[Samba 4] Access to GPO failed

[Son Nguyen]

Hi all,
    I've just finished testing this feature this morning with new version.
version.h: 
#define SAMBA_VERSION_GIT_COMMIT_DATE "Sun Dec 7 21:30:36 2008 +0100"
#define SAMBA_VERSION_STRING "4.0.0alpha6-GIT-e3eb94e"
 
Running samba in single mode. Command start:

    * samba -i -M single
    * samba -M single

 In these two cases, Windows client can join domain success but cannot 
access Group Policy Editor from dsa.msc.

    * The error message in client is the same as the older:
          o Fail to open the Group Policy Object. You may not have
            appropriate rights.
            Details:
            The network path was not found.
    *  From windows client, I can access to the //dc.domain/sysvol success
    * The below is smb.log when I run samba in debug level 10
      (samba -M single -d 10)

Do you have any ideas for me to pass this step. I really want to test 
domain policy but I stuck in this step for more than 2 weeks.
Thanks for your response.

Son Nguyen

smbd.log
-------------------------------------------
[Mon Dec  8 10:20:45 2008 ICT, 5 auth/ntlm/auth.c:61:auth_get_challenge()]
auth_get_challenge: returning previous challenge by module random (normal)
[Mon Dec  8 10:20:45 2008 ICT, 10 
auth/ntlm/auth.c:265:auth_check_password_send()]
auth_check_password_send: auth_context challenge created by random
[Mon Dec  8 10:20:45 2008 ICT, 10 
auth/ntlm/auth.c:268:auth_check_password_send()]
auth_check_password_send: challenge is:
[0000] 97 F9 16 CC 2A 08 BB E1                            ....*...
[Mon Dec  8 10:20:45 2008 ICT, 5 
auth/ntlm/auth.c:333:auth_check_password_recv()]
auth_check_password_recv: anonymous authentication for user [NT 
AUTHORITY\ANONYMOUS LOGON] succeeded
[Mon Dec  8 10:20:45 2008 ICT, 10 
auth/ntlmssp/ntlmssp_server.c:690:auth_ntlmssp_check_password()]
Got NT session key of length 16
[Mon Dec  8 10:20:45 2008 ICT, 10 
auth/ntlmssp/ntlmssp_server.c:699:auth_ntlmssp_check_password()]
Got LM session key of length 16
[Mon Dec  8 10:20:45 2008 ICT, 10 
auth/ntlmssp/ntlmssp_server.c:462:ntlmssp_server_postauth()]
ntlmssp_server_auth: Using unmodified nt session key.
[Mon Dec  8 10:20:45 2008 ICT, 10 
libcli/security/security_token.c:68:security_token_debug()]
Security token of user S-1-5-7
 SIDs (4):
  SID[  0]: S-1-5-7
  SID[  1]: S-1-5-32-546
  SID[  2]: S-1-1-0
  SID[  3]: S-1-5-2
 Privileges (0x               0):
[Mon Dec  8 10:20:45 2008 ICT, 5 
libcli/raw/smb_signing.c:341:smbcli_simple_set_signing()]
Mandatory SMB signing enabled!
[Mon Dec  8 10:20:45 2008 ICT, 5 
libcli/raw/smb_signing.c:344:smbcli_simple_set_signing()]
SMB signing enabled!
[Mon Dec  8 10:20:45 2008 ICT, 5 
libcli/raw/smb_signing.c:130:sign_outgoing_message()]
sign_outgoing_message: SENT SIG (seq: 1): sent SMB signature of
[0000] 78 D6 3A 92 DC 7C 62 D0                            x.:..|b.
[Mon Dec  8 10:20:45 2008 ICT, 10 smb_server/smb_server.c:94:smbsrv_recv()]
smbsrv_recv
[0000] AF EC 12 23 00 DE 44 2E                            ...#..D.
[Mon Dec  8 10:20:45 2008 ICT, 5 libcli/raw/smb_signing.c:81:signing_good()]
Seen valid packet, so turning signing on
[Mon Dec  8 10:20:45 2008 ICT, 5 libcli/raw/smb_signing.c:85:signing_good()]
Seen valid packet, so marking signing as 'seen valid'
[Mon Dec  8 10:20:45 2008 ICT, 5 
smb_server/smb/receive.c:512:switch_message()]
switch message SMBtconX (task_id 0)
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'epmapper' registered on endpoint 
'ncacn_np:[\pipe\epmapper]'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'epmapper' registered on endpoint 
'ncacn_ip_tcp:[135]'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'epmapper' registered on endpoint 
'ncalrpc:[EPMAPPER]'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 
'ncacn_np:[\pipe\srvsvc]'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 
'ncacn_ip_tcp:'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'srvsvc' registered on endpoint 
'ncalrpc:'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 
'ncacn_np:[\pipe\wkssvc]'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 
'ncacn_ip_tcp:'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'wkssvc' registered on endpoint 
'ncalrpc:'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 
'ncacn_np:[\pipe\rpcecho]'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 
'ncacn_ip_tcp:'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'rpcecho' registered on endpoint 
'ncalrpc:'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'samr' registered on endpoint 
'ncacn_np:[\pipe\samr]'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'samr' registered on endpoint 
'ncacn_ip_tcp:'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'samr' registered on endpoint 
'ncalrpc:'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'netlogon' registered on endpoint 
