[Samba] schannel issue on samba 3.0.3

Florin Grosu florin.grosu at igeoss.com
Tue May 11 13:03:06 GMT 2004


I have the same problem (i think) although i run a samba 3.0.0-15 as PDC 
on Fedora. Tried to disable client schannel too but still didn't work. 
In my log i found the following error:

[2004/05/11 14:52:02, 0] rpc_server/srv_pipe.c:api_pipe_netsec_process(1343)
  Invalid auth info 68 or level 5 on schannel
[2004/05/11 14:52:02, 0] rpc_server/srv_pipe_hnd.c:process_request_pdu(605)
  process_request_pdu: failed to do schannel processing.

If there's a solution, please let me know too, thank you.
Florin

* There are really two of me; if what I say is stupid, it certainly came from the other guy. *



Buchan Milne wrote:

>On Tue, 11 May 2004, Thomas Munck Steenholdt wrote:
>
>  
>
>>Ralf Tomczak wrote:
>>    
>>
>>>Hi there,
>>>
>>>I've seen a strange thing not reported yet AFAIK.
>>>We have W2K DCs with SP3 with Samba 3.0.2a everything works fine in regard
>>>to winbind, but with Samba 3.0.3 winbind produces schannel len 24 errors and
>>>'wbinfo -t' and 'id DOMAIN\userid' doesn't work. Note that wbinfo -u|g works
>>>well and a join was successful as well. I tried to tune my krb5.conf but in
>>>the end I disabled 'client schannel' in smb.conf. Does anyone know what is
>>>going wrong exactly? Is there a reasonable security risk? 
>>>
>>>      
>>>
>>Please take a look at this, add additional info if required.
>>
>>Also not tht 3.0.4 has been released with some winbindd changes among 
>>other things, this might be resolved already!
>>
>>https://bugzilla.samba.org/show_bug.cgi?id=1315
>>    
>>
>
>No, it's still broken.
>
>Regards,
>Buchan
>
>  
>


More information about the samba mailing list