Shane T. Drinkwater
2008-Jun-05 20:11 UTC
[Samba] unable to join a NT4 Domain since 3.0.28a
Hello, My name is Shane Drinkwater. If I use Samba 3.0.29/3.0.30 I cannot join to my NT4 Domain. When running the net command to join I get the following error. [root@testbackup bin]# ./net rpc join -Scsqdomainbackup -UAdministrator Password: [2008/06/05 16:40:35, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(371) Error in domain join verification (credential setup failed): NT_STATUS_ACCESS_DENIED Unable to join domain CSQ. If I down grade my install to Samba 3.0.28a I am able to join. Has there been any new fixes since 3.0.28a that would have broken the net rpc join command??. My smb.conf is as follows [global] netbios name =3D testbk security =3D domain large readwrite =3D yes encrypt passwords =3D yes workgroup =3D CSQ printing =3D cups printcap name =3D cups load printers =3D yes domain master =3D no local master =3D no map to guest =3D bad user name resolve order =3D wins bcast host preferred master =3D no log file =3D /var/log/samba/%m.log socket options =3D TCP_NODELAY SO_SNDBUF=3D16384 SO_RCVBUF=3D16384 wins server =3D 172.27.1.17 #=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3DWinbindd Stuff =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D password server =3D * winbind uid =3D 10000-20000 winbind gid =3D 10000-20000 winbind separator =3D + template shell =3D /bin/bash template homedir =3D /home/%D/%U winbind cache time =3D 60 winbind enum users =3D yes winbind enum groups =3D yes winbind use default domain =3D yes [printers] comment =3D All Printers path =3D /var/spool/samba public =3D yes guest ok =3D yes writable =3D yes printable =3D yes Thank you for your time. Shane No virus found in this outgoing message. Checked by AVG. Version: 7.5.524 / Virus Database: 269.24.6/1485 - Release Date: 6/5/2008 10:07 AM =0A=0ANOTICE: This email may contain legally privileged information. The information=0Ais for the use of only the intended recipient(s) even if addressed=0Aincorrectly. If you are not the intended recipient, please notify the sender=0Athat you have received it in error and then delete it along with any=0Aattachments. Thank you.=0A=0A
Shane T. Drinkwater wrote:> Hello, > My name is Shane Drinkwater. If I use Samba 3.0.29/3.0.30 I cannot join to my NT4 Domain. When running the net command to join I get the following error. > [root@testbackup bin]# ./net rpc join -Scsqdomainbackup -UAdministrator > Password: > [2008/06/05 16:40:35, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(371) > Error in domain join verification (credential setup failed): NT_STATUS_ACCESS_DENIEDThis is fixed in the upstream git tree and will be part of the next samba release (out soon). Guenther -- Günther Deschner GPG-ID: 8EE11688 Red Hat gdeschner@redhat.com Samba Team gd@samba.org