[Samba] Re: failed tcon_X with NT_STATUS_ACCESS_DENIED

egold at fsa.com egold at fsa.com
Wed Sep 22 14:34:19 GMT 2004

It turned out that 2 of my 4 windows AD servers have anonymous access
disabled. The other 2 have it enabled.
So i am temporarily using only the 2 AD servers which allow anonymous

My windows admins want to change all the windows AD servers to disable
anonymous access.

so my question is:

how can i get samba to use windows AD with anonymous access disabled?
why does samba need anonymous access?

im running solaris 8 and samba 3.0.7.


             John H Terpstra                                               
             <jht at samba.org>                                               
             Sent by:                                                   To 
             samba-bounces+ego         samba at lists.samba.org               
             ld=fsa.com at lists.                                          cc 
                                       Re: [Samba] Re: failed tcon_X with  
             09/21/2004 03:30          NT_STATUS_ACCESS_DENIED             
             Please respond to                                             
               jht at samba.org                                               

On Tuesday 21 September 2004 13:20, Igor Belyi wrote:
> egold at fsa.com wrote:
> > can someone please tell me why im getting this error, i can join my
> > AD servers just this one fails.
> ...
> > [2004/09/20 17:58:31, 3] libsmb/cliconnect.c:cli_start_connection(1376)
> >   Connecting to host=WIN2KSERVER
> > [2004/09/20 17:58:31, 3] lib/util_sock.c:open_socket_out(752)
> >   Connecting to at port 445
> > [2004/09/20 17:58:31, 1] libsmb/cliconnect.c:cli_full_connection(1476)
> >   failed tcon_X with NT_STATUS_ACCESS_DENIED
> > [2004/09/20 17:58:31, 1] utils/net.c:connect_to_ipc_anonymous(191)
> >   Cannot connect to server (anonymously).  Error was
> Could be a firewall blocking access to port 445

It could also mean that on this WIN2KSERVER anonymous access has been
via a registry (security) setting. That is a likely cause.

- John T.
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
OpenLDAP by Example, ISBN: 0131488732
Other books in production.
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

This e-mail message is for the sole use of the intended recipient(s) and
may contain proprietary, confidential and/or privileged information. Any
unauthorized review, use, disclosure or distribution is prohibited.  If you
are not the intended recipient (or an employee or agent responsible to
deliver it to the intended recipient), you may not copy or deliver this
message to anyone. In such case, you should destroy this message and kindly
notify the sender by reply e-mail.

More information about the samba mailing list