'ncacn_np:[\pipe\netlogon]'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'netlogon' registered on endpoint 
'ncacn_ip_tcp:'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'netlogon' registered on endpoint 
'ncalrpc:'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 
'ncacn_np:[\pipe\lsarpc]'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 
'ncacn_np:[\pipe\netlogon]'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 
'ncacn_np:[\pipe\lsass]'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 
'ncacn_ip_tcp:'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'lsarpc' registered on endpoint 
'ncalrpc:'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'spoolss' registered on endpoint 
'ncacn_np:[\pipe\spoolss]'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 
'ncacn_np:[\pipe\lsass]'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 
'ncacn_np:[\pipe\protected_storage]'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 
'ncacn_ip_tcp:'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'drsuapi' registered on endpoint 
'ncalrpc:'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'winreg' registered on endpoint 
'ncacn_np:[\pipe\winreg]'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'winreg' registered on endpoint 
'ncacn_ip_tcp:'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'winreg' registered on endpoint 
'ncalrpc:'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'dssetup' registered on endpoint 
'ncacn_np:[\pipe\lsarpc]'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'dssetup' registered on endpoint 
'ncacn_np:[\pipe\lsass]'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'dssetup' registered on endpoint 
'ncacn_ip_tcp:'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'dssetup' registered on endpoint 
'ncalrpc:'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 
'ncacn_np:[\pipe\unixinfo]'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 
'ncacn_ip_tcp:'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'unixinfo' registered on endpoint 
'ncalrpc:'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'browser' registered on endpoint 
'ncacn_np:[\pipe\browser]'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'browser' registered on endpoint 
'ncacn_ip_tcp:'
[Mon Dec  8 10:20:45 2008 ICT, 4 
rpc_server/dcerpc_server.c:249:dcesrv_interface_register()]
dcesrv_interface_register: interface 'browser' registered on endpoint 
'ncalrpc:'
[Mon Dec  8 10:20:45 2008 ICT, 5 
libcli/raw/smb_signing.c:130:sign_outgoing_message()]
sign_outgoing_message: SENT SIG (seq: 3): sent SMB signature of
[0000] 02 89 87 9E D5 22 ED DB                            ....."..
[Mon Dec  8 10:20:45 2008 ICT, 10 
ldap_server/ldap_bind.c:313:ldapsrv_UnbindRequest()]
UnbindRequest
[Mon Dec  8 10:20:45 2008 ICT, 3 
smbd/service_stream.c:64:stream_terminate_connection()]
Terminating connection - 'NT_STATUS_END_OF_FILE'
[Mon Dec  8 10:20:45 2008 ICT, 3 
smbd/service_stream.c:64:stream_terminate_connection()]
Terminating connection - 'NT_STATUS_END_OF_FILE'
[Mon Dec  8 10:20:45 2008 ICT, 2 
smbd/process_single.c:100:single_terminate()]
single_terminate: reason[NT_STATUS_END_OF_FILE]
[Mon Dec  8 10:20:55 2008 ICT, 10 smb_server/smb_server.c:94:smbsrv_recv()]
smbsrv_recv
[0000] F3 22 92 89 1F 39 1F F4                            ."...9..
[Mon Dec  8 10:20:55 2008 ICT, 5 
smb_server/smb/receive.c:512:switch_message()]
switch message SMBulogoffX (task_id 0)
[Mon Dec  8 10:20:55 2008 ICT, 5 
libcli/raw/smb_signing.c:130:sign_outgoing_message()]
sign_outgoing_message: SENT SIG (seq: 5): sent SMB signature of
[0000] 3F E9 81 91 91 6C E7 17                            ?....l..
[Mon Dec  8 10:20:55 2008 ICT, 10 smb_server/smb_server.c:94:smbsrv_recv()]
smbsrv_recv
[0000] 5B 0B 4A A6 C3 22 5A F2                            [.J.."Z.
[Mon Dec  8 10:20:55 2008 ICT, 5 
smb_server/smb/receive.c:512:switch_message()]
switch message SMBtdis (task_id 0)
[Mon Dec  8 10:20:55 2008 ICT, 3 
smb_server/tcon.c:121:smbsrv_tcon_destructor()]
192.168.9.242 closed connection to service IPC$
[Mon Dec  8 10:20:55 2008 ICT, 5 
libcli/raw/smb_signing.c:130:sign_outgoing_message()]
sign_outgoing_message: SENT SIG (seq: 7): sent SMB signature of
[0000] FB 74 07 92 3A 0A 38 56                            .t..:.8V
[Mon Dec  8 10:20:55 2008 ICT, 10 smb_server/smb_server.c:94:smbsrv_recv()]
smbsrv_recv
[Mon Dec  8 10:20:55 2008 ICT, 3 
smbd/service_stream.c:64:stream_terminate_connection()]
Terminating connection - 'NT_STATUS_END_OF_FILE'
[Mon Dec  8 10:20:55 2008 ICT, 3 
smbd/service_stream.c:64:stream_terminate_connection()]
Terminating connection - 'NT_STATUS_END_OF_FILE'
[Mon Dec  8 10:20:55 2008 ICT, 2 
smbd/process_single.c:100:single_terminate()]
single_terminate: reason[NT_STATUS_END_OF_FILE]

