Win2k and XP can't add to a HEAD PDC Domain

[Stefan (metze) Metzmacher]

 >On Wed, Apr 03, 2002 at 08:32:03AM +0200, Stefan (metze) Metzmacher >wrote:
 >
 >> In english(something like this):
 >> While trying to join domain "VMWARE", the following error occoured:
 >> There is no User-Session-Key for the Logon-Session available.
 >
 >The problem is that Win2k thinks that we must be a win2k server - and tries
 >various win2k-specific things against us.  The thing that triggers this
 >is our use of 'SPNEGO' (used to support AD membership, it allows kerberos
 >authenticaion).
 >
 >Set 'use spnego = false' in your smb.conf

This works fine!
 >
 >> When I use 2.2.3a it work's on 2k AND XP fine.
 >> After joining the Domain I killed the 2.2.3a smbd and start the HEAD smbd
 >> and now People can login to the HEAD Domain with win2k.
 >
 >Thats an innovateive way around it.
 >
 >> On WinXP I got every time an error: Wrong password...(if it's wrong or NOT)
 >> But in the logs I only get on error if the password is really wrong.
 >> If I use 2.2.3a this is no problem.
 >> (I HAVE applied the signorseal patch)
 >
 >Sounds like they cleaned up their error messages a bit.  In Win2k it seems
 >to alternate between two different messages...

I have joined the Domain with "use spnego = False" and then there isn't 
that Problem, I think XP wanted to do some kerberos auth when 1. joined the 
2.2.3a Domain...)



metze
-----------------------------------------------------------------------------
Stefan "metze" Metzmacher <metze at metzemix.de>