Domain logon problems with 10.Mar.99 CVS source

[Luke Kenneth Casson Leighton]

check for a crash further up in the log file.

On Thu, 11 Mar 1999, Stefan Walter wrote:

> 
> Hi,
> 
> I have downloaded the current NT Domain Controller source today. I
> managed to get it to work as a PDC according to the NTDOM FAQ and could
> join a NT4 workstation with SP4 to the domain of the Samba PDC.
> 
> However when I try to log on to the domain as a user I get a dialog
> containing this message:
> 
>   The system cannot log you on to this domain because the system's computer
>   account in its primary domain is missing or the password on that account
>   is incorrect. 
> 
> I can log in as that user on the Samba PDC when using smbclient. 
> I had a look at the logfile with debug level set to 20 and found this 
> only few lines before the end of the log file (seemingly what caused NT to
> abort the login):
> 
> [1999/03/10 18:14:57, 4] rpc_server/srv_pipe_hnd.c:get_rpc_pipe(387)
>   search for pipe pnum=7004
> [1999/03/10 18:14:57, 1] smbd/ipc.c:api_fd_reply(3280)
>   api_fd_reply: INVALID PIPE HANDLE: 7004
> [1999/03/10 18:14:57, 3] smbd/ipc.c:api_no_reply(3198)
>   Unsupported API fd command
> 
> If I 'grep' the log file for 7004 I get this:
> 
>   Opened pipe NETLOGON with handle 7004 (pipes_open=1)
>   open pipes: name NETLOGON pnum=7004
>   smb_vwv[15]=28676 (0x7004)
>   search for pipe pnum=7004
>   pipe name NETLOGON pnum=7004 (pipes_open=1)
>   Got API command 0x26 on pipe "NETLOGON" (pnum 7004)api_fd_reply: p:123b18 
> file_offset: 1024
>   smb_vwv[15]=28676 (0x7004)
>   search for pipe pnum=7004
>   pipe name NETLOGON pnum=7004 (pipes_open=1)
>   Got API command 0x26 on pipe "NETLOGON" (pnum 7004)api_fd_reply: p:123b18 
> file_offset: 1024
>   smb_vwv[15]=28676 (0x7004)
>   search for pipe pnum=7004
>   pipe name NETLOGON pnum=7004 (pipes_open=1)
>   Got API command 0x26 on pipe "NETLOGON" (pnum 7004)api_fd_reply: p:123b18 
> file_offset: 1024
>   smb_vwv[15]=28676 (0x7004)
>   search for pipe pnum=7004
>   pipe name NETLOGON pnum=7004 (pipes_open=1)
>   Got API command 0x26 on pipe "NETLOGON" (pnum 7004)api_fd_reply: p:123b18 
> file_offset: 1024
>   smb_vwv[15]=28676 (0x7004)
>   search for pipe pnum=7004
>   api_fd_reply: INVALID PIPE HANDLE: 7004
> 
> To me it seems the pipe 7004 was opened (never closed) and got lost somewhere.
> Or I have messed up smb.conf somewhere which is also quite possible. :) Here 
> are
> the relevant lines of my smb.conf Ssamba runs on Solaris 2.6 at my site):
> 
> ; --- snip
> [global]
>   lock directory = /var/local/samba/locks
>   smb passwd file = /var/local/samba/private/smbpasswd
> 
>   debug level = 20
>   debug timestamp = yes
>   max log size = 5000
> 
>   character set = ISO8859-1
>   client code page = 850
>    
>   create mask = 744
>   force create mode = 400
>   directory mask = 755
>   force directory mode = 500
>   delete readonly = yes
>   delete veto files = no
>   map archive = no
>   map system = no
>   map hidden = no
> 
>   os level = 65
>   dns proxy = no
>   domain logons = yes
>   domain master = yes
>   local master = yes
>   preferred master = yes
> 
>   server string = SAMBA on %h
>   workgroup = SAMBA
> 
>   encrypt passwords = yes
>   revalidate = yes
>   security = user
>   guest account = smbguest
>   invalid users = root daemon bin sys adm lp smtp uucp nuucp listen nobody 
> noaccess nobody4
> 
>   socket options = SO_KEEPALIVE TCP_NODELAY
> 
>   deadtime = 5
>   getwd cache = yes
>   wide links = no
>   default service = homes
> 
>   logon drive = h:
>   logon home = "\\%N\%U"
>   logon path = "\\%N\%U\NTprofile\profile.pds"
>   logon script = "setup.cmd"
> 
>   wins support = no
> 
> [netlogon]
>   path = /var/local/samba/netlogon/
>   writeable = no
>   guest ok = no
>   
> [homes]
>   comment = Your Home Directory
>   writeable = yes
> ; --- snip
> 
> 'setup.cmd' currently only contains a CRLF.
> 
> Any idea if this is a bug or a fault in my configuration? I have dug myself
> through the mailing list archive and documentation but didn't find any
> related information. Complete log information is available on demand.
> 
> Best regards,
> 
> Stefan
> 
> --
> Stefan Walter - SysAdmin at D-INFK (StabSoft), ETH Zurich, Switzerland
> 
> 
> 

<a href="mailto:lkcl at samba.org"   > Luke Kenneth Casson Leighton  </a>
<a href="http://www.cb1.com/~lkcl"> Samba and Network Development </a>
<a href="http://samba.org"        > Samba Web site                </a>

=====================================================================
Luke Kenneth Casson Leighton        |  Direct Dial   : (678) 443-6183
Systems Engineer / ISS XForce Team  |  ISS Front Desk: (678) 443-6000
Internet Security Systems, Inc.     |  ISS Fax       : (678) 443-6477

http://www.iss.net/    *Adaptive Network Security for the Enterprise*
     ISS Connect   -   International User Conference   -  May '99
=====================================================================