Oliver Liebel wrote:
>
> Son Nguyen schrieb:
>> Hi all,     I try to deploy Samba 4 as a domain controller as Samba 
>> Wiki guide: http://wiki.samba.org/index.php/Samba4/HOWTO
>> After download and install the newest version (Samba 4.0.0alpha6 - 
>> GIT - Dec 4 2008), provision to domain controller success.
>>
>>    * Running Samba4 in standard mode:
>>          o Windows (XP and 2003) cannot join domain with error message:
>>            The following error occourred attempting to join the domain
>>            "DOMAIN".
>>            An internal error occurred.
>>          o Samba4 message:
>>            dcesrv_init_context: fail to find endpoin server ='epmapper'
> try   samba  -M single
>
>>            make_connetion: NTVFS make connection failed.
>>    * Running Samba4 in single mode
>>          o Windows client can join domain success, I can create OUs or
>>            Groups and Users using dsa.msc but it's failed when I try to
>>            edit the GPO. Error message:
>>            Failed to open the Group Policy Object. You may not have
>>            appropriate rights.
>>            Detail:
>>            The network path was not found
>>
>> Please help me to solve this problem. I'm waiting for your response.
>>
>> Regard,
>> Son Nguyen
>>
>>
>>
>>
>
> ____________
> Virus checked by G DATA AntiVirusKit
> Version: AVK 19.1810 from 06.12.2008
> Virus news: www.antiviruslab.com
>
>
>
>