can someone please tell me why im getting this error, i can join my other AD servers just this one fails. root@sunserver:/usr/local/samba/var# net join -d 3 -w fsa.com -S WIN2KSERVER -U Administrator [2004/09/20 17:58:31, 3] param/loadparm.c:lp_load(3897) lp_load: refreshing parameters [2004/09/20 17:58:31, 3] param/loadparm.c:init_globals(1307) Initialising global parameters [2004/09/20 17:58:31, 3] param/params.c:pm_process(566) params.c:pm_process() - Processing configuration file "/usr/local/samba/lib/smb.conf" [2004/09/20 17:58:31, 3] param/loadparm.c:do_section(3390) Processing section "[Global]" [2004/09/20 17:58:31, 2] lib/interface.c:add_interface(79) added interface ip=192.168.0.5 bcast=192.168.0.255 nmask=255.255.255.0 [2004/09/20 17:58:31, 3] libsmb/cliconnect.c:cli_start_connection(1376) Connecting to host=WIN2KSERVER [2004/09/20 17:58:31, 3] lib/util_sock.c:open_socket_out(752) Connecting to 192.168.0.10 at port 445 [2004/09/20 17:58:31, 1] libsmb/cliconnect.c:cli_full_connection(1476) failed tcon_X with NT_STATUS_ACCESS_DENIED [2004/09/20 17:58:31, 1] utils/net.c:connect_to_ipc_anonymous(191) Cannot connect to server (anonymously). Error was NT_STATUS_ACCESS_DENIED Password: ____________________________________ This e-mail message is for the sole use of the intended recipient(s) and may contain proprietary, confidential and/or privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient (or an employee or agent responsible to deliver it to the intended recipient), you may not copy or deliver this message to anyone. In such case, you should destroy this message and kindly notify the sender by reply e-mail.
egold@fsa.com wrote:> can someone please tell me why im getting this error, i can join my other > AD servers just this one fails....> [2004/09/20 17:58:31, 3] libsmb/cliconnect.c:cli_start_connection(1376) > Connecting to host=WIN2KSERVER > [2004/09/20 17:58:31, 3] lib/util_sock.c:open_socket_out(752) > Connecting to 192.168.0.10 at port 445 > [2004/09/20 17:58:31, 1] libsmb/cliconnect.c:cli_full_connection(1476) > failed tcon_X with NT_STATUS_ACCESS_DENIED > [2004/09/20 17:58:31, 1] utils/net.c:connect_to_ipc_anonymous(191) > Cannot connect to server (anonymously). Error was > NT_STATUS_ACCESS_DENIEDCould be a firewall blocking access to port 445 Igor
egold@fsa.com
2004-Sep-21 19:25 UTC
[Samba] Re: failed tcon_X with NT_STATUS_ACCESS_DENIED
no there is no firewall between these, thanks
i found a problem (thanks to John Terpstra) with my windows AD servers,
that may be my prob.
im testing it now.
thanks
Igor Belyi
<sambauser@kateho
k.ac93.org> To
Sent by: samba@lists.samba.org
samba-bounces+ego cc
ld=fsa.com@lists.
samba.org Subject
[Samba] Re: failed tcon_X with
NT_STATUS_ACCESS_DENIED
09/21/2004 03:20
PM
egold@fsa.com wrote:> can someone please tell me why im getting this error, i can join my other
> AD servers just this one fails.
...> [2004/09/20 17:58:31, 3] libsmb/cliconnect.c:cli_start_connection(1376)
> Connecting to host=WIN2KSERVER
> [2004/09/20 17:58:31, 3] lib/util_sock.c:open_socket_out(752)
> Connecting to 192.168.0.10 at port 445
> [2004/09/20 17:58:31, 1] libsmb/cliconnect.c:cli_full_connection(1476)
> failed tcon_X with NT_STATUS_ACCESS_DENIED
> [2004/09/20 17:58:31, 1] utils/net.c:connect_to_ipc_anonymous(191)
> Cannot connect to server (anonymously). Error was
> NT_STATUS_ACCESS_DENIED
Could be a firewall blocking access to port 445
Igor
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
____________________________________
This e-mail message is for the sole use of the intended recipient(s) and
may contain proprietary, confidential and/or privileged information. Any
unauthorized review, use, disclosure or distribution is prohibited. If you
are not the intended recipient (or an employee or agent responsible to
deliver it to the intended recipient), you may not copy or deliver this
message to anyone. In such case, you should destroy this message and kindly
notify the sender by reply e-mail.
John H Terpstra
2004-Sep-21 20:02 UTC
[Samba] Re: failed tcon_X with NT_STATUS_ACCESS_DENIED
On Tuesday 21 September 2004 13:20, Igor Belyi wrote:> egold@fsa.com wrote: > > can someone please tell me why im getting this error, i can join my other > > AD servers just this one fails. > > ... > > > [2004/09/20 17:58:31, 3] libsmb/cliconnect.c:cli_start_connection(1376) > > Connecting to host=WIN2KSERVER > > [2004/09/20 17:58:31, 3] lib/util_sock.c:open_socket_out(752) > > Connecting to 192.168.0.10 at port 445 > > [2004/09/20 17:58:31, 1] libsmb/cliconnect.c:cli_full_connection(1476) > > failed tcon_X with NT_STATUS_ACCESS_DENIED > > [2004/09/20 17:58:31, 1] utils/net.c:connect_to_ipc_anonymous(191) > > Cannot connect to server (anonymously). Error was > > NT_STATUS_ACCESS_DENIED > > Could be a firewall blocking access to port 445It could also mean that on this WIN2KSERVER anonymous access has been disabled via a registry (security) setting. That is a likely cause. - John T. -- John H Terpstra Samba-Team Member Phone: +1 (650) 580-8668 Author: The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556 Samba-3 by Example, ISBN: 0131472216 Hardening Linux, ISBN: 0072254971 OpenLDAP by Example, ISBN: 0131488732 Other books in production.
egold@fsa.com
2004-Sep-22 14:34 UTC
[Samba] Re: failed tcon_X with NT_STATUS_ACCESS_DENIED
It turned out that 2 of my 4 windows AD servers have anonymous access
disabled. The other 2 have it enabled.
So i am temporarily using only the 2 AD servers which allow anonymous
access.
My windows admins want to change all the windows AD servers to disable
anonymous access.
so my question is:
how can i get samba to use windows AD with anonymous access disabled?
why does samba need anonymous access?
im running solaris 8 and samba 3.0.7.
thanks!
John H Terpstra
<jht@samba.org>
Sent by: To
samba-bounces+ego samba@lists.samba.org
ld=fsa.com@lists. cc
samba.org
Subject
Re: [Samba] Re: failed tcon_X with
09/21/2004 03:30 NT_STATUS_ACCESS_DENIED
PM
Please respond to
jht@samba.org
On Tuesday 21 September 2004 13:20, Igor Belyi wrote:> egold@fsa.com wrote:
> > can someone please tell me why im getting this error, i can join my
other> > AD servers just this one fails.
>
> ...
>
> > [2004/09/20 17:58:31, 3]
libsmb/cliconnect.c:cli_start_connection(1376)
> > Connecting to host=WIN2KSERVER
> > [2004/09/20 17:58:31, 3] lib/util_sock.c:open_socket_out(752)
> > Connecting to 192.168.0.10 at port 445
> > [2004/09/20 17:58:31, 1] libsmb/cliconnect.c:cli_full_connection(1476)
> > failed tcon_X with NT_STATUS_ACCESS_DENIED
> > [2004/09/20 17:58:31, 1] utils/net.c:connect_to_ipc_anonymous(191)
> > Cannot connect to server (anonymously). Error was
> > NT_STATUS_ACCESS_DENIED
>
> Could be a firewall blocking access to port 445
It could also mean that on this WIN2KSERVER anonymous access has been
disabled
via a registry (security) setting. That is a likely cause.
- John T.
--
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668
Author:
The Official Samba-3 HOWTO & Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
OpenLDAP by Example, ISBN: 0131488732
Other books in production.
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
____________________________________
This e-mail message is for the sole use of the intended recipient(s) and
may contain proprietary, confidential and/or privileged information. Any
unauthorized review, use, disclosure or distribution is prohibited. If you
are not the intended recipient (or an employee or agent responsible to
deliver it to the intended recipient), you may not copy or deliver this
message to anyone. In such case, you should destroy this message and kindly
notify the sender by reply e-mail.