[Samba] Re: Unable to join Samba server to Win2k domain

2003-12-21 Thread Henrik Larsson 
 Attached is my smb.conf and krb5.conf

 The debug log files are too big to attach here but i have uploaded them to
a
 webserver.

Since no one responded, would it be ok to file this as a bug report?

Best regards Henrik



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Unable to join Samba server to Win2k domain

2003-12-18 Thread Henrik Larsson 
 It will be good if you can paste your krb5.conf and smb.conf with the
 mail, so that we can see where you have gone wrong.
 But just to double check some basic issues:

Hi Ivan

Attached is my smb.conf and krb5.conf

The debug log files are too big to attach here but i have uploaded them to a
webserver.

net join ads:
http://www.larsson.as/filesnet-ads-join.txt

net join before a computer account is created in the AD:
http://www.larsson.as/files/net-join-noaccount.txt

net join after a computer account is create in the AD:
http://www.larsson.as/files/net-join-account.txt


Best regards Henrik


begin 666 krb5.conf
M6VQO9V=I;[EMAIL PROTECTED]5F875L= ]($9)3$4Z+W9AB]L;VO:W)B-6QI8G,N
M;]G#0H@:V1C([EMAIL PROTECTED],13HO=F%R+VQO9R]KF(U:V1C+FQO9PT*(%D;6EN
M7W-EG9EB ]($9)3$4Z+W9AB]L;VO:V%D;6EN9YL;V-@T*6VQI8F1E
M9F%U;'1S70T*('1I8VME=%]L:69E=EM92 ](#(T,# [EMAIL PROTECTED]5F875L=%]R
M96%L;2 ]($Y75Y$2PT*(1E9F%U;'1?971Y5S([EMAIL PROTECTED]5S+6-B8RUCF,@
M95S+6-B8RUM9#4-B!D969A=6QT7V5T7!EU]D97,@/2!D97,M8V)C+6-R
M8R!D97,M8V)C+6UD-2 -B!D969A=6QT7W1GU]E;F-T7!ER ](1ERUC
M8F,M8W)C(1ERUC8F,M;[EMAIL PROTECTED]5F875L=%]T:W1?96YC='EP97,@/2!D
M97,M8V)C+6-R8R!D97,M8V)C+6UD-0T*(1NU]L;V]K=7!?F5A;T@/2!F
M86QS90T*(1NU]L;V]K=7!?:V1C([EMAIL PROTECTED]V4-@T*6W)E86QMUT-B!.
M5U0N1$L@/2![#0H@(MD8R ]('9EF1I+FYW=YD:SHX. T*('T-@T*(R!%
M6$%-4$Q%+D-/32 ]('L-B,@(MD8R ](MEF)EF]S+F5X86UP;4N8V]M
[EMAIL PROTECTED](!A9UI;E]S97)V97(@/2!K97)B97)ORYE%MQE+F-O;3HW
M-#D-B,@(1E9F%U;'1?9]M86EN([EMAIL PROTECTED];7!L92YC;VT-B-]#0H-EMD
M;VUA:6Y?F5A;U=#0HN;G=T+F1K([EMAIL PROTECTED]L@/2!.5U0N
M1$L-B -B,@+F5X86UP;4N8V]M([EMAIL PROTECTED],12Y#3TT-B,@97AA;7!L
M92YC;VT@/2!%6$%-4$Q%+D-/30T*#0I;:V1C70T*('!R;V9I;4@/2 O=F%R
M+VMEF)EF]S+VMR8C5K9,O:V1C+F-O;F8-@T*6V%P1E9F%U;'1S70T*
M('!A;2 ]('L-B @(1E8G5G([EMAIL PROTECTED]V4-B @('1I8VME=%]L:69E=EM
M92 ](#,V,# P#0H@(!R96YE=U]L:69E=EM92 ](#,V,# P#0H@(!F;W)W
M87)D86)L92 ]('1R=64-B @(MR8C1?8V]N=F5R= ](9A;'[EMAIL PROTECTED]
`
end

