NET SAMDUMP problem in S4

[ronnie sahlberg]

Andrew, Metze,

Im trying to pull the machine account passwords for some w2k3
domaincontrollers (so i can decrypt and look at the FRS traffic) but
have some issues with the 'net samdump' command.

I have provisioned samba4 as server role  'domain controller'
and i have joined it to the domain using net join ... BDC.
The join appears to have completed fine and the s4 host shows up in
'domain controllers' on the w2k3 dc.


However, I get this error when I try to run 'net samdump' :

# net samdump
libnet_SamDump returned NT_STATUS_CANT_ACCESS_DOMAIN_INFO: Could not
obtain machine account password - are we joined to the domain?
return code = -1


Do you have any idea of why this reports this error?