Machine Account is Inaccessible (1.9.19-prealpha)

Andrew Perrin - Demography aperrin at demog.Berkeley.EDU
Wed Apr 22 16:17:30 GMT 1998


No dice, I'm afraid -- I changed the netbios name back to boserup (both
explicitly and just by commenting out the netbios name line in smb.conf)
and got the same result; if anyone's interested, the new log is in
http://demog.berkeley.edu/~aperrin/samba.join-failure2.log .  Per other
requests, I'm posting here (1) the KITAGAWA$ line from smbpasswd; (2)
the smb.conf file; and (3) browse.dat, which shows that the SANDBOX
domain is served by BOSERUP. NOTE: the other issue I posted yesterday --
smbpasswd
the program reporting unable to open smbpasswd the file on all operations
except the first one -- seems like it could be related (seems that way to
me, at least).  Has anybody else run into this?

(1) KITAGAWA$ line from smbpasswd:
KITAGAWA$:777001:49BCCAA45054D4057584248B8D2C9F9E:4735AC61CC09367750946E6ADC840FA4:[W]:LCT-353D2A0A:

(2) smb.conf:
#@boserup:/usr/LOCAL/samba/lib>cat smb.conf 
[global]
        workgroup = SANDBOX
;       netbios name = SHOVEL
        smbrun = /usr/LOCAL/samba/bin/smbrun
        lock dir = /usr/LOCAL/samba/var/locks
        debug level = 10
        log file = /var/log/samba.%m.log
        wins support = no
        os level = 100
        preferred master = yes
        load printers = no
        hide dot files = no
        revalidate = yes
        printing = bsd
        default service = homes
        encrypt passwords = yes
        domain logons = yes
        domain sid =  S-1-5-21-123-456-789
;       security = share

[homes]
        guest ok = no
        read only = no
        browseable = yes
        wide links = yes
        printable = no
        create mask = 0775
        Comment = Home Directory (%U)

[test]
        guest ok = no
        read only = no
        browseable = yes
        wide links = yes
        printable = no
        path = /usr/LOCAL/samba-test
        Comment = Sandbox

(3) browse.dat:
#@boserup:/usr/LOCAL/samba/var/locks>cat browse.dat 
"SANDBOX"                 c0001000 "BOSERUP"                     "SANDBOX"
"BOSERUP"                 40049b0b "Samba 1.9.19-prealpha"       "SANDBOX"

---------------------------------------------------------------------
Andrew J. Perrin - aperrin at demog.berkeley.edu - NT/Unix Admin/Support
Department of Demography    -    University of California at Berkeley
2232 Piedmont Avenue #2120  -    Berkeley, California, 94720-2120 USA
http://demog.berkeley.edu/~aperrin --------------------------SEIU1199

On Wed, 22 Apr 1998, Gerald Carter wrote:

> Andrew Perrin - Demography wrote:
> > 
> > I'm consistently getting "The machine account does not exist or is
> > inaccessible" errors when trying to join the domain.  There is a 
> > machine password line in ~samba/private; it's for KITAGAWA$ (the 
> > client's name is kitagawa), password kitagawa, and it's in /etc/passwd 
> > as well.
> > 
> > Domain name is SANDBOX
> > Server is Netbios Name SHOVEL, DNS name BOSERUP
> > Client is Netbios & DNS name KITAGAWA
> > 
> 
> I think this is the problem.  In the three files 
> 
> 	source/lib/rpc/server/srv_wkssvc.c:create_wks_info_100()
> 	source/lib/rpc/server/srv_srvsvc.c:srv_reply_net_srv_get_info()
> 	source/lib/rpc/server/srv_netlog.c:api_net_sam_logon()
> 
> There is a call which sets the name returned to be the DNS name.  Since
> the DNS name and NetBIOS name are different, this breaks things.  I my
> case, I was running a second samba server acting as the PDC.  The login
> script would not run because it was trying to get a reponse from the
> server on the primary interface.
> 
> You can either try changing the NetBIOS name to the DNS name.  Or
> comment out the call to get_myname(myname, NULL) in the 3 functions
> listed above.  Since myname is a global variable that should already
> have the NetBIOS name in it, commenting out these calls should be of no
> consequence.  In fact, they probably should not be there at all unless
> the myname string is empty.
> 
> This has been reported to samba bugs.
> 
> [snip]
> api_rpc_command: api_srvsvc_rpc op 0x15 - api_rpc_command:
> SRV_NET_SRV_GET_INFO
> 000018 srv_io_q_net_srv_get_info 
>     fcd10 ptr_srv_name  : 0102f194
>     00001c smb_io_unistr2 
>         fcd10 uni_max_len: 00000009
>         fcd10 undoc      : 00000000
>         fcd10 uni_str_len: 00000009
>         fcd10 buffer     : .\.\.S.H.O.V.E.L..
>     fcd10 switch_value  : 00000065
> srv_net_srv_get_info: 864
> make_srv_info_101
> struni2: 62 6f 73 65 72 75 70 
> struni2: 53 61 6d 62 61 20 31 2e 39 2e 31 39 2d 70 72 65 61 6c 70 68 61 
> make_srv_r_net_srv_get_info
> 000000 srv_io_r_net_srv_get_info 
>     000000 srv_io_info_ctr ctr
>         fd5d0 switch_value: 00000065
>         fd5d0 ptr_srv_ctr : 00000001
>         000008 srv_io_info_101 sv101
>             fd5d0 platform_id : 000001f4
>             fd5d0 ptr_name    : 00000001
>             fd5d0 ver_major   : 00000005
>             fd5d0 ver_minor   : 00000004
>             fd5d0 srv_type    : 0004100b
>             fd5d0 ptr_comment : 00000001
>             000020 smb_io_unistr2 uni_name    
>                 fd5d0 uni_max_len: 00000008
>                 fd5d0 undoc      : 00000000
>                 fd5d0 uni_str_len: 00000008
>                 fd5d0 buffer     : .b.o.s.e.r.u.p..
>                                    ^^^^^^^^^^^^^^^
>             00003c smb_io_unistr2 uni_comment 
>                 fd5d0 uni_max_len: 00000016
>                 fd5d0 undoc      : 00000000
>                 fd5d0 uni_str_len: 00000016
>                 fd5d0 buffer     : .S.a.m.b.a.
> 1...9...1.9.-.p.r.e.a.l.p.h.a..
>     fd5d0 status      : 00000000
> [snip]
> 
> 
> Let me know if this fixes things.
> j-
> ________________________________________________________________________
>                             Gerald ( Jerry ) Carter	
> Engineering Network Services                           Auburn University 
> jerry at eng.auburn.edu             http://www.eng.auburn.edu/users/cartegw
> 
>        "...a hundred billion castaways looking for a home."
>                                   - Sting "Message in a Bottle" ( 1979 )
> 



More information about the samba-ntdom mailing list