[Samba] Why would "net rpc rights grant" fail ?

Koenraad Lelong samba.k.lelong at ace-electronics.be
Fri Apr 11 07:08:04 MDT 2014


Hi,

Me again, still trying to migrate my samba3-server.

Using the script op L.P.H. van Belle, there is one failure :
net rpc rights grant ${SETNTDOM}\\"Domain Admins" 
SeDiskOperatorPrivilege -U${SETNTUSER}

This is the result :
==========SE Privileges ===============================
Giving group Domain Admins the SeDiskOperatorPrivilege rights.
Enter Admikoen's password:
Could not connect to server 127.0.0.1
Connection failed: NT_STATUS_INVALID_NETWORK_RESPONSE

In my script, just after starting samba I added AdmiKoen to the "Domain 
Admins". The Kerberos-tests work OK, SE privileges fails (see above), 
testing DNS-records is OK, adding reverse zones is also OK.

I tried to add a Win7-PC, but that fails also, but I don't know if it's 
related to the SE privileges fail.
This is what I get on the Win7-PC (translated from dutch) : The given 
server can't execute the requested operation.

So the question is : where do I look to detect what's going wrong ?

Thanks for any pointers.

P.S. the Kerberos test outputs : Etype (skey, tkt): arcfour-hmac, 
arcfour-hmac
while the "provision" version outputs : Etype (skey, tkt): 
aes256-cts-hmac-sha1-96, aes256-cts-hmac-sha1-96
Is this related to the failure ?

Regards,

Koenraad.


More information about the samba mailing list