[Samba] can't join W2003 domain with 3.0.0 (krb ticket is OK though)

[Andrew Bartlett]

On Fri, 2003-10-31 at 21:41, christoph.beyer at desy.de wrote:
> Hi Jochen et al,
> 
> that worked fine, though if I get it right everyone can now read the
> active directory structure (?)

No, you still need to authenticate, but nothing stops an attacker from
'stealing' the TCP/IP connection, if they control the network.

> Connecting to the samba machine results still in errors, but that may be
> something stupid on my behalf too...
> 
> thanks for helping
> 	~christoph
> 
> 
>  connect_to_domain_password_server: unable to setup the NETLOGON
> credentials to machine ADC1. Error was : NT_STATUS_UNSUCCESSFUL.

You will need to turn up the debug level - it will probably be something
simple...

Andrew Bartlett

> 
> best regards
> 	~christoph
-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20031031/58186984/attachment.bin