Anonymous rpc with windows 2000 server and 3.0.0rc1

John Rogers cifsfan at yahoo.com
Fri Aug 29 19:48:09 GMT 2003 

Well, Im not real sure. I've beenn trying to hunt it
down for the last couple days and thats what I came up
with.

I was perfectly happy with net rpc commands before I
patched this specific patch.

John
--- Javid Abdul-AJAVID1 <abduljavid at motorola.com>
wrote:
> John u sure blaster patch did it?
> I guess anonymous restriction was not related to
> this rpc change.
> 
> -----Original Message-----
> From: John Rogers [mailto:cifsfan at yahoo.com] 
> Sent: Friday, August 29, 2003 2:40 PM
> To: samba-technical at lists.samba.org
> Subject: Anonymous rpc with windows 2000 server and
> 3.0.0rc1
> 
> 
> It seems that after the Microsoft Patch
> Windows2000-KB823980-x86-ENU.exe(in response to
> MBlaster), this registry key value has changed:
>  
>
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
> Value name: restrictanonymous
> Value data: 2
>  
> On my Windows 2000 Server SP3. Now I am unable to
> complete several rpc operations, such as net rpc
> info
> -w [DOMAIN] and net rpc join with samba 3.0.0rc1. I
> get the following error messge:
>  
>   Cannot connect to server (anonymously).  Error was
> NT_STATUS_ACCESS_DENIED
>  
> Anyone have any help on how to solve this issue. I
> would prefer not work work around it by lowering the
> security,now that these nasty bunch of virusese are
> on the loose. Below is the command with debug on.
> Thanks,
> 
> cifsfan
>  
> [root at fish bin]# ./net rpc info -d 5 -w [DOMAIN] 
> [2003/08/29 12:32:37, 5]
> lib/debug.c:debug_dump_status(359)
>   INFO: Current debug levels:
>     all: True/5
>     tdb: False/0
>     printdrivers: False/0
>     lanman: False/0
>     smb: False/0
>     rpc_parse: False/0
>     rpc_srv: False/0
>     rpc_cli: False/0
>     passdb: False/0
>     sam: False/0
>     auth: False/0
>     winbind: False/0
>     vfs: False/0
>     idmap: False/0
> [2003/08/29 12:32:37, 3]
> param/loadparm.c:lp_load(3907)
>   lp_load: refreshing parameters
> [2003/08/29 12:32:37, 3]
> param/loadparm.c:init_globals(1301)
>   Initialising global parameters
> [2003/08/29 12:32:37, 3]
> param/params.c:pm_process(566)
>   params.c:pm_process() - Processing configuration
> file "/usr/local/samba/lib/smb.conf"
> [2003/08/29 12:32:37, 3]
> param/loadparm.c:do_section(3410)
>   Processing section "[global]"
>   doing parameter workgroup = [DOMAIN]
>   doing parameter netbios name = fish
> [2003/08/29 12:32:37, 4]
> param/loadparm.c:handle_netbios_name(2711)
>   handle_netbios_name: set global_myname to: FISH
>   doing parameter local master = no
>   doing parameter wins server = 192.168.0.3
>   doing parameter security = domain
>   doing parameter encrypt passwords = yes
>   doing parameter password server = [MYSERVER]
>   doing parameter username map = /etc/samba/smbusers
>   doing parameter socket options = TCP_NODELAY
> SO_SNDBUF=8192 SO_RCVBUF=8192
>   doing parameter log level = 2
> [2003/08/29 12:32:37, 4]
> param/loadparm.c:lp_load(3939)
>   pm_process() returned Yes
> [2003/08/29 12:32:37, 5]
> lib/charcnv.c:charset_name(74)
>   Substituting charset 'ISO-8859-1' for LOCALE
> [2003/08/29 12:32:37, 5]
> lib/charcnv.c:charset_name(74)
>   Substituting charset 'ISO-8859-1' for LOCALE
> [2003/08/29 12:32:37, 5]
> lib/charcnv.c:charset_name(74)
>   Substituting charset 'ISO-8859-1' for LOCALE
> [2003/08/29 12:32:37, 5]
> lib/charcnv.c:charset_name(74)
>   Substituting charset 'ISO-8859-1' for LOCALE
> [2003/08/29 12:32:37, 5]
