svn commit: samba r6296 - in branches/SAMBA_3_0/source/nsswitch: .

[jerry at samba.org]

Author: jerry
Date: 2005-04-11 19:41:47 +0000 (Mon, 11 Apr 2005)
New Revision: 6296

WebSVN: http://websvn.samba.org/cgi-bin/viewcvs.cgi?view=rev&root=samba&rev=6296

Log:
add message about known interoperability issue with Windows 2003 SP1 DCs
Modified:
   branches/SAMBA_3_0/source/nsswitch/winbindd_cm.c


Changeset:
Modified: branches/SAMBA_3_0/source/nsswitch/winbindd_cm.c
===================================================================
--- branches/SAMBA_3_0/source/nsswitch/winbindd_cm.c	2005-04-11 13:28:22 UTC (rev 6295)
+++ branches/SAMBA_3_0/source/nsswitch/winbindd_cm.c	2005-04-11 19:41:47 UTC (rev 6296)
@@ -1021,6 +1021,16 @@
 			cli_shutdown(conn->cli);
 			DLIST_REMOVE(cm_conns, conn);
 			SAFE_FREE(conn);
+
+			/* log a message for possible Windows 2003 SP1 DC's */
+			if ( NT_STATUS_EQUAL(result,NT_STATUS_ACCESS_DENIED) && (lp_security() == SEC_DOMAIN) ) {
+				DEBUG(0,("samr_connect() received NT_STATUS_ACCESS_DENIED.  If you are connecting \n"));
+				DEBUGADD(0,("to a Windows 2003 SP1 DC, this is a known issue.  There are two current \n"));
+				DEBUGADD(0,("workarounds:\n"));
+				DEBUGADD(0,("(a) Move your configuration to security = ads, or\n"));
+				DEBUGADD(0,("(b) set 'client schannel = no' in smb.conf and use 'wbinfo --set-auth-user'\n"));
+				DEBUGADD(0,("    to define the credentials when connecting to the DC\n"));
+			}
 			
 			return result;
 		}