[cifs-protocol] RE: Microsoft Client tool expectatations

Hongwei Sun hongweis at microsoft.com
Mon Oct 13 19:29:44 GMT 2008


  I just want to check with you about the current status of the domain trust issue between Windows 2008 server and Samba4.   I know that you have made significant progresses during Interop Lab Event.   Please let me know whether I can close this case if you don't have any issue left.


Hongwei  Sun - Sr. Support Escalation Engineer
DSC Protocol  Team, Microsoft
hongweis at microsoft.com
Tel:  469-7757027 x 57027

-----Original Message-----
From: Andrew Bartlett [mailto:abartlet at samba.org]
Sent: Monday, September 08, 2008 7:22 AM
To: Interoperability Documentation Help
Cc: pfif at tridgell.net; cifs-protocol at samba.org
Subject: Microsoft Client tool expectatations

How do I determine what LDAP values a Microsoft client tool is expecting?

For example, with the attached patch against current GIT, I cannot make
windows 2008 join Samba4 as a 2-way, forest level trusted domain.   It
seems something is wrong with what we return to cn=partitions,cn=configuration,....

Similarly, against our current GIT tree, the Win2k3 admin pack on WinXP won't launch 'Active Directory Users and Computers' against Samba4.  The error seems to be in response to our return value for the cn=aggregate schema.

In both cases, I just have cryptic error messages.  How can I determine what these tools are expecting?

Attached please find network traces for both the 2008 server attempting to join the trust and a WinXP machine trying to open 'Active Directory Users and Computers'.

(keytab to follow in private mail)

The join fails with:  'unable to read the functional level of the forest' Cannot convert to/from the native DS datatype.

The ADUC launch fails with: 'unspecified error'.  (This used to work, before I 'fixed' some schema stuff).


Andrew Bartlett
Andrew Bartlett
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Red Hat Inc.

More information about the cifs-protocol mailing list