[Samba] Samba 2.2.8 is failing on change machine account password

[Eric Boehm]

On Fri, Mar 28, 2003 at 10:00:47PM +1100, Andrew Bartlett wrote:
>>>>> "Andrew" == Andrew Bartlett <abartlet at samba.org> writes:

    Andrew> On Fri, 2003-03-28 at 19:44, Hansjoerg Maurer wrote:

    Andrew> If you run 'smbpasswd -t' it should do it on demand.

That doesn't seem to work

smbpasswd -t AMERICASE
2003/03/28 07:40:32 : change_trust_account_password: Failed to change password for domain AMERICASE.

I do have a debug level 10 log of the attempt but there really isn't
much more information in it. I really do think this might be a bug. If
anyone has been able to get this to work, I would appreciate hearing
about it. If there are other steps I can take to help debug/fix this,
I am willing to take those steps.

Doesn't this present a potential security issue if the machine
password never changes?

[2003/03/27 15:33:15, 5, pid=25400] lib/util.c:(291)
  smb_bcc=0
[2003/03/27 15:33:15, 6, pid=25400] lib/util_sock.c:(518)
  write_socket(10,39)
[2003/03/27 15:33:15, 6, pid=25400] lib/util_sock.c:(521)
  write_socket(10,39) wrote 39
[2003/03/27 15:34:15, 3, pid=25400] smbd/sec_ctx.c:(329)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2003/03/27 15:34:15, 5, pid=25400] smbd/uid.c:(217)
  change_to_root_user: now uid=(0,0) gid=(0,0)
[2003/03/27 15:34:15, 10, pid=25400] smbd/process.c:(1137)
  timeout_processing: checking to see if machine account password need changing.
[2003/03/27 15:34:15, 10, pid=25400] smbd/process.c:(1167)
  timeout_processing: machine account password last change time = (1046645657) Sun, 02 Mar 2003 17:54:17 EST.
[2003/03/27 15:34:15, 0, pid=25400] rpc_client/cli_trust.c:(46)
  domain_client_validate: unable to fetch domain sid.
[2003/03/27 15:34:15, 0, pid=25400] rpc_client/cli_trust.c:(46)
  domain_client_validate: unable to fetch domain sid.
[2003/03/27 15:34:15, 0, pid=25400] rpc_client/cli_trust.c:(46)
  domain_client_validate: unable to fetch domain sid.
[2003/03/27 15:34:15, 0, pid=25400] rpc_client/cli_trust.c:(248)
  2003/03/27 15:34:15 : change_trust_account_password: Failed to change password for domain AMERICASE.
[2003/03/27 15:34:20, 10, pid=25400] lib/util_sock.c:(559)
  got smb length of 35
[2003/03/27 15:34:20, 6, pid=25400] smbd/process.c:(845)
  got message type 0x0 of len 0x23
[2003/03/27 15:34:20, 3, pid=25400] smbd/process.c:(846)
  Transaction 15 of length 39
[2003/03/27 15:34:20, 5, pid=25400] lib/util.c:(275)
  size=35
  smb_com=0x71
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=24
  smb_flg2=18439


-- 
Eric M. Boehm                  /"\  ASCII Ribbon Campaign
boehm at nortelnetworks.com       \ /  No HTML or RTF in mail
                                X   No proprietary word-processing
Respect Open Standards         / \  files in mail