[Samba] Samba 3.0.3 breaks domain somehow.
Tom Dickson
tdickson at inostor.com
Fri May 7 00:01:09 GMT 2004
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
After upgrading from 3.0.2 to 3.0.3 in a Windows 2000 Native Domain
environment, 9x clients can't connect and wbinfo -t doesn't work:
bash-2.05a# wbinfo -t
checking the trust secret via RPC calls failed
error code was NT_STATUS_PIPE_NOT_AVAILABLE (0xc00000ac)
Could not check secret
Downgrading to 3.0.2 fixes this.
I can get log files, but they don't seem to have anything very useful in
them.
Server: Windows 2000 Native Domain
Client: Windows ME or Mac OS X
smb.conf follows:
#======================= Global Settings
=====================================
[global]
printcap name = /etc/printcap
load printers = no
log file = /var/log/samba/log.%m
max log size = 50
encrypt passwords = yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = no
passwd program = /usr/bin/passwd
min password length = 3
logon path = ""
# override some defaults
enhanced browsing = no
map archive = no
max connections = 1000
max smbd processes = 1000
follow symlinks = no
username map = /etc/samba/smbusers
winbind separator = +
winbind enum users = yes
winbind enum groups = yes
template shell = /sbin/nologin
template homedir = /dev/null
#
# smbv3.0+
#
create mask = 0700
directory mask = 0700
directory security mask = 0700
#
map acl inherit = yes
inherit permissions = yes
inherit acls = yes
force group = nobody
#======================== Changable Global Settings
==========================
~ password server = WIN2KNATIVE
~ winbind uid = 10000-19999
~ map to guest = never
~ security = ads
~ realm = NATIVEDOMAIN.LOCAL
~ domain logons = no
~ server string =
~ workgroup = NATIVEDOMAIN
~ winbind gid = 10000-19999
~ netbios name = inlab
~ admin users = "@NATIVEDOMAIN.LOCAL+Domain Admins"
[terabyte]
~ path = /mnt/H00/terabyte
~ comment = terabyte
~ valid users =
~ read only = no
~ available = yes
~ admin users = !
~ write list =
Thank you!
More random output:
bash-2.05a# wbinfo -t
checking the trust secret via RPC calls failed
error code was NT_STATUS_PIPE_NOT_AVAILABLE (0xc00000ac)
Could not check secret
bash-2.05a# wbinfo --get-auth-user
NATIVEDOMAIN.LOCAL+nasadmin%nas
bash-2.05a# wbinfo -a NATIVEDOMAIN.LOCAL+nasadmin%nas
plaintext password authentication failed
error code was NT_STATUS_PIPE_NOT_AVAILABLE (0xc00000ac)
error messsage was: Named pipe not available
Could not authenticate user NATIVEDOMAIN.LOCAL+nasadmin%nas with
plaintext password
challenge/response password authentication failed
error code was NT_STATUS_PIPE_NOT_AVAILABLE (0xc00000ac)
error messsage was: Named pipe not available
Could not authenticate user NATIVEDOMAIN.LOCAL+nasadmin with
challenge/response
wbinfo -u works fine, and connections from the windows 2000 CLIENT
works, also, so kerberos tickets seem to be happy
times and dates:
net time ; date
Thu May 6 17:04:56 2004
Thu May 6 17:04:37 PDT 2004
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD4DBQFAmtHF2dxAfYNwANIRAomLAJdEM/PBdg8OA8m17gQP5QTIo5XtAKCNt6p7
wGxOx7PDN1WAVPNVbk5esg==
=Cxcf
-----END PGP SIGNATURE-----
More information about the samba
mailing list