Problem with Machine Accounts
Don Brearley
donbrearley at hcc.mnscu.edu
Mon Sep 29 21:58:46 GMT 2003
Hello,
I am currently experiencing a bizzare problem with Windows 2000 PC's
on my LAN connecting to a samba (version 2.2.8a) PDC. When people boot
up their PC's, and attempt to authenticate to the domain, a message comes
back:
"The system cannot log you on to this domain because the system's computer
account in its primary domain is missing or the password on that account is
incorrect"
I am forced to unjoin the domain, reboot, and then rejoin the domain. Several
PC's again do not authenticate only a few hours after I rejoin the domain.
It's as though the machine account's password is being changed client side, and
then not being updated server-side.
Even when the domain authentication fails, I can still login to the PC as
the local administrator and connect to a share on the PDC with no problem.
I have been reading the mailing lists and can find almost nothing dealing
with this particular problem. I already have a nobody account, and I have
encrypted passwords = yes in smb.conf. And about 95% of the machines that
use the PDC, still work.
If anyone could give me a hand with this one, I'd appreciate it very much.
Thanks!
- Don Brearley
HCC Computer Services
http://www.hibbing.edu
Here is a sample from the log file:
[2003/09/22 11:03:17, 4] libsmb/credentials.c:cred_create(91)
cred_create
[2003/09/22 11:03:17, 5] libsmb/credentials.c:cred_create(93)
sess_key : EDCFAA5C1186C253
[2003/09/22 11:03:17, 5] libsmb/credentials.c:cred_create(94)
stor_cred: 6A4FF25039CE7787
[2003/09/22 11:03:17, 5] libsmb/credentials.c:cred_create(95)
timestamp: 0
[2003/09/22 11:03:17, 5] libsmb/credentials.c:cred_create(96)
timecred : 6A4FF25039CE7787
[2003/09/22 11:03:17, 5] libsmb/credentials.c:cred_create(97)
calc_cred: A1273E3DC1386420
[2003/09/22 11:03:17, 4] libsmb/credentials.c:cred_assert(122)
cred_assert
[2003/09/22 11:03:17, 5] libsmb/credentials.c:cred_assert(124)
challenge : 6F9CC535DA25515B
[2003/09/22 11:03:17, 5] libsmb/credentials.c:cred_assert(125)
calculated: A1273E3DC1386420
[2003/09/22 11:03:17, 5] libsmb/credentials.c:cred_assert(134)
credentials check wrong
[2003/09/22 11:03:17, 5] rpc_parse/parse_prs.c:prs_debug(60)
000000 net_io_r_auth_2
[2003/09/22 11:03:17, 6] rpc_parse/parse_prs.c:prs_debug(60)
000000 smb_io_chal
[2003/09/22 11:03:17, 5] rpc_parse/parse_prs.c:prs_uint8s(675)
0000 data: 34 f3 bf bf 39 a7 1e 28
[2003/09/22 11:03:17, 6] rpc_parse/parse_prs.c:prs_debug(60)
000008 net_io_neg_flags
[2003/09/22 11:03:17, 5] rpc_parse/parse_prs.c:prs_uint32(588)
0008 neg_flags: 000001ff
[2003/09/22 11:03:17, 5] rpc_parse/parse_prs.c:prs_ntstatus(618)
000c status: NT_STATUS_ACCESS_DENIED
More information about the samba-technical
mailing list