Hey Samba-Group, We have samba version 2.0.7 installed on HP-UX 10.20 and 11.00. Yesterday evening we switched W2k from mixed to native mode. And after that Samba wasn't working correclty anymore. Some shares on some server worked fine - but the most shares didn't work. What I saw in the log-files was, that samba found the domain, the right domain-controllers and the domain-controller spoke to the samba-server. Untill to the user- autentification everything looked fine. But then I got the error "NT_STATUS_INVALID_COMPUTER_NAME". And samba wasn't able to autentify the user against the Domain. The original setup was like: security = domain password server = * encrypted password = yes workgroup = mydomain That setup worked fine in the mixed mode - and also in our testlab (separeted w2k-domain in native mode). Than I changed to name the password servers - but that also brought the same result. The last change was to switch down to security = server and name the domain-controller as password server. But that is definitly not what I excpect. What I also should mention is that I deleted and created new the server account in the Windows Server Database and also did a smbpasswd to join the domain, which worked. Does anyone of you has any idea what that error means and if there has something to be done to fix that problem. Every answer and idea is welcome. thx & br> Martin Schretzmeier > Sr. Analyst UNIX > IT Operations > > ONE > Connect Austria > Gesellschaft f?r Telekommunikation GmbH > Br?nner Strasse 52 > A - 1210 Vienna > Tel: +43 699 1699 3151 > Fax.: +43 1 277 288 3151 > > email: martin.schretzmeier@one.at > internet: <http://www.one.at> > >
"Schretzmeier, Martin" wrote:> > Hey Samba-Group, > > We have samba version 2.0.7 installed on HP-UX 10.20 and 11.00. > > Yesterday evening we switched W2k from mixed to native > mode. And after that Samba wasn't working correclty anymore. > Some shares on some server worked fine - but the most > shares didn't work. What I saw in the log-files was, that > samba found the domain, the right domain-controllers and > the domain-controller spoke to the samba-server. Untill > to the user- autentification everything looked fine. But then > I got the error "NT_STATUS_INVALID_COMPUTER_NAME". And samba > wasn't able to autentify the user against the Domain. > > The original setup was like: > > security = domain > password server = * > encrypted password = yes > workgroup = mydomain > > That setup worked fine in the mixed mode - and also in > our testlab (separeted w2k-domain in native mode). > > Than I changed to name the password servers - but > that also brought the same result. The last change was > to switch down to security = server and name the > domain-controller as password server. But that is > definitly not what I excpect. > > What I also should mention is that I deleted and > created new the server account in the Windows > Server Database and also did a smbpasswd to join the > domain, which worked. > > Does anyone of you has any idea what that error means > and if there has something to be done to fix that problem. > Every answer and idea is welcome.Martin, Can you reproduce this error using the latest SAMBA_2_2 cvs code? Also could you send me (offline) a level 10 debug log surrounding the error? Also, is the Win2k DC running with or without SP1? Win2k is supposed to provide full backwards compatibility with NetBIOS and ntlmv1. I would be very interested in what is failing. Cheers, jerry ---------------------------------------------------------------------- /\ Gerald (Jerry) Carter Professional Services \/ http://www.valinux.com/ VA Linux Systems gcarter@valinux.com http://www.samba.org/ SAMBA Team jerry@samba.org http://www.plainjoe.org/ jerry@plainjoe.org "...a hundred billion castaways looking for a home." - Sting "Message in a Bottle" ( 1979 )
Hello Martin, You mention that you recreated the machine account after you moved from mixed to native mode; did you verify that the box that enables pre Win2k machines to use the account was checked when you re-created it? You also mention that you changed from 'password server = *' to explicitly naming the domain controllers in your win2k domain, and that didn't work either. Could you try explictly naming ONLY the root DC for the Win2k domain, and see if that helps? hope so, Don -----Original Message----- From: Schretzmeier, Martin [mailto:Martin.Schretzmeier@one.at] Sent: Friday, January 26, 2001 4:24 AM To: 'samba@us5.samba.org' Subject: Samba 2.0.7 - W2K native mode Hey Samba-Group, We have samba version 2.0.7 installed on HP-UX 10.20 and 11.00. Yesterday evening we switched W2k from mixed to native mode. And after that Samba wasn't working correclty anymore. Some shares on some server worked fine - but the most shares didn't work. What I saw in the log-files was, that samba found the domain, the right domain-controllers and the domain-controller spoke to the samba-server. Untill to the user- autentification everything looked fine. But then I got the error "NT_STATUS_INVALID_COMPUTER_NAME". And samba wasn't able to autentify the user against the Domain. The original setup was like: security = domain password server = * encrypted password = yes workgroup = mydomain That setup worked fine in the mixed mode - and also in our testlab (separeted w2k-domain in native mode). Than I changed to name the password servers - but that also brought the same result. The last change was to switch down to security = server and name the domain-controller as password server. But that is definitly not what I excpect. What I also should mention is that I deleted and created new the server account in the Windows Server Database and also did a smbpasswd to join the domain, which worked. Does anyone of you has any idea what that error means and if there has something to be done to fix that problem. Every answer and idea is welcome. thx & br> Martin Schretzmeier > Sr. Analyst UNIX > IT Operations > > ONE > Connect Austria > Gesellschaft f?r Telekommunikation GmbH > Br?nner Strasse 52 > A - 1210 Vienna > Tel: +43 699 1699 3151 > Fax.: +43 1 277 288 3151 > > email: martin.schretzmeier@one.at > internet: <http://www.one.at> > >