search for: cli_rpc_pipe_open_schannel_with_key

dear samba community, we have a big problem on joining a Samba 3.5.6 PDC. Hopefully anyone has an idea/suggestion. When trying to join with a Samba 4.2.10 or 4.3.9 we got the following error on client site: Failed to pull dcerpc auth: NT_STATUS_RPC_PROTOCOL_ERROR. cli_rpc_pipe_open_schannel_with_key: rpc_pipe_bind failed with error NT_STATUS_RPC_PROTOCOL_ERROR libnet_join_ok: failed to open schannel session on netlogon pipe to server rz-vm12 for domain RZ. Error was NT_STATUS_RPC_PROTOCOL_ERROR Failed to join domain: failed to verify domain membership after joining: An RPC protocol error oc...

..._UNK_IF received from remote machine PCNL_PDC pipe \lsarpc fnum 0x2! [2007/05/16 13:24:32, 1] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(601) cli_pipe_validate_current_pdu: Bind NACK received from remote machine PCNL_PDC pipe \samr fnum 0x4! [2007/05/16 13:24:32, 0] rpc_client/cli_pipe.c:cli_rpc_pipe_open_schannel_with_key(2524) cli_rpc_pipe_open_schannel_with_key: cli_rpc_pipe_bind failed with error NT_STATUS_NETWORK_ACCESS_DENIED [2007/05/16 13:24:32, 1] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(601) cli_pipe_validate_current_pdu: Bind NACK received from remote machine PCNL_PDC pipe \lsarpc fnum 0x6!...

...T_UNK_IF received from remote machine PCNL_PDC pipe \lsarpc fnum 0x2! [2007/05/16 13:24:32, 1] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(601) cli_pipe_validate_current_pdu: Bind NACK received from remote machine PCNL_PDC pipe \samr fnum 0x4! [2007/05/16 13:24:32, 0] rpc_client/cli_pipe.c:cli_rpc_pipe_open_schannel_with_key(2524) cli_rpc_pipe_open_schannel_with_key: cli_rpc_pipe_bind failed with error NT_STATUS_NETWORK_ACCESS_DENIED [2007/05/16 13:24:32, 1] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(601) cli_pipe_validate_current_pdu: Bind NACK received from remote machine PCNL_PDC pipe \lsarpc fnum 0x6! [2...

..._UNK_IF received from remote machine PCNL_PDC pipe \lsarpc fnum 0x2! [2007/05/16 13:24:32, 1] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(601) cli_pipe_validate_current_pdu: Bind NACK received from remote machine PCNL_PDC pipe \samr fnum 0x4! [2007/05/16 13:24:32, 0] rpc_client/cli_pipe.c:cli_rpc_pipe_open_schannel_with_key(2524) cli_rpc_pipe_open_schannel_with_key: cli_rpc_pipe_bind failed with error NT_STATUS_NETWORK_ACCESS_DENIED [2007/05/16 13:24:32, 1] rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(601) cli_pipe_validate_current_pdu: Bind NACK received from remote machine PCNL_PDC pipe \lsarpc fnum 0x6!...

dear samba community, we have a big problem on joining a Samba 3.5.6 PDC. Hopefully anyone has an idea/suggestion. When trying to join with a Samba 4.2.10 or 4.3.9 we got the following error on client site: Failed to pull dcerpc auth: NT_STATUS_RPC_PROTOCOL_ERROR. cli_rpc_pipe_open_schannel_with_key: rpc_pipe_bind failed with error NT_STATUS_RPC_PROTOCOL_ERROR libnet_join_ok: failed to open schannel session on netlogon pipe to server rz-vm12 for domain RZ. Error was NT_STATUS_RPC_PROTOCOL_ERROR Failed to join domain: failed to verify domain membership after joining: An RPC protocol error occur...

...tive(0, 0), real(0, 0)] ../source3/lib/util_sock.c:636(open_socket_out_send) Connecting to [redacted IP of DC on different segment] at port 49155 [2016/06/15 11:25:41.772517, 10, pid=6383, effective(0, 0), real(0, 0), class=winbind] ../source3/winbindd/winbindd_cm.c:2698(cm_connect_lsa_tcp) cli_rpc_pipe_open_schannel_with_key failed: NT_STATUS_IO_TIMEOUT smb:conf: [global] workgroup = TEST realm = TEST.EXAMPLE.COM security = ads idmap config * : range = 16777216-33554431 template shell = /bin/false kerberos method = secrets and keytab winbind use default domain = true winbind offline l...

