Fwd: Re: Got caught by Samba and Windows NT PDC

Leslie Bloom i65 at ornl.gov
Wed Jan 20 15:11:28 GMT 1999

This happened to me -- when our PDC was down for upgrade my samba machine
took over as PDC.  When the NT machine started up, there were major
conflicts and I had to take the samba machine down to remove it from the
network.  There was probably a better solution but this was quick and easy.

>Dan Kaminsky wrote:
>> >Yup. Better stop Samba first and then bring up the NT PDC.
>> >We (Luke and Paul Aston i think) found this out in the
>> >beginning.  Kind of a nasty DoS attack from your internal
>> >network. ;)
>> Does this qualify as a true DoS?  Can a *remote* network generate the
>> necessary packets to break an already-activated PDC?
>No.  Not really. But watch out for disgruntled emplyee
>on your subnet. Perhaps registering with the WINS server.
>But these are all internal things assuming you are behind
>a firewall.

Supposing a PDC is already up, can any machine with access to the local
subnet arbitararily crash that PDC by emulating another PDC?  Firewalls
often mean your network is like candy--tough on the outside, but with a
sweet, gooey center.

How does NT react if it starts up and Samba is already doing its job?

------- End of Forwarded Message 
Toxicology and Risk Analysis Section
Oak Ridge National Laboratory
1060 Commerce Park
Oak Ridge, TN  37830

More information about the samba-technical mailing list