begin 666 smb.conf
M(R!4:ES(ES('1H92!M86EN(%-A;6)A(-O;F9I9W5R871I;[EMAIL PROTECTED]@
M66]U('-H;W5L9!R96%D('1H90T*(R!S;6([EMAIL PROTECTED]@%G
M92!I;B!OF1EB!T;R!U;F1EG-T86YD('1H92!O'1I;VYS(QIW1E9 T*
M(R!H97)E+B!386UB82!H87,@82!H=6=E(YU;6)EB!O9B!C;VYF:6=UF%B
M;4@;W!T:6]NR H5R:%PR!T;V\-B,@;6%N2$I(UOW0@;[EMAIL PROTECTED]
M8V@@87)E(YO=!S:]W;B!I;B!T:ES(5X86UP;4-B,-B,@06YY(QI
M;[EMAIL PROTECTED]@@W1AG1S('=I=@@82 [(AS96UI+6-O;]N*2!OB!A(,@
M*AA[EMAIL PROTECTED]( T*(R!IR!A(-O;6UE;[EMAIL PROTECTED](ES(EG;F]R960N($EN('1H
M:7,@97AA;7!L92!W92!W:6QL('5S92!A(,-B,@9F]R(-O;6UE;G1R2!A
M;[EMAIL PROTECTED] [(9OB!P87)TR!O9B!T:[EMAIL PROTECTED](9I;[EMAIL 
PROTECTED]AA=!Y;W4-
MB,@;6%Y('=IV@@=[EMAIL PROTECTED]($Y/5$4Z(%=H96YE=F5R('EO
M=2!M;[EMAIL PROTECTED]AIR!F:6QE('EO=2!S:]U;0@G5N('1H92!C;VUM86YD
M()T97-T%R;2(-B,@=[EMAIL PROTECTED]@=AA=!Y;W4@:%V92!N;W0@;6%D
M92!A;[EMAIL PROTECTED]:6,@WEN=%C=EC(5RF]R[EMAIL PROTECTED]/3T]/3T]/3T]
M/3T]/3T]/3T]/3T]/[EMAIL PROTECTED](%-E='1I;F=S(#T]/3T]/3T]/3T]/3T]
M/3T]/3T]/3T]/3T]/3T]/3T]/3T]/3T-EMG;]B86Q=#0HC(YE=)I;W,@
M;F%M90T*( @;F5T8FEOR!N86UE([EMAIL PROTECTED]('=OFMGF]U
M ]($Y4+41O;6%I;BU.86UE(]R(%=OFMGF]UU.86UE#0H@(!W;W)K
M9W)O=7 @/[EMAIL PROTECTED]B,@V5R=F5R('-TFEN9R!IR!T:[EMAIL PROTECTED]:79A
M;5N=!O9B!T:[EMAIL PROTECTED]@15S8W)I'1I;[EMAIL PROTECTED];0-B @('-EG9EB!S
M=')I;F@/2 -@T*(R!S97!AF%T92!D;VUA:[EMAIL PROTECTED]('5S97)N86UE('=I
M=@@)RLG+!L:6ME($1/34%)3BMUV5R;F%M92 -G=I;F)I;F0@V5P87)A
M=]R([EMAIL PROTECTED] -@T*(R!U[EMAIL PROTECTED]R!FF]M(#$P,# P('1O(#(P,# P(9O
MB!D;VUA:[EMAIL PROTECTED]G,@#0II9UA!U:60@/2 Q,# P,TR,# P, -@T*
M(R!U[EMAIL PROTECTED]R!FF]M(#$P,# P('1O(#(P,# P(9OB!D;VUA:[EMAIL PROTECTED])O
M=7!S( T*:61M87 @9VED(#T@,3 P,# M,C P,# @#0H-B,@86QL;W@96YU
M;65R871I;VX@;[EMAIL PROTECTED]!UV5RR!A;[EMAIL PROTECTED])O=7!S( T*=VEN8FEN
M9!E;G5M('5S97)S(#T@65S( T*=VEN8FEN9!E;G5M(=R;W5PR ]('EE
MR -@T*(R!G:79E('=I;F)I;[EMAIL PROTECTED]G,@82!R96%L('-H96QL(AO;FQY
M(YE961E9!I9B!T:5Y([EMAIL PROTECTED]5L;F5T(%C8V5S[EMAIL PROTECTED];%T
M92!H;VUE9ER([EMAIL PROTECTED];64O=VEN;G0O)40O)[EMAIL PROTECTED];%T92!S:5L
M; ](]S8FEN+VYO;]G:6X-@T*#0HC(%1H:7,@;W!T:6]N(ES(EM]R
M=%N=!F;W(@V5C=7)I='DN($ET(%L;]WR!Y;[EMAIL PROTECTED]\@F5S=')I8W0-
MB,@8V]N;F5C=EO;G,@=\@;6%C:EN97,@=VAI8V@@87)E(]N('EO=7(@
M;]C86P@;F5T=V]R:[EMAIL PROTECTED]AE#0HC(9O;QO=VEN9R!E%MQE(')EW1R
M:6-TR!A8V-EW,@=[EMAIL PROTECTED]'=O($,@8VQAW,@;F5T=V]R:W,@86YD#0HC('1H
M92 B;]O)A8VLB(EN=[EMAIL PROTECTED](UO[EMAIL PROTECTED];7!L97,@;V8@
M=AE('-Y;G1A!S964-B,@=AE('-M8BYC;VYF(UA;B!P86=E#0H[( @
M:]S=',@86QL;W@/2 Q.3(N,38X+C$N(#$Y,[EMAIL PROTECTED],BX@,3([EMAIL PROTECTED]
M(EF('EO=2!W86YT('1O(%U=]M871I8V%L;'D@;]A9!Y;W5R('!R:6YT
M97(@;ES=!R871H97(-B,@=AA;B!S971T:6YG('[EMAIL PROTECTED] @:6YD:79I
M9'5A;QY('1H96X@6]U)VQL([EMAIL PROTECTED]AIPT*( @')I;G1C87 @;F%M
M92 ](]E=,O')I;G1C87 -B @(QO860@')I;G1EG,@/2!N;R -@T*
M(R!)=!S:]U;0@;F]T()E(YE8V5SV%R2!T;R!S5L;[EMAIL PROTECTED]AE
M('!R:6YT('-YW1E;2!T7!E('5N;5SPT*(R!Y;W5RR!IR!N;VXMW1A
M;F1AF0N($-UG)E;G1L2!S=7!P;W)T960@')I;G0@WES=5MR!I;F-L
[EMAIL PROTECTED](R!BV0L('-YW8L('!LP@;'!R;FL(%IP@:'!UP@6YX
M#0H[(

