[Samba] Samba 3.4.9 net rpc shutdown and XP Domain client

[Thomas Bork]

Anybody?
Schould I better ask this in samba-technical at lists.samba.org?


On 31.10.2010 01:43 I wrote:

> Hi @all,
>
> this is an very old problem, posted the first time 2005 to
> samba-testers at samba.org:
>
> If I have a Domain client with WinXP, which is part of a domain and
> using this client, if the PDC is not available and want to remote shut
> down this client with the net tool from other servers, then this is not
> possible, because net tries to authenticate against the PDC:
>
> testeis # net -d3 -S "XP" -U "Administrator"%"xxx" rpc shutdown -t "60"
> -C "Shutting down in 1 minutes."
> [2010/10/31 01:22:10, 3] param/loadparm.c:9039(lp_load_ex)
> lp_load_ex: refreshing parameters
> [2010/10/31 01:22:10, 3] param/loadparm.c:4848(init_globals)
> Initialising global parameters
> [2010/10/31 01:22:10, 2] param/loadparm.c:4707(max_open_files)
> rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)
> [2010/10/31 01:22:10, 3] ../lib/util/params.c:550(pm_process)
> params.c:pm_process() - Processing configuration file "/etc/smb.conf"
> [2010/10/31 01:22:10, 3] param/loadparm.c:7726(do_section)
> Processing section "[global]"
> [2010/10/31 01:22:10, 2] lib/interface.c:478(interpret_interface)
> interpret_interface: Adding interface 127.0.0.1/8
> [2010/10/31 01:22:10, 2] lib/interface.c:340(add_interface)
> added interface 127.0.0.1/8 ip=127.0.0.1 bcast=127.255.255.255
> netmask=255.0.0.0
> [2010/10/31 01:22:10, 2] lib/interface.c:478(interpret_interface)
> interpret_interface: Adding interface 192.168.0.12/255.255.255.0
> [2010/10/31 01:22:10, 2] lib/interface.c:340(add_interface)
> added interface 192.168.0.12/25 ip=192.168.0.12 bcast=192.168.0.255
> netmask=255.255.255.0
> lp_load_ex: refreshing parameters
> params.c:pm_process() - Processing configuration file "/etc/smb.conf"
> Processing section "[global]"
> interpret_interface: Adding interface 127.0.0.1/8
> added interface 127.0.0.1/8 ip=127.0.0.1 bcast=127.255.255.255
> netmask=255.0.0.0
> interpret_interface: Adding interface 192.168.0.12/255.255.255.0
> added interface 192.168.0.12/25 ip=192.168.0.12 bcast=192.168.0.255
> netmask=255.255.255.0
> Connecting to host=XP
> Connecting to 192.168.0.37 at port 445
> Connecting to 192.168.0.37 at port 139
> Doing spnego session setup (blob length=16)
> server didn't supply a full spnego negprot
> Got challenge flags:
> Got NTLMSSP neg_flags=0x62898215
> NTLMSSP: Set final flags:
> Got NTLMSSP neg_flags=0x60088215
> NTLMSSP Sign/Seal - Initialising with flags:
> Got NTLMSSP neg_flags=0x60088215
> SPNEGO login failed: No logon servers
> failed session setup with NT_STATUS_NO_LOGON_SERVERS
> Could not connect to server XP
> Connection failed: NT_STATUS_NO_LOGON_SERVERS
> failed to make ipc connection: NT_STATUS_NO_LOGON_SERVERS
> initshutdown pipe failed, trying winreg pipe
> Connecting to host=XP
> Connecting to 192.168.0.37 at port 445
> Doing spnego session setup (blob length=16)
> server didn't supply a full spnego negprot
> Got challenge flags:
> Got NTLMSSP neg_flags=0x62898215
> NTLMSSP: Set final flags:
> Got NTLMSSP neg_flags=0x60088215
> NTLMSSP Sign/Seal - Initialising with flags:
> Got NTLMSSP neg_flags=0x60088215
> SPNEGO login failed: No logon servers
> failed session setup with NT_STATUS_NO_LOGON_SERVERS
> Could not connect to server XP
> Connection failed: NT_STATUS_NO_LOGON_SERVERS
> failed to make ipc connection: NT_STATUS_NO_LOGON_SERVERS
> return code = -1
>
>
> Is this a bug?
> I think, if the PDC is not available, it should also be possible to
> remote shutdown the clients.
>
>
> Here is the same thing, if the PDC is available:
>
> testeis # net -d3 -S "XP" -U "Administrator"%"xxx" rpc shutdown -t "60"
> -C "Shutting down in 1 minutes."
> [2010/10/31 01:25:43, 3] param/loadparm.c:9039(lp_load_ex)
> lp_load_ex: refreshing parameters
> [2010/10/31 01:25:43, 3] param/loadparm.c:4848(init_globals)
> Initialising global parameters
> [2010/10/31 01:25:43, 2] param/loadparm.c:4707(max_open_files)
> rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)
> [2010/10/31 01:25:43, 3] ../lib/util/params.c:550(pm_process)
> params.c:pm_process() - Processing configuration file "/etc/smb.conf"
> [2010/10/31 01:25:43, 3] param/loadparm.c:7726(do_section)
> Processing section "[global]"
> [2010/10/31 01:25:43, 2] lib/interface.c:478(interpret_interface)
> interpret_interface: Adding interface 127.0.0.1/8
> [2010/10/31 01:25:43, 2] lib/interface.c:340(add_interface)
> added interface 127.0.0.1/8 ip=127.0.0.1 bcast=127.255.255.255
> netmask=255.0.0.0
> [2010/10/31 01:25:43, 2] lib/interface.c:478(interpret_interface)
> interpret_interface: Adding interface 192.168.0.12/255.255.255.0
> [2010/10/31 01:25:43, 2] lib/interface.c:340(add_interface)
> added interface 192.168.0.12/25 ip=192.168.0.12 bcast=192.168.0.255
> netmask=255.255.255.0
> lp_load_ex: refreshing parameters
> params.c:pm_process() - Processing configuration file "/etc/smb.conf"
> Processing section "[global]"
> interpret_interface: Adding interface 127.0.0.1/8
> added interface 127.0.0.1/8 ip=127.0.0.1 bcast=127.255.255.255
> netmask=255.0.0.0
> interpret_interface: Adding interface 192.168.0.12/255.255.255.0
> added interface 192.168.0.12/25 ip=192.168.0.12 bcast=192.168.0.255
> netmask=255.255.255.0
> Connecting to host=XP
> Connecting to 192.168.0.37 at port 445
> Connecting to 192.168.0.37 at port 139
> Doing spnego session setup (blob length=16)
> server didn't supply a full spnego negprot
> Got challenge flags:
> Got NTLMSSP neg_flags=0x62898215
> NTLMSSP: Set final flags:
> Got NTLMSSP neg_flags=0x60088215
> NTLMSSP Sign/Seal - Initialising with flags:
> Got NTLMSSP neg_flags=0x60088215
>
> Shutdown of remote machine succeeded
> return code = 0

-- 
der tom