> lib/charcnv.c:charset_name(74)
>   Substituting charset 'ISO-8859-1' for LOCALE
> [2003/08/29 12:32:37, 5]
> lib/charcnv.c:charset_name(74)
>   Substituting charset 'ISO-8859-1' for LOCALE
> [2003/08/29 12:32:37, 5]
> lib/charcnv.c:charset_name(74)
>   Substituting charset 'ISO-8859-1' for LOCALE
> [2003/08/29 12:32:37, 5]
> lib/charcnv.c:charset_name(74)
>   Substituting charset 'ISO-8859-1' for LOCALE
> [2003/08/29 12:32:37, 5]
> lib/charcnv.c:charset_name(74)
>   Substituting charset 'ISO-8859-1' for LOCALE
> [2003/08/29 12:32:37, 5]
> lib/charcnv.c:charset_name(74)
>   Substituting charset 'ISO-8859-1' for LOCALE
> [2003/08/29 12:32:37, 5] lib/util.c:init_names(270)
>   Netbios name list:-
>   my_netbios_names[0]="FISH"
> [2003/08/29 12:32:37, 2]
> lib/interface.c:add_interface(79)
>   added interface ip=192.168.0.17
> bcast=192.168.255.255 nmask=255.255.0.0
> [2003/08/29 12:32:37, 2]
> lib/interface.c:add_interface(79)
>   added interface ip=192.172.0.17
> bcast=192.172.255.255 nmask=255.255.0.0
> [2003/08/29 12:32:37, 5]
> lib/gencache.c:gencache_init(59)
>   Opening cache file at
> /usr/local/samba/var/locks/gencache.tdb
> [2003/08/29 12:32:37, 5]
> libsmb/namecache.c:namecache_fetch(201)
>   name [DOMAIN]#1B found.
> [2003/08/29 12:32:37, 5]
> libsmb/namecache.c:namecache_status_fetch(314)
>   namecache_status_fetch: key
> NBT/[DOMAIN]#1B.20.192.168.0.3 -> [MYSERVER]
> [2003/08/29 12:32:37, 3]
> libsmb/cliconnect.c:cli_full_connection(1262)
>   Connecting to host=[MYSERVER] share=IPC$
> [2003/08/29 12:32:37, 3]
> lib/util_sock.c:open_socket_out(690)
>   Connecting to 192.168.0.3 at port 445
> [2003/08/29 12:32:37, 5]
> lib/util_sock.c:print_socket_options(105)
>   socket option SO_KEEPALIVE = 0
> [2003/08/29 12:32:37, 5]
> lib/util_sock.c:print_socket_options(105)
>   socket option SO_REUSEADDR = 0
> [2003/08/29 12:32:37, 5]
> lib/util_sock.c:print_socket_options(105)
>   socket option SO_BROADCAST = 0
> [2003/08/29 12:32:37, 5]
> lib/util_sock.c:print_socket_options(105)
>   socket option TCP_NODELAY = 1
> [2003/08/29 12:32:37, 5]
> lib/util_sock.c:print_socket_options(105)
>   socket option IPTOS_LOWDELAY = 0
> [2003/08/29 12:32:37, 5]
> lib/util_sock.c:print_socket_options(105)
>   socket option IPTOS_THROUGHPUT = 0
> [2003/08/29 12:32:37, 5]
> lib/util_sock.c:print_socket_options(105)
>   socket option SO_SNDBUF = 16384
> [2003/08/29 12:32:37, 5]
> lib/util_sock.c:print_socket_options(105)
>   socket option SO_RCVBUF = 16384
> [2003/08/29 12:32:37, 5]
> lib/util_sock.c:print_socket_options(105)
>   socket option SO_SNDLOWAT = 1
> [2003/08/29 12:32:37, 5]
> lib/util_sock.c:print_socket_options(105)
>   socket option SO_RCVLOWAT = 1
> [2003/08/29 12:32:37, 5]
> lib/util_sock.c:print_socket_options(105)
>   socket option SO_SNDTIMEO = 0
> [2003/08/29 12:32:37, 5]
> lib/util_sock.c:print_socket_options(105)
>   socket option SO_RCVTIMEO = 0
> [2003/08/29 12:32:37, 5] lib/util.c:show_msg(456)
> [2003/08/29 12:32:37, 5] lib/util.c:show_msg(466)
>   size=176
>   smb_com=0x72
>   smb_rcls=0
>   smb_reh=0
>   smb_err=0
>   smb_flg=136
>   smb_flg2=51201
>   smb_tid=0
>   smb_pid=32236
>   smb_uid=0
>   smb_mid=1
>   smt_wct=17
>   smb_vwv[ 0]=    8 (0x8)
>   smb_vwv[ 1]=12807 (0x3207)
>   smb_vwv[ 2]=  256 (0x100)
>   smb_vwv[ 3]= 1024 (0x400)
>   smb_vwv[ 4]=   65 (0x41)
>   smb_vwv[ 5]=    0 (0x0)
>   smb_vwv[ 6]=  256 (0x100)
>   smb_vwv[ 7]=    0 (0x0)
> 
=== message truncated ===


__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com

More information about the samba-technical mailing list