[Samba] Samba error - Error: 0x80090345

[Rowland Penny]

On 28/11/14 14:58, Ken Bass wrote:
> Hi all, I am really confused on what to try next. I have been running 
> Samba for quite a long time.  I recently updated my PDC and BDC to 
> Centos 7 which runs Samba 4.1.1. That appeared to be working fine for 
> several months. I'm still using NT style domain controllers setup with 
> a common ldap database. Everything seemed to be working until I 
> installed a brand new computer last week. After making the two 
> required registry edits, my new computer joined the domain.
>
> After a fresh install of Win 8.1 one of my .NET applications stopped 
> working (one that uses the .NET Crypto API) - so far I traced it to 
> the following:
> When I try to run 'Credential Manager', it gives the following error:
> Error code: 0x80090345
> Error Message: The requested operation cannot be completed. The 
> computer must be trusted for delegation and the current user account 
> must be configured to allow delegation.
>
> I had no idea what this means. I didn't think delegation applies for 
> NT style domains. My old computer is still working and can bring up 
> the credential manager. I also have a virtual machine joined to the 
> domain which can bring up the credential manager. If I log into a 
> local admin user on this new computer, the credential manager runs.
>
> My ldap entry for the machine shows
> sambaAcctFlags: [W          ]
>
> The domain user I am logging in with is a member of the Domain Admins 
> group. This user and machine can still connect to my various share 
> drives. It just seems to be something with this credential manager 
> thing on the new machine.
>
> Anyone have some ideas/suggestions to help troubleshoot this?
>
>
I think that you may be hitting a windows problem, see here:

http://stackoverflow.com/questions/25571817/msi-error-the-computer-must-be-trusted-for-delegation-caused-by-kb2918614

Rowland