Eric Boehm
2003-Mar-27 20:00 UTC
[Samba] Samba 2.2.8 is failing on change machine account password
I've noticed that a few systems that I've upgraded to Samba 2.2.8 are
not able to change the machine account password.
I have security = domain and I am seeing entries like this in the log.
[2003/03/27 14:22:23, 1, pid=10302] smbd/service.c:(636)
le21pai-1 (47.142.162.19) connect to service export as user wcitiadm
(uid=201361, gid=4785) (pid 10302)
[2003/03/27 14:22:24, 0, pid=10302] rpc_client/cli_trust.c:(46)
domain_client_validate: unable to fetch domain sid.
[2003/03/27 14:22:24, 0, pid=10302] rpc_client/cli_trust.c:(46)
domain_client_validate: unable to fetch domain sid.
[2003/03/27 14:22:24, 0, pid=10302] rpc_client/cli_trust.c:(46)
domain_client_validate: unable to fetch domain sid.
[2003/03/27 14:22:24, 0, pid=10302] rpc_client/cli_trust.c:(248)
2003/03/27 14:22:24 : change_trust_account_password: Failed to change password
for domain AMERICASE.
I've tried to debug this without much success. Any assistance in
debugging this or resolving this would be appreciated.
I am still able to access my shares but the machine account password
is not changing as it should.
--
Eric M. Boehm /"\ ASCII Ribbon Campaign
boehm@nortelnetworks.com \ / No HTML or RTF in mail
X No proprietary word-processing
Respect Open Standards / \ files in mail
Hansjoerg Maurer
2003-Mar-28 08:44 UTC
[Samba] Samba 2.2.8 is failing on change machine account password
Hi,
I have the sampe problem with
security=domain
but it occurs with older samba versions to.
(Solaris 8, NT4 PDC)
I have tried serveral setting (upper/lowercase of Domainname (in
workgroup and smbpasswd command),
adding it via smbpasswd with/without creating the machine account at the
NT4 domain before.
It works for one week after adding the Samba server to the domain
With
machine password timeout = 900
you can decrease the time until the problem occurs from one week to eg.
15 min for
testing purposes.
It is not a real problem, it still works, but it produces strange
messages (even on the NT PDC).
Greetings
Hansj?rg
/var/log/samba/log.rmts1-[2003/03/27 16:54:34, 0]
rpc_client/cli_netlogon.c:cli_net_req_chal(246)
/var/log/samba/log.rmts1-[2003/03/27 16:54:34, 0]
rpc_client/cli_login.c:cli_nt_setup_creds(47)
/var/log/samba/log.rmts1-[2003/03/27 16:54:34, 0]
rpc_client/cli_trust.c:modify_trust_password(142)
/var/log/samba/log.rmts1-[2003/03/27 16:54:34, 0]
rpc_client/cli_trust.c:change_trust_account_password(248)
/var/log/samba/log.rmts1: 2003/03/27 16:54:34 :
change_trust_account_password: Failed to change password for domain
NTROBOTIC.
--
_________________________________________________________________
Dr. Hansjoerg Maurer | LAN- & System-Manager
|
Deutsches Zentrum | DLR Oberpfaffenhofen
f. Luft- und Raumfahrt e.V. |
Institut f. Robotik |
Postfach 1116 | Muenchner Strasse 20
82230 Wessling | 82234 Wessling
Germany |
|
Tel: 08153/28-2431 | E-mail: Hansjoerg.Maurer@dlr.de
Fax: 08153/28-1134 | WWW: http://www.robotic.dlr.de/
__________________________________________________________________