[Samba] netdom secure channel reset
abartlet at samba.org
Tue Nov 11 01:39:06 GMT 2003
On Tue, 2003-11-11 at 12:27, Eric Roseme wrote:
> I have been playing with the Windows netdom command to reset the Samba
> secure channel to the Windows DC:
> netdom reset sambaserver /domain:windowsdomain
> Traces and logs show that it sends a bunch of lsarpcs
> (LSA_QUERYINFOPOLICY) to the Samba server, but I cannot determine what
> it is actually doing (I assume that it would read or write to
> secrets.tdb). Has anyone tried this before?
If you are playing at that level bring the discussion over the
Samba doesn't currently implement the secure channel properly, so we
don't keep the current session key in a database, we create it once-per
session, and keep it in memory.
We need to fix this, as we will soon (I hope) be using schannel on
parallel connections to the DC. If you can document what this command
does, it will help us implement it properly. (I didn't realise you
could even reset the secure channel).
Andrew Bartlett abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team abartlet at samba.org
Student Network Administrator, Hawker College abartlet at hawkerc.net
http://samba.org http://build.samba.org http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20031111/6ec8d44d/attachment.bin
More information about the samba-technical