssp_client_challenge(869) Got challenge flags: [2005/08/02 16:27:49, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0x60890215 [2005/08/02 16:27:49, 3] libsmb/ntlmssp.c:ntlmssp_client_challenge(891) NTLMSSP: Set final flags: [2005/08/02 16:27:49, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0x60080215 [2005/08/02 16:27:49, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(319) NTLMSSP Sign/Seal - Initialising with flags: [2005/08/02 16:27:49, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62) Got NTLMSSP neg_flags=0x60080215 [2005/08/02 16:27:49, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181) lsa_io_sec_qos: length c does not match size 8 [2005/08/02 16:27:49, 3] rpc_client/cli_pipe.c:rpc_api_pipe(476) Bind NACK received on pipe 4010! [2005/08/02 16:27:49, 2] rpc_client/cli_pipe.c:cli_nt_session_open(1507) cli_nt_session_open: rpc bind to \PIPE\NETLOGON failed [2005/08/02 16:27:49, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(318) Error domain join verification (reused connection): NT_STATUS_UNSUCCESSFUL Unable to join domain ***. [2005/08/02 16:27:49, 2] utils/net.c:main(873) return code = 1 der tom -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