[Samba] Re: Unable to join Samba server to Win2k domain

2003-12-16 Thread Henrik Larsson 
 Anyone know what could cause all these problems or a straight solution how
 to solve them?

Upgraded to 3.0.1, and i still can't add my Samba server to the Windows 2000
domain. Same errors as described in my previous mail.

What information more than the one i supplied could be usefull if i should
add this as a bugreport?

Best regards Henrik



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Unable to join Samba server to Win2k domain

2003-12-13 Thread Henrik Larsson 
Dear Samba users.

I have tried to add my Samba server to a Win2k AD mixed mode domain for
several days. I have searched the Internet for information, but couldn't
find a solution. So I will try to describe my problems here.

I first tried to use security = ADS and add the Samba server as a native
member.

I have changed the settings in my krb5.conf and tested this with kinit:
-- cut
# kinit -V
Password for [EMAIL PROTECTED]:
Authenticated to Kerberos v5
-- cut

But when I try to add the server to the domain with the command net ads
join MEMBER -Uadministrator%password -d 10 I get the following error:
-- cut
[2003/12/13 23:30:00, 1] libsmb/clikrb5.c:ads_krb5_mk_req(269)
  krb5_cc_get_principal failed (No credentials cache found)
[2003/12/13 23:30:00, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(385)
  Got KRB5 session key of length 8
[2003/12/13 23:30:00, 1] utils/net_ads.c:ads_startup(181)
  ads_connect: Invalid credentials
[2003/12/13 23:30:00, 2] utils/net.c:main(759)
  return code = -1
-- cut

If i use a wrong password, I get a preauthentication failed so again the
kerberos part should be OK.

I then tried security = domain.

If I don't create a computer in the AD I get this error when running net
rpc join MEMBER -Uadministrator%password -d 10:
-- cut
[2003/12/13 23:27:40, 0] rpc_client/cli_pipe.c:rpc_api_pipe(424)
  cli_pipe: return critical error. Error was Call timed out: server did not
respond after 1 milliseconds
[2003/12/13 23:27:40, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(286)
  error setting trust account password: NT_STATUS_UNSUCCESSFUL
Unable to join domain DOMAIN.
[2003/12/13 23:27:40, 2] utils/net.c:main(759)
  return code = 1
-- cut

If I create a computer account and set it to allow pre Window 2000 computers
to use this account I get:
-- cut
[2003/12/13 23:29:28, 1] libsmb/cliconnect.c:cli_full_connection(1426)
  failed tcon_X with NT_STATUS_ACCESS_DENIED
[2003/12/13 23:29:28, 1] utils/net.c:connect_to_ipc_anonymous(179)
  Cannot connect to server (anonymously).  Error was NT_STATUS_ACCESS_DENIED
[2003/12/13 23:29:28, 6] lib/util_sock.c:write_socket(407)
  write_socket(5,45)
[2003/12/13 23:29:28, 6] lib/util_sock.c:write_socket(410)
  write_socket(5,45) wrote 45
[2003/12/13 23:29:28, 10]
lib/util_sock.c:read_smb_length_return_keepalive(463)
  got smb length of 35
[2003/12/13 23:29:28, 5] lib/util.c:show_msg(456)
[2003/12/13 23:29:28, 5] lib/util.c:show_msg(466)
  size=35
  smb_com=0x4
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=22538
  smb_pid=6905
  smb_uid=3
  smb_mid=28
  smt_wct=0
  smb_bcc=0
Unable to join domain DOMAIN.
-- cut

So as you can see, I haven't really succeed using any method.

Anyone know what could cause all these problems or a straight solution how
to solve them?


Best regards Henrik



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba