I have 3.0.2a (with about 75 machines/users) installed as a PDC for my Win2k users and found an oddity. (waiting for a bin version of 3.0.3 for RH8.0) All was fine before I left 2.2.8.... But now when users hit <CTL>-<ALT>-<DEL> and change the password, they get "domain not available". When they log in, they get the logon scripts to execute, and anything else I do to list users from the domain controller, they come up. Everything else is just working fine, so I am at a loss on why this one specific thing is broke. What is odd is the password DOES change. But a user wouldn't know because of that message. I tried a lot of things. I disabled Unix sync, I migrated to tdbsam backend (migration went find). I am literally banging my head against the wall. Thoughts? Thanks for your time, JMS
On Sat, 2004-05-01 at 09:22, Josh Skains wrote:> I have 3.0.2a (with about 75 machines/users) installed as a PDC for my Win2k users and found an oddity. (waiting for a bin version of 3.0.3 for RH8.0) > > All was fine before I left 2.2.8.... But now when users hit <CTL>-<ALT>-<DEL> and change the password, they get "domain not available". When they log in, they get the logon scripts to execute, and anything else I do to list users from the domain controller, they come up. Everything else is just working fine, so I am at a loss on why this one specific thing is broke. > > What is odd is the password DOES change. But a user wouldn't know because of that message. > > I tried a lot of things. I disabled Unix sync, I migrated to tdbsam backend (migration went find). > > I am literally banging my head against the wall.Known issue with MS04-11/KB828241. (see many other posts on this list). The fact that it works with Samba 2.2.8 is interesting. I have reproduced it locally, but it not clear if there are easy solutions. Can you please confirm that it did work with 2.2.8a? Andrew Bartlett -- Andrew Bartlett abartlet@pcug.org.au Manager, Authentication Subsystems, Samba Team abartlet@samba.org Student Network Administrator, Hawker College abartlet@hawkerc.net http://samba.org http://build.samba.org http://hawkerc.net -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://lists.samba.org/archive/samba/attachments/20040501/09e4d6f3/attachment.bin
Yup... 2.2.8.... But I think I may understand the issue. It only seems to happen on workstations on a subnet that is not linked to the PDC (Samba). If the workstation is directly on the subnet the PDC is sitting on, there seems to be no issue... Does this help with some resolve? Is it some issue with WINS? I am also using WINS, which is a seperate Samba server. I am also specifying the WINS address through DHCP. JMS -----Original Message----- From: Andrew Bartlett [mailto:abartlet@samba.org] Sent: Fri 4/30/2004 7:09 PM To: Josh Skains Cc: samba@lists.samba.org Subject: Re: [Samba] My PDC Conversion Project
On Sat, 2004-05-01 at 18:20, Josh Skains wrote:> Yup... 2.2.8.... But I think I may understand the issue. > It only seems to happen on workstations on a subnet that is > not linked to the PDC (Samba).If password changes work (no weird errors on clients) from any MS04-11 patched machine, then you have a different issue. The password change issue is the same, for all MS04-11 patched machines, and does not related to WINS etc (as far as we know...) Andrew Bartlett -- Andrew Bartlett abartlet@pcug.org.au Manager, Authentication Subsystems, Samba Team abartlet@samba.org Student Network Administrator, Hawker College abartlet@hawkerc.net http://samba.org http://build.samba.org http://hawkerc.net -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part Url : http://lists.samba.org/archive/samba/attachments/20040501/9faa77f6/attachment.bin
It did work with 2.2.8a, but that was apparently before the release of this hotfix. I verified that my problem is infact the same hotfix issue. Machines I have that don't have this hotfix work fine even on the new setup. The ones that do have it get the "domain not avalible" error. JMS -----Original Message----- From: Andrew Bartlett [mailto:abartlet@samba.org] Sent: Friday, April 30, 2004 7:10 PM To: Josh Skains Cc: samba@lists.samba.org Subject: Re: [Samba] My PDC Conversion Project On Sat, 2004-05-01 at 09:22, Josh Skains wrote:> I have 3.0.2a (with about 75 machines/users) installed as a PDC for my Win2k users and found an oddity. (waiting for a bin version of 3.0.3 for RH8.0) > > All was fine before I left 2.2.8.... But now when users hit <CTL>-<ALT>-<DEL> and change the password, they get "domain not available". When they log in, they get the logon scripts to execute, and anything else I do to list users from the domain controller, they come up. Everything else is just working fine, so I am at a loss on why this one specific thing is broke. > > What is odd is the password DOES change. But a user wouldn't know because of that message. > > I tried a lot of things. I disabled Unix sync, I migrated to tdbsam backend (migration went find). > > I am literally banging my head against the wall.Known issue with MS04-11/KB828241. (see many other posts on this list). The fact that it works with Samba 2.2.8 is interesting. I have reproduced it locally, but it not clear if there are easy solutions. Can you please confirm that it did work with 2.2.8a? Andrew Bartlett -- Andrew Bartlett abartlet@pcug.org.au Manager, Authentication Subsystems, Samba Team abartlet@samba.org Student Network Administrator, Hawker College abartlet@hawkerc.net http://samba.org http://build.samba.org http://hawkerc.net