[Samba 4] Access to GPO failed
Son Nguyen
sonnh at saigontech.edu.vn
Wed Dec 10 03:29:19 GMT 2008
Wes Deviers wrote:
> On Tuesday 09 December 2008 16:50:04 Andrew Bartlett wrote:
>
>>> * *Got user=[] domain=[] workstation=[SRV1] len1=1 len2=0*
>>>
>>> * *auth_check_password_recv: anonymous authentication for user [NT
>>> AUTHORITY\ANONYMOUS LOGON] succeeded*
>>>
>>> Please let me know if you have any theory about this problem.
>>>
>> These things can be a real challenge to debug, but I would start by
>> taking a network trace with wireshark, and see what was the last error
>> before the client message was.
>>
>> Andrew Bartlett
>>
>
>
> In the past, I've had the same problem since at Alpha4 or so. What seems to
> be the problem (at least for me) is when it switches from accessing the server
> as named (\\felix.fake.domain.local) to trying to access it via the domain to
> pull the GPO (\\fake.domain.local) it fails about 90% of the time. Meaning,
> that if I keep pushing the "Edit Group Policy" button over and over, it will
> eventually work once. And then, when I go to save it, if I try to save the
> changes over and over it will eventually work as well.
>
> I can get into the GP-UID portion of the tree every time, but if I try to edit
> the policy file by hand (using Notepad), it fails about 90% of the time. If I
> traverse the tree using the machine name and NOT the domain, it works every
> time with no problems (as in, \\felix.fake.domain.local\...\{uuid}\... lets me
> edit and save the file correctly) Of course, that doesn't help since all of
> the GP tools use the domain name and not the machine, so they all fail
> regardless.
>
> I don't have the patience to try rebooting XP clients enough times to see if
> the GPO will get -pulled- 10% of the time, but then I stopped trying entirely
> about a month ago.
>
> Best!
>
> Wes
>
>
Hi,
The enclose is the capture file running at samba4 server. This is
more information about network configuration:
* Samba4 server (smbd version 4.0.0alpha6-GIT-6e4cc12): 192.168.9.135
* Windows 2003: 192.168.9.131
* Capture before edit the Default Domain Policy untill error message
appear.
I'm looking forward to your response
Son Nguyen
-------------- next part --------------
A non-text attachment was scrubbed...
Name: capture
Type: application/octet-stream
Size: 14897 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20081210/f9f33560/capture.obj
More information about the samba-technical
mailing list