3.0Alpha21 and W2K AD 'dorking' Samba machine acct?

[Andrew Bartlett]

On Thu, 2003-01-30 at 23:32, Nik Conwell wrote:
> 
> Anybody seeing a scenario like this?
> 
> net ads join adds our machine entry to AD just fine.
> 
>   The machine entry object in the AD database has:
> 
>    OperatingSystem        "Samba"
>    OperatingSystemVersion "post3.0-HEAD"
>    dnsHostname            "ourhost"
> 
> Some time later "something" happened, and AD now has:
> 
>    OperatingSystem        "Windows"
>    OperatingSystemVersion "NT 4"
>    dnsHostname            is empty.
> 
> and then authentication to ourhost fails.

Something is doing a NT4 password change.  This can occur if
'security=domain' is set, rather than 'security=ads'.  

Or if 'net rpc changetrustpw' is run.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20030130/7db3fa8d/attachment.bin