[Samba] joining a domain with KB828741

[SEGUIN Marc - NTR]

Hello,

I have problems with my Samba servers.
The PDC in the Windows domain is a NT4 and has the patch KB828741 installed
on it.

1st server : HP-UX 10.20 with Samba 2.2.8a
------------
        workgroup = FR-MON
        netbios name = TIMIX
        security = domain
        encrypt passwords = Yes
        password server = *

All shares are OK when accessed from Windows workstations.
But from the Unix server, I get :

timix # smbclient -L localhost -U%
added interface ip=10.58.80.32 bcast=10.58.95.255 nmask=255.255.240.0
Domain=[FR-MON] OS=[Unix] Server=[Samba 2.2.8a]
tree connect failed: Call returned zero bytes (EOF)
------------------

2nd server : HP-UX 10.20 with Samba 2.2.8a
------------
        workgroup = FR-MON
        netbios name = HAWKING
        security = domain
        encrypt passwords = Yes
        password server = *
It worked fine (and perhaps with the same problem as above)

Because I need to migrate the Unix server to a domain with Active Directory,
I installed Samba 3.0.4 and tested it inside the same old domain. (I wanted
to change the domain when everything'll be OK in this one)

I did :
hawking # net join -S monnet01 -Uadmin_mon
[2004/05/27 17:25:54, 0] param/loadparm.c:map_parameter(2420)
  Unknown parameter encountered: "read size"
[2004/05/27 17:25:54, 0] param/loadparm.c:lp_do_parameter(3110)
  Ignoring unknown parameter "read size"
Password:
Joined domain FR-MON.

hawking # /sbin/init.d/samba start
(daemons well started)

hawking # /usr/local/samba/bin/smbclient -L localhost -U%
Unknown parameter encountered: "read size"
Ignoring unknown parameter "read size"
session setup failed: NT_STATUS_LOGON_FAILURE

And shares are accessible, but read/write permissions not respected. I can
access a share only if it is with "guest ok=yes".


So I tested Samba 2.2.9 :
hawking # /usr/local/samba/bin/smbpasswd -j FR-MON -r monnet01 -Uadmin_mon

Password: 
Joined domain FR-MON.
hawking # /sbin/init.d/samba start

hawking # /usr/local/samba/bin/smbclient -L localhost -U%
added interface ip=10.58.80.23 bcast=10.58.95.255 nmask=255.255.240.0
Domain=[FR-MON] OS=[Unix] Server=[Samba 2.2.9]
tree connect failed: NT_STATUS_WRONG_PASSWORD

Acess rights to Samba shares impossible.

--------------------------------------
I then removed KB828741 from the PDC.
--------------------------------------

I tested again Samba 3.0.4 : same result as first test.
I tested Samba 2.2.9 : everything OK.

-----------------------------------
I re-installed KB828741 on the PDC.
-----------------------------------

Shares with Samba 2.2.9 are still OK.
But I still have :

hawking # /usr/local/samba/bin/smbclient -L localhost -U%
added interface ip=10.58.80.23 bcast=10.58.95.255 nmask=255.255.240.0
Domain=[FR-MON] OS=[Unix] Server=[Samba 2.2.9]
tree connect failed: NT_STATUS_WRONG_PASSWORD

So now, I can't execute a new smbpasswd or "net join" to test another
version because I am convinced that I won't be able to re-established this
working version without to remove patch KB... (and I can't remove it, I am
not administrator of the Windows domain)

Is there a problem in my tests ?
(I used the same smb.conf in all tests)

Is it a bug ?
(i want to ask to you before sending a mail to Samba team)

Is it possible to run a 2nd version of Samba (with another smb.conf and
another NetBios name) on the same server, in order to test Samba 3.0.4 ?

thanks
Marc.

--
Marc Seguin
AtosOrigin - NIS
marc.seguin at atosorigin.com
+33(0)1 4614 5937