possible issue with Windows 2003 sp1

[Gerald (Jerry) Carter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Gerald (Jerry) Carter wrote:
| Wish I had caught this earlier.  Looks like Windows
| 2003 sp1 is going to cause us some grief.....
| Winbindd goes out to lunch when the LsaOpenPol()
| request fails.
|
| # winbindd -V
| Version 3.0.14pre1-SVN-build-6149
|
|
| ....
| 000018 lsa_io_r_open_pol
| ~    000018 smb_io_pol_hnd
| ~        0018 data1: 00000000
| ~        001c data2: 00000000
| ~        0020 data3: 0000
| ~        0022 data4: 0000
| ~        0024 data5: 00 00 00 00 00 00 00 00
| ~    002c status: NT code 0xc0020041
|
|
| Still digging into this....

apparently windows 2003 sp1 doesn'ty like
LsaOpenPolicy() over schannel.

# bin/rpcclient primary -I 192.168.1.158 -U% -c 'schannel; lsaquery'
Setting schannel - sign and seal
Got Session key: B5BDF88A6FDC6EA70000000000000000
result was NT code 0xc0020041

$ bin/rpcclient primary -I 192.168.1.158 -U% -c 'lsaquery'
domain COLOR has sid S-1-5-21-3493585492-4029240144-3226775320





cheers, jerry
=====================================================================
Alleviating the pain of Windows(tm)      ------- http://www.samba.org
GnuPG Key                ----- http://www.plainjoe.org/gpg_public.asc
"I never saved anything for the swim back."     Ethan Hawk in Gattaca
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFCTFRpIR7qMdg1EfYRAiF1AJoDsrO+WgoXZS9ptyF+FxwnTRIflgCgnOoY
dgJRCxikXi5KRBVpusV4mpo=
=kLpf
-----END PGP SIGNATURE-----