[Samba] Re: failed tcon_X with NT_STATUS_ACCESS_DENIED

[egold at fsa.com]

It turned out that 2 of my 4 windows AD servers have anonymous access
disabled. The other 2 have it enabled.
So i am temporarily using only the 2 AD servers which allow anonymous
access.

My windows admins want to change all the windows AD servers to disable
anonymous access.

so my question is:

how can i get samba to use windows AD with anonymous access disabled?
why does samba need anonymous access?

im running solaris 8 and samba 3.0.7.

thanks!



                                                                           
             John H Terpstra                                               
             <jht at samba.org>                                               
             Sent by:                                                   To 
             samba-bounces+ego         samba at lists.samba.org               
             ld=fsa.com at lists.                                          cc 
             samba.org                                                     
                                                                   Subject 
                                       Re: [Samba] Re: failed tcon_X with  
             09/21/2004 03:30          NT_STATUS_ACCESS_DENIED             
             PM                                                            
                                                                           
                                                                           
             Please respond to                                             
               jht at samba.org                                               
                                                                           
                                                                           




On Tuesday 21 September 2004 13:20, Igor Belyi wrote:
> egold at fsa.com wrote:
> > can someone please tell me why im getting this error, i can join my
other
> > AD servers just this one fails.
>
> ...
>
> > [2004/09/20 17:58:31, 3] libsmb/cliconnect.c:cli_start_connection(1376)
> >   Connecting to host=WIN2KSERVER
> > [2004/09/20 17:58:31, 3] lib/util_sock.c:open_socket_out(752)
> >   Connecting to 192.168.0.10 at port 445
> > [2004/09/20 17:58:31, 1] libsmb/cliconnect.c:cli_full_connection(1476)
> >   failed tcon_X with NT_STATUS_ACCESS_DENIED
> > [2004/09/20 17:58:31, 1] utils/net.c:connect_to_ipc_anonymous(191)
> >   Cannot connect to server (anonymously).  Error was
> > NT_STATUS_ACCESS_DENIED
>
> Could be a firewall blocking access to port 445

It could also mean that on this WIN2KSERVER anonymous access has been
disabled
via a registry (security) setting. That is a likely cause.

- John T.
--
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
OpenLDAP by Example, ISBN: 0131488732
Other books in production.
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


____________________________________
This e-mail message is for the sole use of the intended recipient(s) and
may contain proprietary, confidential and/or privileged information. Any
unauthorized review, use, disclosure or distribution is prohibited.  If you
are not the intended recipient (or an employee or agent responsible to
deliver it to the intended recipient), you may not copy or deliver this
message to anyone. In such case, you should destroy this message and kindly
notify the sender by reply e-mail.