Ver smb 2.2.7a Managers, I am having trouble configuring samba as a domain member authenticating to a win2k domain controller. All other aspects seem to be functioning but samba is generating a log event when attempting to connect to the password server as follows. Machine NDEVDC1 rejected the tconX on the IPC$ share. Error as follows: NT_STATUS_ACCESS_DENIED Any help is appreciated. Aaron Siebert IT Systems Engineer Nagrastar w 303-706-5492 f 303-706-5719 Aaron.Siebert@Nagrastar.com
On Wed, 2003-03-05 at 09:40, Siebert, Aaron wrote:> Ver smb 2.2.7a > > Managers, I am having trouble configuring samba as a domain member > authenticating to a win2k domain controller. All other aspects seem to > be functioning but samba is generating a log event when attempting to > connect to the password server as follows. > Machine NDEVDC1 rejected the tconX on the IPC$ share. Error as follows: > NT_STATUS_ACCESS_DENIED > > Any help is appreciated.Your DC may have 'RestrictAnonymous = 2' set (an NT/Win2k registry setting, also accessible as a group policy). This would cause all non-win2k domain members significant problems, as you then cannot access the NETLOGON pipe required for domain authenticaion (among other things). Andrew Bartlett -- Andrew Bartlett abartlet@pcug.org.au Manager, Authentication Subsystems, Samba Team abartlet@samba.org Student Network Administrator, Hawker College abartlet@hawkerc.net http://samba.org http://build.samba.org http://hawkerc.net -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://lists.samba.org/archive/samba/attachments/20030305/65777a9e/attachment.bin
On Wed, 2003-03-05 at 09:40, Siebert, Aaron wrote:> Ver smb 2.2.7a > > Managers, I am having trouble configuring samba as a domain member > authenticating to a win2k domain controller. All other aspects seem to > be functioning but samba is generating a log event when attempting to > connect to the password server as follows. > Machine NDEVDC1 rejected the tconX on the IPC$ share. Error as follows: > NT_STATUS_ACCESS_DENIED > > Any help is appreciated.Your DC may have 'RestrictAnonymous = 2' set (an NT/Win2k registry setting, also accessible as a group policy). This would cause all non-win2k domain members significant problems, as you then cannot access the NETLOGON pipe required for domain authenticaion (among other things). Andrew Bartlett -- Andrew Bartlett abartlet@pcug.org.au Manager, Authentication Subsystems, Samba Team abartlet@samba.org Student Network Administrator, Hawker College abartlet@hawkerc.net http://samba.org http://build.samba.org http://hawkerc.net -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://lists.samba.org/archive/samba/attachments/20030305/bbde530e/attachment.bin