[Samba] Samba3 PDC and W2K3 server

[maimic at free.fr]

I can't join a SAMBA3 domain from a W2K3 server.

- Error message on the W2K3 server : "The parameter is incorrect"

- Error message in the samba logs :
rpc_parse/parse_samr.c:samr_io_userinfo_ctr(6479)
  samr_io_userinfo_ctr: unknown switch level 0x1a
rpc_server/srv_samr.c:api_samr_set_userinfo(786)
  api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO.

- Samba version : version 3.0.22
  Samba Server role: ROLE_DOMAIN_PDC

- winver of the W2K3 server : Version 5.2.3790 Service Pack 1 Build 3790
  "Appliance Edition"
  The W2K3 server is in a workgroup.

Has anyone got success when joining a samba3 domain from a W2K3 server ?

A WinXP client can join this SAMBA3 domain.
  When I compare the list of RPC commands sent by the XP client and the W2K3
server (see below), this is the same list of commands from the first one to the
command  "SAMR_SET_USERINFO" used to modify the machine account password on the
server.
  This "SAMR_SET_USERINFO" command is sent after another "SAMR_SET_USERINFO"
command which gives the error message "unknown switch level 0x1a", as indicated
above.

Had anybody a glance on the list of rpc commands sent by a w2k3 server when
joining a SAMBA3 domain ?

List of rpc commands from the W2K3 server :
api_rpcTNP: lsarpc op 0x2c - api_rpcTNP: rpc command: LSA_OPENPOLICY2
api_rpcTNP: lsarpc op 0x7 - api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY
api_rpcTNP: winreg op 0x2 - api_rpcTNP: rpc command: REG_OPEN_HKLM
api_rpcTNP: winreg op 0x1a - api_rpcTNP: rpc command: REG_GETVERSION
api_rpcTNP: winreg op 0xf - api_rpcTNP: rpc command: REG_OPEN_ENTRY
api_rpcTNP: winreg op 0x11 - api_rpcTNP: rpc command: REG_QUERY_VALUE
api_rpcTNP: winreg op 0x5 - api_rpcTNP: rpc command: REG_CLOSE
api_rpcTNP: winreg op 0x5 - api_rpcTNP: rpc command: REG_CLOSE
api_rpcTNP: NETLOGON op 0x4 - api_rpcTNP: rpc command: NET_REQCHAL
api_rpcTNP: NETLOGON op 0x5 - api_rpcTNP: rpc command: NET_AUTH
api_rpcTNP: lsarpc op 0x0 - api_rpcTNP: rpc command: LSA_CLOSE
api_rpcTNP: lsarpc op 0x2c - api_rpcTNP: rpc command: LSA_OPENPOLICY2
api_rpcTNP: lsarpc op 0x7 - api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY
api_rpcTNP: winreg op 0x2 - api_rpcTNP: rpc command: REG_OPEN_HKLM
api_rpcTNP: winreg op 0x1a - api_rpcTNP: rpc command: REG_GETVERSION
api_rpcTNP: winreg op 0xf - api_rpcTNP: rpc command: REG_OPEN_ENTRY
api_rpcTNP: winreg op 0x11 - api_rpcTNP: rpc command: REG_QUERY_VALUE
api_rpcTNP: winreg op 0x5 - api_rpcTNP: rpc command: REG_CLOSE
api_rpcTNP: winreg op 0x5 - api_rpcTNP: rpc command: REG_CLOSE
api_rpcTNP: samr op 0x3e - api_rpcTNP: rpc command: SAMR_CONNECT4
api_rpcTNP: samr op 0x6 - api_rpcTNP: rpc command: SAMR_ENUM_DOMAINS
api_rpcTNP: samr op 0x5 - api_rpcTNP: rpc command: SAMR_LOOKUP_DOMAIN
api_rpcTNP: samr op 0x7 - api_rpcTNP: rpc command: SAMR_OPEN_DOMAIN
api_rpcTNP: samr op 0x32 - api_rpcTNP: rpc command: SAMR_CREATE_USER
api_rpcTNP: samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE_HND
api_rpcTNP: samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE_HND
api_rpcTNP: samr op 0x3e - api_rpcTNP: rpc command: SAMR_CONNECT4
api_rpcTNP: samr op 0x7 - api_rpcTNP: rpc command: SAMR_OPEN_DOMAIN
api_rpcTNP: samr op 0x11 - api_rpcTNP: rpc command: SAMR_LOOKUP_NAMES
api_rpcTNP: samr op 0x22 - api_rpcTNP: rpc command: SAMR_OPEN_USER
api_rpcTNP: samr op 0x24 - api_rpcTNP: rpc command: SAMR_QUERY_USERINFO
api_rpcTNP: samr op 0x2c - api_rpcTNP: rpc command: SAMR_GET_USRDOM_PWINFO
api_rpcTNP: samr op 0x3a - api_rpcTNP: rpc command: SAMR_SET_USERINFO
api_rpcTNP: samr op 0x3a - api_rpcTNP: rpc command: SAMR_SET_USERINFO
api_rpcTNP: samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE_HND
api_rpcTNP: samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE_HND
api_rpcTNP: samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE_HND
api_rpcTNP: lsarpc op 0x2c - api_rpcTNP: rpc command: LSA_OPENPOLICY2
api_rpcTNP: lsarpc op 0x7 - api_rpcTNP: rpc command: LSA_QUERYINFOPOLICY
api_rpcTNP: lsarpc op 0x0 - api_rpcTNP: rpc command: LSA_CLOSE
api_rpcTNP: samr op 0x3e - api_rpcTNP: rpc command: SAMR_CONNECT4
api_rpcTNP: samr op 0x7 - api_rpcTNP: rpc command: SAMR_OPEN_DOMAIN
api_rpcTNP: samr op 0x11 - api_rpcTNP: rpc command: SAMR_LOOKUP_NAMES
api_rpcTNP: samr op 0x22 - api_rpcTNP: rpc command: SAMR_OPEN_USER
api_rpcTNP: samr op 0x24 - api_rpcTNP: rpc command: SAMR_QUERY_USERINFO
api_rpcTNP: samr op 0x25 - api_rpcTNP: rpc command: SAMR_SET_USERINFO2
api_rpcTNP: samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE_HND
api_rpcTNP: samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE_HND
api_rpcTNP: samr op 0x1 - api_rpcTNP: rpc command: SAMR_CLOSE_HND
api_rpcTNP: lsarpc op 0x0 - api_rpcTNP: rpc command: LSA_CLOSE

Thank you for your answers.

Mike