[Samba] Problem with domain membership
Jochen Witte
devnull at alpha-lab.net
Wed Mar 23 10:35:06 GMT 2005
Hello - can anybody explain, what this means in detail?
---snip---
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
0010 alloc_hint: 00000010
0014 context_id: 0000
0016 cancel_ct : 00
0017 reserved : 00
rpc_api_pipe: len left: 0 smbtrans read: 40
rpc_api_pipe: fragment first and last both set
000018 net_io_r_auth_2
000018 smb_io_chal
0018 data: c8 d8 ff bf 3b 5f 0e 08
000020 net_io_neg_flags
0020 neg_flags: 400001ff
0024 status: NT_STATUS_ACCESS_DENIED
cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
cli_nt_setup_creds: auth2 challenge failed
connect_to_domain_password_server: unable to setup the PDC credentials
to machine PDC-SERVER. Error was : NT_STATUS_OK.
write_socket(19,45)
write_socket(19,45) wrote 45
---snip---
Am Dienstag, den 22.03.2005, 22:18 +0100 schrieb Jochen Witte:
> OKOK no attachements here. On the PDC side I get:
>
> ---snip---
>
> account_policy_get: password history:0
> pdb_set_user_sid: setting user sid
> S-1-5-21-1790986081-3911417905-1778689532-132098
> pdb_set_user_sid_from_rid:
> setting user sid S-1-5-21-1790986081-3911417905-1778689532-132098 from
> rid 132098
> pdb_set_group_sid: setting group sid
> S-1-5-21-1790986081-3911417905-1778689532-61001
> pdb_set_group_sid_from_rid:
> setting group sid S-1-5-21-1790986081-3911417905-1778689532-61001 from
> rid 61001
> pop_sec_ctx (99, 99) - sec_ctx_stack_ndx = 0
> [000] 4A 8C 6C 14 69 D1 72 B8 46 71 33 55 75 F8 01 C3 J.l.i.r.
> Fq3Uu...
> cred_session_key
> clnt_chal: E166CA9056B37776
> srv_chal : 5EC8E922D299E1CE
> clnt+srv : 3F2FB4B3284D5945
> sess_key : 629F7453EFF68A4B
> cred_create
> sess_key : 629F7453EFF68A4B
> stor_cred: E166CA9056B37776
> timestamp: 0
> timecred : E166CA9056B37776
> calc_cred: FE38AA70FD16006A
> cred_assert
> challenge : 4C87E9631DF688E5
> calculated: FE38AA70FD16006A
> credentials check wrong
> 000000 net_io_r_auth_2
> 000000 smb_io_chal
> 0000 data: c8 d8 ff bf 3b 5f 0e 08
> 000008 net_io_neg_flags
> 0008 neg_flags: 400001ff
> 000c status: NT_STATUS_ACCESS_DENIED
> api_rpcTNP: called NETLOGON successfully
> free_pipe_context: destroying talloc pool of size 78
> write_to_pipe: data_used = 140
> read_from_pipe: 712c name: NETLOGON len: 156
> read_from_pipe: NETLOGON: fault_state = 0 : data_sent_length = 0,
> prs_offset(&p->out_data.rdata) = 16.
> ---snip---
>
> Am Dienstag, den 22.03.2005, 22:07 +0100 schrieb Jochen Witte:
> > Attached are the logs with the according log-level.
> >
> > ---snip---
> > doing parameter workgroup = <DOMAINNAME>
> > doing parameter netbios name = HAL
> > 000018 smb_io_chal
> > 0018 data: c8 d8 ff bf 3b 5f 0e 08
> > 000020 net_io_neg_flags
> > 0020 neg_flags: 400001ff
> > 0024 status: NT_STATUS_ACCESS_DENIED
> > cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
> > cli_nt_setup_creds: auth2 challenge failed
> > connect_to_domain_password_server: unable to setup the PDC credentials
> > to machine <PDCHOST>. Ewrite_socket(19,45)
> > ---snip---
> >
> > Do I have a wrong secrets.tdb ? I deleted it completely and then joined
> > the domain again (after removing the machine account in my ldap server).
> >
> > Am Dienstag, den 22.03.2005, 05:07 -0600 schrieb Gerald (Jerry) Carter:
> > > -----BEGIN PGP SIGNED MESSAGE-----
> > > Hash: SHA1
> > >
> > > Jochen Witte wrote:
> > > | One update: when trying security=server
> > > | on the fileserver side, I can log on
> > > | to the fileserver. But i do not want
> > > | security=server! Any hints out there?
> > >
> > > You need to look at a level 10 log on the server
> > > (and set 'debug timestamp = no' for high debug logs).
> > > There's not enough information here to really offer
> > > sound advice.
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > cheers, jerry
> > > =====================================================================
> > > Alleviating the pain of Windows(tm) ------- http://www.samba.org
> > > GnuPG Key ----- http://www.plainjoe.org/gpg_public.asc
> > > "I never saved anything for the swim back." Ethan Hawk in Gattaca
> > > -----BEGIN PGP SIGNATURE-----
> > > Version: GnuPG v1.2.5 (GNU/Linux)
> > > Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
> > >
> > > iD8DBQFCP/xZIR7qMdg1EfYRAsfVAJ9GqO/9UVgJpgTJmHdODPU+YO2x6gCg3bHl
> > > STOznlGLrgKRJuZGUFH0h/E=
> > > =Je16
> > > -----END PGP SIGNATURE-----
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: https://lists.samba.org/mailman/listinfo/samba
> --
> Jochen Witte <devnull at alpha-lab.net>
>
--
Jochen Witte <devnull at alpha-lab.net>
More information about the samba
mailing list