Eric Boehm
2003-Mar-27 20:00 UTC
[Samba] Samba 2.2.8 is failing on change machine account password
I've noticed that a few systems that I've upgraded to Samba 2.2.8 are not able to change the machine account password. I have security = domain and I am seeing entries like this in the log. [2003/03/27 14:22:23, 1, pid=10302] smbd/service.c:(636) le21pai-1 (47.142.162.19) connect to service export as user wcitiadm (uid=201361, gid=4785) (pid 10302) [2003/03/27 14:22:24, 0, pid=10302] rpc_client/cli_trust.c:(46) domain_client_validate: unable to fetch domain sid. [2003/03/27 14:22:24, 0, pid=10302] rpc_client/cli_trust.c:(46) domain_client_validate: unable to fetch domain sid. [2003/03/27 14:22:24, 0, pid=10302] rpc_client/cli_trust.c:(46) domain_client_validate: unable to fetch domain sid. [2003/03/27 14:22:24, 0, pid=10302] rpc_client/cli_trust.c:(248) 2003/03/27 14:22:24 : change_trust_account_password: Failed to change password for domain AMERICASE. I've tried to debug this without much success. Any assistance in debugging this or resolving this would be appreciated. I am still able to access my shares but the machine account password is not changing as it should. -- Eric M. Boehm /"\ ASCII Ribbon Campaign boehm@nortelnetworks.com \ / No HTML or RTF in mail X No proprietary word-processing Respect Open Standards / \ files in mail
Hansjoerg Maurer
2003-Mar-28 08:44 UTC
[Samba] Samba 2.2.8 is failing on change machine account password
Hi, I have the sampe problem with security=domain but it occurs with older samba versions to. (Solaris 8, NT4 PDC) I have tried serveral setting (upper/lowercase of Domainname (in workgroup and smbpasswd command), adding it via smbpasswd with/without creating the machine account at the NT4 domain before. It works for one week after adding the Samba server to the domain With machine password timeout = 900 you can decrease the time until the problem occurs from one week to eg. 15 min for testing purposes. It is not a real problem, it still works, but it produces strange messages (even on the NT PDC). Greetings Hansj?rg /var/log/samba/log.rmts1-[2003/03/27 16:54:34, 0] rpc_client/cli_netlogon.c:cli_net_req_chal(246) /var/log/samba/log.rmts1-[2003/03/27 16:54:34, 0] rpc_client/cli_login.c:cli_nt_setup_creds(47) /var/log/samba/log.rmts1-[2003/03/27 16:54:34, 0] rpc_client/cli_trust.c:modify_trust_password(142) /var/log/samba/log.rmts1-[2003/03/27 16:54:34, 0] rpc_client/cli_trust.c:change_trust_account_password(248) /var/log/samba/log.rmts1: 2003/03/27 16:54:34 : change_trust_account_password: Failed to change password for domain NTROBOTIC. -- _________________________________________________________________ Dr. Hansjoerg Maurer | LAN- & System-Manager | Deutsches Zentrum | DLR Oberpfaffenhofen f. Luft- und Raumfahrt e.V. | Institut f. Robotik | Postfach 1116 | Muenchner Strasse 20 82230 Wessling | 82234 Wessling Germany | | Tel: 08153/28-2431 | E-mail: Hansjoerg.Maurer@dlr.de Fax: 08153/28-1134 | WWW: http://www.robotic.dlr.de/ __________________________________________________________________