Domain logon problems with 10.Mar.99 CVS source

[Stefan Walter]

Hi,

I have downloaded the current NT Domain Controller source today. I
managed to get it to work as a PDC according to the NTDOM FAQ and could
join a NT4 workstation with SP4 to the domain of the Samba PDC.

However when I try to log on to the domain as a user I get a dialog
containing this message:

  The system cannot log you on to this domain because the system's computer
  account in its primary domain is missing or the password on that account
  is incorrect. 

I can log in as that user on the Samba PDC when using smbclient. 
I had a look at the logfile with debug level set to 20 and found this 
only few lines before the end of the log file (seemingly what caused NT to
abort the login):

[1999/03/10 18:14:57, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(387)
  search for pipe pnum=7004
[1999/03/10 18:14:57, 1] smbd/ipc.c:api_fd_reply(3280)
  api_fd_reply: INVALID PIPE HANDLE: 7004
[1999/03/10 18:14:57, 3] smbd/ipc.c:api_no_reply(3198)
  Unsupported API fd command

If I 'grep' the log file for 7004 I get this:

  Opened pipe NETLOGON with handle 7004 (pipes_open=1)
  open pipes: name NETLOGON pnum=7004
  smb_vwv[15]=28676 (0x7004)
  search for pipe pnum=7004
  pipe name NETLOGON pnum=7004 (pipes_open=1)
  Got API command 0x26 on pipe "NETLOGON" (pnum 7004)api_fd_reply: p:123b18 
file_offset: 1024
  smb_vwv[15]=28676 (0x7004)
  search for pipe pnum=7004
  pipe name NETLOGON pnum=7004 (pipes_open=1)
  Got API command 0x26 on pipe "NETLOGON" (pnum 7004)api_fd_reply: p:123b18 
file_offset: 1024
  smb_vwv[15]=28676 (0x7004)
  search for pipe pnum=7004
  pipe name NETLOGON pnum=7004 (pipes_open=1)
  Got API command 0x26 on pipe "NETLOGON" (pnum 7004)api_fd_reply: p:123b18 
file_offset: 1024
  smb_vwv[15]=28676 (0x7004)
  search for pipe pnum=7004
  pipe name NETLOGON pnum=7004 (pipes_open=1)
  Got API command 0x26 on pipe "NETLOGON" (pnum 7004)api_fd_reply: p:123b18 
file_offset: 1024
  smb_vwv[15]=28676 (0x7004)
  search for pipe pnum=7004
  api_fd_reply: INVALID PIPE HANDLE: 7004

To me it seems the pipe 7004 was opened (never closed) and got lost somewhere.
Or I have messed up smb.conf somewhere which is also quite possible. :) Here 
are
the relevant lines of my smb.conf Ssamba runs on Solaris 2.6 at my site):

; --- snip
[global]
  lock directory = /var/local/samba/locks
  smb passwd file = /var/local/samba/private/smbpasswd

  debug level = 20
  debug timestamp = yes
  max log size = 5000

  character set = ISO8859-1
  client code page = 850
   
  create mask = 744
  force create mode = 400
  directory mask = 755
  force directory mode = 500
  delete readonly = yes
  delete veto files = no
  map archive = no
  map system = no
  map hidden = no

  os level = 65
  dns proxy = no
  domain logons = yes
  domain master = yes
  local master = yes
  preferred master = yes

  server string = SAMBA on %h
  workgroup = SAMBA

  encrypt passwords = yes
  revalidate = yes
  security = user
  guest account = smbguest
  invalid users = root daemon bin sys adm lp smtp uucp nuucp listen nobody 
noaccess nobody4

  socket options = SO_KEEPALIVE TCP_NODELAY

  deadtime = 5
  getwd cache = yes
  wide links = no
  default service = homes

  logon drive = h:
  logon home = "\\%N\%U"
  logon path = "\\%N\%U\NTprofile\profile.pds"
  logon script = "setup.cmd"

  wins support = no

[netlogon]
  path = /var/local/samba/netlogon/
  writeable = no
  guest ok = no
  
[homes]
  comment = Your Home Directory
  writeable = yes
; --- snip

'setup.cmd' currently only contains a CRLF.

Any idea if this is a bug or a fault in my configuration? I have dug myself
through the mailing list archive and documentation but didn't find any
related information. Complete log information is available on demand.

Best regards,

Stefan

--
Stefan Walter - SysAdmin at D-INFK (StabSoft), ETH Zurich, Switzerland