[Samba] Samba 3.4.9 net rpc shutdown and XP Domain client

[Thomas Bork]

Hi @all,

this is an very old problem, posted the first time 2005 to 
samba-testers at samba.org:

If I have a Domain client with WinXP, which is part of a domain and 
using this client, if the PDC is not available and want to remote shut 
down this client with the net tool from other servers, then this is not 
possible, because net tries to authenticate against the PDC:

testeis # net -d3 -S "XP" -U "Administrator"%"xxx" rpc shutdown -t "60" 
-C "Shutting down in 1 minutes."
[2010/10/31 01:22:10,  3] param/loadparm.c:9039(lp_load_ex)
   lp_load_ex: refreshing parameters
[2010/10/31 01:22:10,  3] param/loadparm.c:4848(init_globals)
   Initialising global parameters
[2010/10/31 01:22:10,  2] param/loadparm.c:4707(max_open_files)
   rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)
[2010/10/31 01:22:10,  3] ../lib/util/params.c:550(pm_process)
   params.c:pm_process() - Processing configuration file "/etc/smb.conf"
[2010/10/31 01:22:10,  3] param/loadparm.c:7726(do_section)
   Processing section "[global]"
[2010/10/31 01:22:10,  2] lib/interface.c:478(interpret_interface)
   interpret_interface: Adding interface 127.0.0.1/8
[2010/10/31 01:22:10,  2] lib/interface.c:340(add_interface)
   added interface 127.0.0.1/8 ip=127.0.0.1 bcast=127.255.255.255 
netmask=255.0.0.0
[2010/10/31 01:22:10,  2] lib/interface.c:478(interpret_interface)
   interpret_interface: Adding interface 192.168.0.12/255.255.255.0
[2010/10/31 01:22:10,  2] lib/interface.c:340(add_interface)
   added interface 192.168.0.12/25 ip=192.168.0.12 bcast=192.168.0.255 
netmask=255.255.255.0
lp_load_ex: refreshing parameters
params.c:pm_process() - Processing configuration file "/etc/smb.conf"
Processing section "[global]"
interpret_interface: Adding interface 127.0.0.1/8
added interface 127.0.0.1/8 ip=127.0.0.1 bcast=127.255.255.255 
netmask=255.0.0.0
interpret_interface: Adding interface 192.168.0.12/255.255.255.0
added interface 192.168.0.12/25 ip=192.168.0.12 bcast=192.168.0.255 
netmask=255.255.255.0
Connecting to host=XP
Connecting to 192.168.0.37 at port 445
Connecting to 192.168.0.37 at port 139
Doing spnego session setup (blob length=16)
server didn't supply a full spnego negprot
Got challenge flags:
Got NTLMSSP neg_flags=0x62898215
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x60088215
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x60088215
SPNEGO login failed: No logon servers
failed session setup with NT_STATUS_NO_LOGON_SERVERS
Could not connect to server XP
Connection failed: NT_STATUS_NO_LOGON_SERVERS
failed to make ipc connection: NT_STATUS_NO_LOGON_SERVERS
initshutdown pipe failed, trying winreg pipe
Connecting to host=XP
Connecting to 192.168.0.37 at port 445
Doing spnego session setup (blob length=16)
server didn't supply a full spnego negprot
Got challenge flags:
Got NTLMSSP neg_flags=0x62898215
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x60088215
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x60088215
SPNEGO login failed: No logon servers
failed session setup with NT_STATUS_NO_LOGON_SERVERS
Could not connect to server XP
Connection failed: NT_STATUS_NO_LOGON_SERVERS
failed to make ipc connection: NT_STATUS_NO_LOGON_SERVERS
return code = -1


Is this a bug?
I think, if the PDC is not available, it should also be possible to 
remote shutdown the clients.


Here is the same thing, if the PDC is available:

testeis # net -d3 -S "XP" -U "Administrator"%"xxx" rpc shutdown -t "60" 
-C "Shutting down in 1 minutes."
[2010/10/31 01:25:43,  3] param/loadparm.c:9039(lp_load_ex)
   lp_load_ex: refreshing parameters
[2010/10/31 01:25:43,  3] param/loadparm.c:4848(init_globals)
   Initialising global parameters
[2010/10/31 01:25:43,  2] param/loadparm.c:4707(max_open_files)
   rlimit_max: rlimit_max (1024) below minimum Windows limit (16384)
[2010/10/31 01:25:43,  3] ../lib/util/params.c:550(pm_process)
   params.c:pm_process() - Processing configuration file "/etc/smb.conf"
[2010/10/31 01:25:43,  3] param/loadparm.c:7726(do_section)
   Processing section "[global]"
[2010/10/31 01:25:43,  2] lib/interface.c:478(interpret_interface)
   interpret_interface: Adding interface 127.0.0.1/8
[2010/10/31 01:25:43,  2] lib/interface.c:340(add_interface)
   added interface 127.0.0.1/8 ip=127.0.0.1 bcast=127.255.255.255 
netmask=255.0.0.0
[2010/10/31 01:25:43,  2] lib/interface.c:478(interpret_interface)
   interpret_interface: Adding interface 192.168.0.12/255.255.255.0
[2010/10/31 01:25:43,  2] lib/interface.c:340(add_interface)
   added interface 192.168.0.12/25 ip=192.168.0.12 bcast=192.168.0.255 
netmask=255.255.255.0
lp_load_ex: refreshing parameters
params.c:pm_process() - Processing configuration file "/etc/smb.conf"
Processing section "[global]"
interpret_interface: Adding interface 127.0.0.1/8
added interface 127.0.0.1/8 ip=127.0.0.1 bcast=127.255.255.255 
netmask=255.0.0.0
interpret_interface: Adding interface 192.168.0.12/255.255.255.0
added interface 192.168.0.12/25 ip=192.168.0.12 bcast=192.168.0.255 
netmask=255.255.255.0
Connecting to host=XP
Connecting to 192.168.0.37 at port 445
Connecting to 192.168.0.37 at port 139
Doing spnego session setup (blob length=16)
server didn't supply a full spnego negprot
Got challenge flags:
Got NTLMSSP neg_flags=0x62898215
NTLMSSP: Set final flags:
Got NTLMSSP neg_flags=0x60088215
NTLMSSP Sign/Seal - Initialising with flags:
Got NTLMSSP neg_flags=0x60088215

Shutdown of remote machine succeeded
return code = 0

-- 
der tom
[eisfair-team]