[Samba] netdom secure channel reset

[Andrew Bartlett]

On Tue, 2003-11-11 at 12:27, Eric Roseme wrote:
> I have been playing with the Windows netdom command to reset the Samba 
> secure channel to the Windows DC:
> 
> netdom reset sambaserver /domain:windowsdomain
> 
> Traces and logs show that it sends a bunch of lsarpcs 
> (LSA_QUERYINFOPOLICY) to the Samba server, but I cannot determine what 
> it is actually doing (I assume that it would read or write to 
> secrets.tdb).  Has anyone tried this before?

If you are playing at that level bring the discussion over the
samba-technical...

Samba doesn't currently implement the secure channel properly, so we
don't keep the current session key in a database, we create it once-per
session, and keep it in memory.  

We need to fix this, as we will soon (I hope) be using schannel on
parallel connections to the DC.  If you can document what this command
does, it will help us implement it properly.  (I didn't realise you
could even reset the secure channel).

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba-technical/attachments/20031111/6ec8d44d/attachment.bin