samba 4 TP3 and Windows SSPI

[Joshua Masiko]

Using DsWriteAccountSpn on a domain account fails. Samba verbose log says:

dcerpc fault in call drsuapi:0d DCERPC_FAULT_OP_RNG_ERROR.

Does that mean it's not implemented

On 11/8/06, Joshua Masiko <geniedren at gmail.com> wrote:
>
> ok , i managed to get the code to work. It seems
> I had some misconfiguration on the samba side.
> The code is basically the Platform SDK SockAuth sample
> plus some additions I was testing.
> I think it would be helpful to include something like this
> in a future TP release.
> I need to rework the code so it can work with Dev C++
> to make it accessible to those not using MS Visual C++/Platform SDK. Dev
> C++ is missing some
> headers,function/enum defs and import libs so I'll just
> use LoadLibrary/GetProcAddress .
>
> On 11/8/06, Andrew Bartlett <abartlet at samba.org> wrote:
> >
> > On Tue, 2006-11-07 at 13:43 +0300, Joshua Masiko wrote:
> > > I've successfully joined a windows 2000 SP4 machine to a domain and
> > can
> > > log on to the machine interactively.
> > > However I'm having problems running code that uses SSPI/Kerberos
> > >
> > > AcquireCredentialsHandle succeeds but InitializeSecurityContext fails
> > with
> > > SEC_E_LOGON_DENIED
> > >
> > > DsGetDcName succeeds but DsBind with the domain returned by
> > DsGetDcName
> > > fails with ERROR_NO_SUCH_DOMAIN
> >
> > Do you have the network traces to match?  Also, are the programs you are
> > using for SSPI sample programs you can point us to?
> >
> > This is an area that needs more testing, but we are starting to get an
> > automated windows testing framework, so this is becoming more practical.
> >
> >
> > Andrew Bartlett
> >
> > --
> > Andrew Bartlett
> > http://samba.org/~abartlet/ <http://samba.org/%7Eabartlet/>
> > Authentication Developer, Samba Team           http://samba.org
> > Samba Developer, Red Hat Inc.                  http://redhat.com
> >
> >
> >
>