...the latest version.... Now comes in the second problem: I download the latest version 3.0.21c, build it just as I did the previous but when I go to rejoin the domain I get this error; # /usr/local/samba/bin/net rpc join -UAdministrator%xxxxxxxxx [2006/03/10 21:15:48, 0] rpc_client/cli_pipe.c:cli_rpc_pipe_open_schannel_with_key(2495) cli_rpc_pipe_open_schannel_with_key: cli_rpc_pipe_bind failed with error NT_STATUS_NETWORK_ACCESS_DENIED [2006/03/10 21:15:48, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(337) Error in domain join verification (schannel setup failed): NT_STATUS_NETWORK_ACCESS_DENIED Unable to join do...

...the upgrade, winbind no longer works which, according to the information in the bug report, is due to authentication again a Windows 2000 DC. https://bugzilla.samba.org/show_bug.cgi?id=9615 Are there any plans to patch this bug, or is winbind against a W2K DC forever a nonviable combination? cli_rpc_pipe_open_schannel_with_key failed: NT_STATUS_UNSUCCESSFUL msrpc_sid_to_name: failed to looKup sids: NT_STATUS_UNSUCCESSFUL Thanks, Dale

...ipe.c:1745(check_bind_response) check_bind_response: accepted! [2016/05/11 14:28:38.632161, 0] ../source3/rpc_client/cli_pipe.c:1965(rpc_pipe_bind_step_one_done) Failed to pull dcerpc auth: NT_STATUS_RPC_PROTOCOL_ERROR. [2016/05/11 14:28:38.632249, 0] ../source3/rpc_client/cli_pipe.c:3209(cli_rpc_pipe_open_schannel_with_key) cli_rpc_pipe_open_schannel_with_key: rpc_pipe_bind failed with error NT_STATUS_RPC_PROTOCOL_ERROR [2016/05/11 14:28:38.632291, 5] ../lib/dbwrap/dbwrap.c:178(dbwrap_check_lock_order) check lock order 2 for /var/run/samba/g_lock.tdb [2016/05/11 14:28:38.632344, 5] ../lib/dbwrap/dbwrap.c:1...

...o join an Active Directory server? Enter administrateur's password: No realm has been specified! Do you really want to join an Active Directory server? User root with invalid SID S-1-5-21-2287936477-1870703456-424640392-1001 in passdb Failed to pull dcerpc auth: NT_STATUS_RPC_PROTOCOL_ERROR. cli_rpc_pipe_open_schannel_with_key: rpc_pipe_bind failed with error NT_STATUS_RPC_PROTOCOL_ERROR libnet_join_ok: failed to open schannel session on netlogon pipe to server PDC for domain MYDOMAIN. Error was NT_STATUS_RPC_PROTOCOL_ERROR Failed to join domain: failed to verify domain membership after joining: An RPC protocol error...

...sting the join fails. root at mynas:/# net rpc join -U "MYDOMAIN\Administrator" Joined domain MYDOMAIN. root at mynas:/#net rpc testjoin dcerpc_netr_LogonGetCapabilities_r_recv failed with NT_STATUS_INVALID_PARAMETER cli_rpc_pipe_open_schannel_with_key: cli_rpc_pipe_bind failed with error NT_STATUS_INVALID_PARAMETER net_rpc_join_ok: failed to open schannel session on netlogon pipe to server MYPDC for domain MYDOMAIN. Error was NT_STATUS_INVALID_PARAMETER Join to domain 'MYDOMAIN' is not valid: NT_STATUS_INVAL...

...../source3/lib/util_sock.c:636(open_socket_out_send) > Connecting to [redacted IP of DC on different segment] at port 49155 > [2016/06/15 11:25:41.772517, 10, pid=6383, effective(0, 0), real(0, > 0), class=winbind] > ../source3/winbindd/winbindd_cm.c:2698(cm_connect_lsa_tcp) > cli_rpc_pipe_open_schannel_with_key failed: NT_STATUS_IO_TIMEOUT > > > > smb:conf: > [global] > workgroup = TEST > realm = TEST.EXAMPLE.COM > security = ads > idmap config * : range = 16777216-33554431 > template shell = /bin/false > kerberos method = secrets and keytab > winbi...

