[Samba] Can't join AD anymore after migration to 3.0.30
Jens Nissen
jens.nissen at gmx.net
Wed Jun 4 14:08:44 GMT 2008
After migrating from 3.0.26a to 3.0.30 I cannot join my AD member server
to the domain anymore:
I get a DCERPC_FAULT_INVALID_TAG.
As I didn't change my Windows 2000 SBS Server, this looks like a new
feature in Samba 3.0.30.
Do I have to also migrate my Heimdal - if so, which version is required?
Kind regards,
Jens
P.S: Is there a way to find out the code changes in Samba 3.0.30?
I didn't find a 3.0.30 tag in the tags nor in the branches.
The latest tag is 3.0.26a. This makes it somewhat difficult to figure
out, what could be different.
Or am I looking in the wrong places in the repository?
Updating http://www.samba.org/samba/subversion.html would be nice,
as the "major current branches" indicated there do not exist.
P.P.S: Log and Configuration:
-------------------------------------------------------------------------
Log on level 10 looks like this:
net ads join -d 10 -w $WORKGROUP -U$Administrator$password -s
"/etc/config/smb.conf"
-------------------------------------------------------------------------
[2008/06/04 15:16:13, 10] lib/util.c:dump_data(2264)
[000] 00 05 00 03 03 10 00 00 00 20 00 00 00 0B 00 00 ........ . ......
[010] 00 00 00 00 00 00 00 00 00 06 00 00 1C 00 00 00 ........ ........
[020] 00 .
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_debug(84)
000000 smb_io_rpc_hdr rpc_hdr
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0000 major : 05
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0001 minor : 00
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0002 pkt_type : 03
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0003 flags : 03
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0004 pack_type0: 10
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0005 pack_type1: 00
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0006 pack_type2: 00
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0007 pack_type3: 00
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint16(681)
0008 frag_len : 0020
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint16(681)
000a auth_len : 0000
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint32(710)
000c call_id : 0000000b
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_debug(84)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint32(710)
0010 alloc_hint: 00000000
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint16(681)
0014 context_id: 0000
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0016 cancel_ct : 00
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0017 reserved : 00
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_debug(84)
000018 smb_io_rpc_hdr_fault fault
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_dcerpc_status(799)
0018 status : DCERPC_FAULT_INVALID_TAG
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint32(710)
001c reserved: 00000000
[2008/06/04 15:16:13, 1]
rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(625)
cli_pipe_validate_current_pdu: RPC fault code
DCERPC_FAULT_INVALID_TAG received from remote machine sbs2000.domain.
test pipe \samr fnum 0x4005!
[2008/06/04 15:16:13, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843)
rpc_api_pipe: got PDU len of 32 at offset 0
[2008/06/04 15:16:13, 10] intl/lang_tdb.c:lang_tdb_init(138)
lang_tdb_init: /lib/de_DE.msg: No such file or directory
Failed to set password for machine account (NT code 0x1c000006)
[2008/06/04 15:16:13, 6] libsmb/clientgen.c:write_socket(152)
write_socket(7,45)
[2008/06/04 15:16:13, 6] libsmb/clientgen.c:write_socket(155)
write_socket(7,45) wrote 45
[2008/06/04 15:16:13, 10]
lib/util_sock.c:read_smb_length_return_keepalive(623)
got smb length of 35
[2008/06/04 15:16:13, 5] lib/util.c:show_msg(484)
[2008/06/04 15:16:13, 5] lib/util.c:show_msg(494)
size=35
smb_com=0x4
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=18439
smb_pid=6300
smb_uid=32770
smb_mid=18
smt_wct=0
smb_bcc=0
[2008/06/04 15:16:13, 10] libsmb/clientgen.c:cli_rpc_pipe_close(394)
cli_rpc_pipe_close: closed pipe \samr to machine sbs2000.domain.test
[2008/06/04 15:16:13, 6] libsmb/clientgen.c:write_socket(152)
write_socket(7,39)
[2008/06/04 15:16:13, 6] libsmb/clientgen.c:write_socket(155)
write_socket(7,39) wrote 39
[2008/06/04 15:16:13, 10]
lib/util_sock.c:read_smb_length_return_keepalive(623)
got smb length of 35
[2008/06/04 15:16:13, 5] lib/util.c:show_msg(484)
[2008/06/04 15:16:13, 5] lib/util.c:show_msg(494)
size=35
smb_com=0x71
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=18439
smb_pid=6300
smb_uid=32770
smb_mid=19
smt_wct=0
smb_bcc=0
[2008/06/04 15:16:13, 1] utils/net_ads.c:net_ads_join(1548)
call of net_join_domain failed: NT code 0x1c000006
[2008/06/04 15:16:13, 2] utils/net.c:main(1066)
return code = -1
Failed to join domain: NT code 0x1c000006
-------------------------------------------------------------------------
This is my smb.conf
-------------------------------------------------------------------------
[global]
dos charset = ISO-8859-1
unix charset = ISO-8859-1
display charset = ISO-8859-1
workgroup = DOMAIN
realm = DOMAIN.TEST
server string = NASdrive
interfaces = ixp0
security = ADS
allow trusted domains = No
password server = sbs2000.domain.test
private dir = /var/lib/adsamba/private
passdb backend = tdbsam
guest account = samba
log level = 10
log file = smblog.ad
max log size = 0
name resolve order = wins bcast host
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE
SO_RCVBUF=8192 SO_SNDBUF=8192
load printers = No
show add printer wizard = No
preferred master = No
local master = No
domain master = No
wins server = 192.168.1.4
idmap uid = 1000-60000
idmap gid = 1000-60000
winbind enum users = Yes
winbind enum groups = Yes
winbind offline logon = Yes
admin users = DOMAIN\\Administrator
ea support = Yes
More information about the samba
mailing list