[Samba] wbinfo can't list users

[Thomas Bork]

Gerald Carter wrote:

> You've got Windows 2000 SP4 SR1 installed don't you?
> The only current fix is to either set 'client schannel = no'
> in smb.conf or to just disable schannel connections
> oln the SAMR pipe in nsswitch/winbindd_cm.c.

Is it possible, that with 3.0.20rc1 it is necessarily to set 'client 
schannel = no' in smb.conf to properly join an mixed mode W2K SP4 (not 
SR1) AD domain with

net rpc join

even if winbind is not used?


A user of 3.0.20rc1 wrote:


eisfair # /usr/bin/net rpc join -d 3 -U "Administrator"%"***" -S "***"
-w
  "***"
[2005/08/02 16:27:48, 3] param/loadparm.c:lp_load(4082)
   lp_load: refreshing parameters
[2005/08/02 16:27:48, 3] param/loadparm.c:init_globals(1366)
   Initialising global parameters
[2005/08/02 16:27:48, 3] param/params.c:pm_process(574)
   params.c:pm_process() - Processing configuration file
"/etc/smb.conf"
[2005/08/02 16:27:48, 3] param/loadparm.c:do_section(3542)
   Processing section "[global]"
[2005/08/02 16:27:48, 2] lib/interface.c:add_interface(81)
   added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0
[2005/08/02 16:27:48, 2] lib/interface.c:add_interface(81)
   added interface ip=192.168.100.253 bcast=192.168.100.255
nmask=255.255.255.0
[2005/08/02 16:27:48, 3] libsmb/namequery.c:resolve_wins(752)
   resolve_wins: Attempting wins lookup for name Serv01<0x20>
[2005/08/02 16:27:48, 3] libsmb/namequery.c:resolve_wins(791)
   resolve_wins: using WINS server 192.168.100.1 and tag '*'
[2005/08/02 16:27:48, 2] libsmb/namequery.c:name_query(492)
   Got a positive name query response from 192.168.100.1 (
192.168.100.111 )
[2005/08/02 16:27:48, 3]
libsmb/cliconnect.c:cli_start_connection(1407)
   Connecting to host=Serv01
[2005/08/02 16:27:48, 3] lib/util_sock.c:open_socket_out(867)
   Connecting to 192.168.100.111 at port 445
[2005/08/02 16:27:49, 3]
rpc_client/cli_netlogon.c:cli_nt_setup_creds(394)
   cli_nt_setup_creds: auth2 challenge failed NT_STATUS_ACCESS_DENIED
[2005/08/02 16:27:49, 3]
libsmb/trusts_util.c:just_change_the_password(43)
   just_change_the_password: unable to setup creds
(NT_STATUS_ACCESS_DENIED)!
[2005/08/02 16:27:49, 1] utils/net_rpc.c:run_rpc_command(140)
   rpc command function failed! (NT_STATUS_ACCESS_DENIED)
[2005/08/02 16:27:49, 3]
libsmb/cliconnect.c:cli_start_connection(1407)
   Connecting to host=Serv01
[2005/08/02 16:27:49, 3] lib/util_sock.c:open_socket_out(867)
   Connecting to 192.168.100.111 at port 445
[2005/08/02 16:27:49, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(709)
   Doing spnego session setup (blob length=109)
[2005/08/02 16:27:49, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(734)
   got OID=1 2 840 48018 1 2 2
[2005/08/02 16:27:49, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(734)
   got OID=1 2 840 113554 1 2 2
[2005/08/02 16:27:49, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(734)
   got OID=1 2 840 113554 1 2 2 3
[2005/08/02 16:27:49, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(734)
   got OID=1 3 6 1 4 1 311 2 2 10
[2005/08/02 16:27:49, 3]
libsmb/cliconnect.c:cli_session_setup_spnego(743)
   got principal=serv01$@***
[2005/08/02 16:27:49, 3]
libsmb/ntlmssp.c:ntlmssp_client_challenge(869)
   Got challenge flags:
[2005/08/02 16:27:49, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
   Got NTLMSSP neg_flags=0x60890215
[2005/08/02 16:27:49, 3]
libsmb/ntlmssp.c:ntlmssp_client_challenge(891)
   NTLMSSP: Set final flags:
[2005/08/02 16:27:49, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
   Got NTLMSSP neg_flags=0x60080215
[2005/08/02 16:27:49, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(319)
   NTLMSSP Sign/Seal - Initialising with flags:
[2005/08/02 16:27:49, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(62)
   Got NTLMSSP neg_flags=0x60080215
[2005/08/02 16:27:49, 3] rpc_parse/parse_lsa.c:lsa_io_sec_qos(181)
   lsa_io_sec_qos: length c does not match size 8
[2005/08/02 16:27:49, 3] rpc_client/cli_pipe.c:rpc_api_pipe(476)
   Bind NACK received on pipe 4010!
[2005/08/02 16:27:49, 2]
rpc_client/cli_pipe.c:cli_nt_session_open(1507)
   cli_nt_session_open: rpc bind to \PIPE\NETLOGON failed
[2005/08/02 16:27:49, 0]
utils/net_rpc_join.c:net_rpc_join_newstyle(318)
   Error domain join verification (reused connection):
NT_STATUS_UNSUCCESSFUL

Unable to join domain ***.
[2005/08/02 16:27:49, 2] utils/net.c:main(873)
   return code = 1



der tom