...> Enter administrateur's password: > No realm has been specified! Do you really want to join an Active > Directory server? > User root with invalid SID > S-1-5-21-2287936477-1870703456-424640392-1001 in passdb > Failed to pull dcerpc auth: NT_STATUS_RPC_PROTOCOL_ERROR. > cli_rpc_pipe_open_schannel_with_key: rpc_pipe_bind failed with error > NT_STATUS_RPC_PROTOCOL_ERROR > libnet_join_ok: failed to open schannel session on netlogon pipe to > server PDC for domain MYDOMAIN. Error was NT_STATUS_RPC_PROTOCOL_ERROR > Failed to join domain: failed to verify domain membership after > joinin...

...-U "MYDOMAIN\Administrator" >> Joined domain MYDOMAIN. >> >> >> >> root at mynas:/#net rpc testjoin >> dcerpc_netr_LogonGetCapabilities_r_recv failed with >> NT_STATUS_INVALID_PARAMETER >> cli_rpc_pipe_open_schannel_with_key: cli_rpc_pipe_bind failed >> with error NT_STATUS_INVALID_PARAMETER >> net_rpc_join_ok: failed to open schannel session on netlogon >> pipe to server MYPDC for domain MYDOMAIN. Error was >> NT_STATUS_INVALID_PARAMETER >> Join to domain 'MY...

...e3/lib/util_sock.c:636(open_socket_out_send) >> Connecting to [redacted IP of DC on different segment] at port 49155 >> [2016/06/15 11:25:41.772517, 10, pid=6383, effective(0, 0), real(0, 0), >> class=winbind] ../source3/winbindd/winbindd_cm.c:2698(cm_connect_lsa_tcp) >> cli_rpc_pipe_open_schannel_with_key failed: NT_STATUS_IO_TIMEOUT >> >> >> >> smb:conf: >> [global] >> workgroup = TEST >> realm = TEST.EXAMPLE.COM >> security = ads >> idmap config * : range = 16777216-33554431 >> template shell = /bin/false >> kerber...

...root at mynas:/# net rpc join -U "MYDOMAIN\Administrator" > Joined domain MYDOMAIN. > > > > root at mynas:/#net rpc testjoin > dcerpc_netr_LogonGetCapabilities_r_recv failed with > NT_STATUS_INVALID_PARAMETER > cli_rpc_pipe_open_schannel_with_key: cli_rpc_pipe_bind failed > with error NT_STATUS_INVALID_PARAMETER > net_rpc_join_ok: failed to open schannel session on netlogon > pipe to server MYPDC for domain MYDOMAIN. Error was > NT_STATUS_INVALID_PARAMETER > Join to domain 'MYDOMAIN' is not val...

...a/g_lock.tdb lock order: 1:<none> 2:/var/run/samba/g_lock.tdb 3:<none> Locking key 434C495B43412D45444D Allocated locked data 0x0x7f025e85e120 Unlocking key 434C495B43412D45444D release lock order 2 for /var/run/samba/g_lock.tdb lock order: 1:<none> 2:<none> 3:<none> cli_rpc_pipe_open_schannel_with_key: opened pipe netlogon to machine ad-domain-controller.domain.local for domain DOMAIN and bound using schannel. signed SMB2 message Join to 'DOMAIN' is OK return code = 0 Freeing parametrics: root at domain-member:~# net rpc info -d10 INFO: Current debug levels: all: 10 tdb: 10 printdr...

...0 000030 smb_io_rpc_iface 000030 smb_io_uuid uuid 0030 data : 8a885d04 0034 data : 1ceb 0036 data : 11c9 0038 data : 9f e8 003a data : 08 00 2b 10 48 60 0040 version: 00000002 check_bind_response: accepted! cli_rpc_pipe_open_schannel_with_key: opened pipe \NETLOGON to machine CITY2 for domain DEP2 and bound using schannel. simple_packet_signature: sequence number 34 client_sign_outgoing_message: sent SMB signature of [000] 84 50 93 F6 61 04 D6 25 .P..a..% store_sequence_for_reply: stored seq = 35 mid = 19 writ...