W2008RC1 Samba 3.2 Join Fails with NT_STATUS_WRONG_PASSWORD

[Matt Geddes]

On Jan 23, 2008 12:59 PM, Jeremy Allison <jra at samba.org> wrote:

> This looks good to me. I'm forward porting to 3.2.x and
> Jerry has promised to test (I'm in OOXML-hell right now :-).

No problems. Apologies for it being against an older sourcebase, but
the patch should apply pretty cleanly to 3.2.x.

Incidentally, looking at the neg_flags vs 2K8 problems that have been
floating around, there's a new registry entry in Windows 2008 Server
that causes lsass.exe to skip the check it does for
NETLOGON_NEG_128BIT. Set the following to a non-zero value on the DCs
and stop/start netlogon and you can join NT 4 and Samba 3 without any
of those pesky NetrServerAuthenticate2-returning-0xc0000388 problems:

HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\AllowNT4Crypto

It's a 32-bit DWORD.

thx,
Matt