[Samba 4] Access to GPO failed

[Son Nguyen]

Wes Deviers wrote:
> On Tuesday 09 December 2008 16:50:04 Andrew Bartlett wrote:
>   
>>>     * *Got user=[] domain=[] workstation=[SRV1] len1=1 len2=0*
>>>
>>>     * *auth_check_password_recv: anonymous authentication for user [NT
>>>       AUTHORITY\ANONYMOUS LOGON] succeeded*
>>>
>>> Please let me know if you have any theory about this problem.
>>>       
>> These things can be a real challenge to debug, but I would start by
>> taking a network trace with wireshark, and see what was the last error
>> before the client message was.
>>
>> Andrew Bartlett
>>     
>
>
> In the past, I've had the same problem since at Alpha4 or so.  What seems to 
> be the problem (at least for me) is when it switches from accessing the server 
> as named (\\felix.fake.domain.local) to trying to access it via the domain to 
> pull the GPO (\\fake.domain.local) it fails about 90% of the time.  Meaning, 
> that if I keep pushing the "Edit Group Policy" button over and over, it will 
> eventually work once.  And then, when I go to save it, if I try to save the 
> changes over and over it will eventually work as well.
>
> I can get into the GP-UID portion of the tree every time, but if I try to edit 
> the policy file by hand (using Notepad), it fails about 90% of the time.  If I 
> traverse the tree using the machine name and NOT the domain, it works every 
> time with no problems (as in, \\felix.fake.domain.local\...\{uuid}\... lets me 
> edit and save the file correctly)  Of course, that doesn't help since all of 
> the GP tools use the domain name and not the machine, so they all fail 
> regardless.
>
> I don't have the patience to try rebooting XP clients enough times to see if 
> the GPO will get -pulled- 10% of the time, but then I stopped trying entirely 
> about a month ago.  
>
> Best!
>
> Wes
>
>   
Hi,
   The enclose is the capture file running at samba4 server. This is 
more information about network configuration:

   * Samba4 server (smbd version 4.0.0alpha6-GIT-6e4cc12): 192.168.9.135
   * Windows 2003: 192.168.9.131
   * Capture before edit the Default Domain Policy untill error message 
appear.

I'm looking forward to your response

Son Nguyen

-------------- next part --------------
A non-text attachment was scrubbed...
Name: capture
Type: application/octet-stream
Size: 14897 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-technical/attachments/20081210/f9f33560/capture.obj