[Samba] Samba 3.0.3 breaks domain somehow.

Tom Dickson tdickson at inostor.com
Fri May 7 00:01:09 GMT 2004


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

After upgrading from 3.0.2 to 3.0.3 in a Windows 2000 Native Domain
environment, 9x clients can't connect and wbinfo -t doesn't work:

bash-2.05a# wbinfo -t
checking the trust secret via RPC calls failed
error code was NT_STATUS_PIPE_NOT_AVAILABLE (0xc00000ac)
Could not check secret

Downgrading to 3.0.2 fixes this.

I can get log files, but they don't seem to have anything very useful in
them.

Server: Windows 2000 Native Domain
Client: Windows ME or Mac OS X

smb.conf follows:

#======================= Global Settings
=====================================

[global]
printcap name = /etc/printcap
load printers = no
log file = /var/log/samba/log.%m
max log size = 50
encrypt passwords = yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = no
passwd program = /usr/bin/passwd
min password length = 3
logon path = ""

# override some defaults
enhanced browsing = no
map archive = no
max connections = 1000
max smbd processes = 1000
follow symlinks = no

username map = /etc/samba/smbusers
winbind separator = +
winbind enum users = yes
winbind enum groups = yes
template shell = /sbin/nologin
template homedir = /dev/null

#
# smbv3.0+
#
create mask = 0700
directory mask = 0700
directory security mask = 0700
#
map acl inherit = yes
inherit permissions = yes
inherit acls = yes

force group = nobody
#======================== Changable Global Settings
==========================
~ password server = WIN2KNATIVE
~ winbind uid = 10000-19999
~ map to guest = never
~ security = ads
~ realm = NATIVEDOMAIN.LOCAL
~ domain logons = no
~ server string =
~ workgroup = NATIVEDOMAIN
~ winbind gid = 10000-19999
~ netbios name = inlab
~ admin users = "@NATIVEDOMAIN.LOCAL+Domain Admins"

[terabyte]
~ path = /mnt/H00/terabyte
~ comment = terabyte
~ valid users =
~ read only = no
~ available = yes
~ admin users = !
~ write list =

Thank you!

More random output:

bash-2.05a# wbinfo -t
checking the trust secret via RPC calls failed
error code was NT_STATUS_PIPE_NOT_AVAILABLE (0xc00000ac)
Could not check secret
bash-2.05a# wbinfo --get-auth-user
NATIVEDOMAIN.LOCAL+nasadmin%nas
bash-2.05a# wbinfo -a NATIVEDOMAIN.LOCAL+nasadmin%nas
plaintext password authentication failed
error code was NT_STATUS_PIPE_NOT_AVAILABLE (0xc00000ac)
error messsage was: Named pipe not available
Could not authenticate user NATIVEDOMAIN.LOCAL+nasadmin%nas with
plaintext password
challenge/response password authentication failed
error code was NT_STATUS_PIPE_NOT_AVAILABLE (0xc00000ac)
error messsage was: Named pipe not available
Could not authenticate user NATIVEDOMAIN.LOCAL+nasadmin with
challenge/response

wbinfo -u works fine, and connections from the windows 2000 CLIENT
works, also, so kerberos tickets seem to be happy

times and dates:

net time ; date
Thu May  6 17:04:56 2004
Thu May  6 17:04:37 PDT 2004

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD4DBQFAmtHF2dxAfYNwANIRAomLAJdEM/PBdg8OA8m17gQP5QTIo5XtAKCNt6p7
wGxOx7PDN1WAVPNVbk5esg==
=Cxcf
-----END PGP SIGNATURE-----


More information about the samba mailing list