[Samba] cannot join windows 7 samba4-ad-dc fresh install, get NT_STATUS_INTERNAL_ERROR

[L.P.H. van Belle]

Hai,

I've done some testing and i compaired the outputs of a original debian and own package.
Same result, no errors, everything, i did test 4.1.17 4.5.8 4.5.12 4.6.6 and 4.6.7 servers.
Again same result everything ok. uhh. So what happend then... 

Now i tested again but typed a wrong password.. 
And,, yes, it was a typo in my password, .. (oeps) sorry for the noise. 
Now bit more testing, all with a wrong password. 

A samba 4.5.12 give this output
smbclient -L $(hostname -f) -Uadministrator -msmb2
Enter administrator's password: 
session setup failed: NT_STATUS_LOGON_FAILURE

A 4.6.6 however.. 
smbclient -L $(hostname -f) -Uadministrator -m smb2
NTDOM\administrator's password:
Kinit for administrator at REALM to access member1.internal.domain.tld
failed: Preauthentication failed session setup failed: 
NT_STATUS_LOGON_FAILURE


So somewhere in 4.6 the output changed. 
And i would expect : NT_STATUS_WRONG_PASSWORD 
And not :  NT_STATUS_LOGON_FAILURE 

@Rowland.. 
Pfew, you scarred me. Something wrong in my setup or packages..  
   :-/ your the joker aren't you. :-p  ;-)  


Gr. 

Louis
P.s. i dont have a original debian 4.6.5 running so cant test that one. 
Ow and -msmb2 or not result is the same. 





> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Rowland Penny via samba
> Verzonden: donderdag 10 augustus 2017 12:23
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] cannot join windows 7 samba4-ad-dc 
> fresh install, get NT_STATUS_INTERNAL_ERROR
> 
> On Thu, 10 Aug 2017 11:58:18 +0200
> "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:
> 
> > Hai,
> > 
> > Im missing at least one of these on the PC. 
> > Primary Dns Suffix  . . . . . . . :
> > DNS suffix search list       : 
> > 
> > Are you using DHCP server or static ips on the pc. 
> > Thats where this problem is, i dont think its the server (samba) 
> > setup.
> > 
> > @Rowland, > smbclient -L localhost -U% -d3 Wont work, due to bug in 
> > smbclient thats tries smb1 first ( or something like that )
> 
> Strange, it works for me on a 4.6.0 DC
> 
> > 
> > I suggest test like this, als there also i see a strange reaction. 
> > ( see my output of a 3 time running this command on a 
> member server )
> > 
> > (Member)
> > smbclient -L $(hostname -f) -Uadministrator -m smb2 Enter 
> > NTDOM\administrator's password:
> > Kinit for administrator at REALM to access member1.internal.domain.tld
> > failed: Preauthentication failed session setup failed:
> > NT_STATUS_LOGON_FAILURE
> 
> You seem to have problem here, it works first time for me on 
> a Unix domain member (4.6.5-Debian).
> 
> > 
> > on the DC, i see something different, thats ok, in one go. 
> >  
> > smbclient -L $(hostname -f) -Uadministrator -m smb2 Enter 
> > NTDOM\administrator's password:
> >  
> >         Sharename       Type      Comment
> >         ---------       ----      -------
> >         sysvol          Disk
> >         netlogon        Disk
> >         IPC$            IPC       IPC Service (Samba 4.6.6-Debian)
> >  
> >         Server               Comment
> >         ---------            -------
> >  
> >         Workgroup            Master
> >         ---------            -------
> > 
> > Now, since there is a difference in versions, ive upgrade 
> the DC now 
> > also to 4.6.7. But that show the same result.
> > So small bug in the member version but not that is errors out. 
> 
> I don't think there is a 'small bug' in the member server, I 
> think it is probably in your setup :-(
> 
> Rowland
> 
> > 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>