samba - Mar 2003 - Samba PDC and MMC - Problems changing password of services

Hy,

im using Samba as PDC.
When im logging into another W2K machine
with MMC an try to change the password
of a service, windows is bringing up the error:
"A device attached to the system is not functioning."

To be exact, this is error:
Winerror.h, 0x000001f = 31 (ERROR_GEN_FAILURE)

If you change the Password of the service on the machine itself
(sitting in front of the machine) it's not a problem.

Some data about the our PDC:
      - SuSE 8.1
      - Kernel 2.4.19 (precompiled binary for SuSE 8.1)
      - Samba 2.2.7a (precompiled binary for SuSE 8.1)
      - The server is the only PDC with no BDC
         There is no MS Server present
      - Every User is domain admin
         domain admin group = @users
      - Password is encrypted
         encrypt passwords = yes
      - Standard smbpasswd
         (no LDAP, no PAM, ...)

Some Data about the Clients:
      - Windows 2000 SP3
      - All member of the domain
      - Every User is a local Admin
      - There are no local accounts on the machine except
         an local admin account. The local admin acccount has
         no permission to access the PDC.

We are using Sophos Antivirus and the SAVADMIN is having the
same Problem, in change Parameters of the local Service.

A strange thing is, that some people can change there password
from the client by using ctrl+alt+del "change password" and some
can't do. The error Message ist something like
"The original password is wrong".

I think it has something to do with rpc-call and there authentication,
but i'm absolutly not sure.

Regards
Joerg


-----------------------------------------------------------------------------------------------

J?rg Junge
EDV-Koordinator

Parit?tischer Wohlfahrtsverband
Landesverband Th?ringen e.V.
Bergstr. 11
99192 Neudietendorf
Deutschland

Tel : +49 36202 26 204
Fax: +49 36202 26 234

On Sat, 2003-03-15 at 01:53, JJunge@paritaet-th.de
wrote:
> Hy,
> 
> im using Samba as PDC.
> When im logging into another W2K machine
> with MMC an try to change the password
> of a service, windows is bringing up the error:
> "A device attached to the system is not functioning."
This is the windows equiv of 'NT_STATUS_UNSUCCESSFUL' - about the most
useless message we can possibly give :-)

We will need to see what's being called, and you would be advised to try
again with Samba 3.0 alpha or Samba HEAD
> A strange thing is, that some people can change there password
> from the client by using ctrl+alt+del "change password" and some
> can't do. The error Message ist something like
> "The original password is wrong".
This is interesting - you should be able to get some idea from the debug
logs - particularly of the 3.0 version.  (At least I know what to look
for in them :-)
> I think it has something to do with rpc-call and there authentication,
> but i'm absolutly not sure.
Only the network and logfile traces will really tell you.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet@pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet@samba.org
Student Network Administrator, Hawker College   abartlet@hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url :
http://lists.samba.org/archive/samba/attachments/20030315/353b3ef1/attachment.bin

Hi guys,
        I have a issue. I have a redhat 8.0 with the stock samba 2.25-10
that ships with it. I have that running as a pdc. the problem is when users
try access a palm pilot it wants local user admin rights. All my clients are
win2k sp3.

I have noticed that it is causing a problem for some other software also. I
know that i need to grant local admin rights for that user but what is the
best method on doing this?

If I try to access softare bylogging in as root on the win2k boxon the pdc
domain it still prevents me from installing a palm pilot or running some
particular software.

All of the software that needs some sort of admin priveledges work fine if
you logon as administrator to the local machine.

Thanks,

Raj


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.461 / Virus Database: 260 - Release Date: 3/10/2003