samba - Dec 2008 - Samba4 CIFS proxy: NT_STATUS_NO_LOGON_SERVERS

Hello,

I'm trying to use the cifs proxy vfs module in Samba4. I can join the
domain seemingly without problem. When trying to access the proxy
server (and hence its share) I get NT_STATUS_NO_LOGON_SERVERS.

My setup is as follows:

root@proxy# ./setup/provision  --realm=<realm> --domain=<domain>
--adminpass=<adminpass> \
        --server-role='member server'

root@proxy# <edit smb.conf to add share(s)>
root@proxy# cat /usr/local/samba4/etc/smb.conf

[globals]
        netbios name    = <proxy_netbios_domain>
        workgroup       = <domain>
        realm           = <realm>
        server role     = member server

[share1cifs]
        ntvfs handler = cifs
        cifs:server = <ads_ip_address>
        cifs:domain = <ads_netbios_domain>
        cifs:user = Administrator
        cifs:password = <adminpass>
        cifs:share = share1

root@proxy# /usr/local/samba4/sbin/smbd
root@proxy# net join <ads_netbios_domain> MEMBER -U
Administrator%<adminpass>
Joined domain <domain> (S-1-5-21-2077318297-1746354938-3313494946)

On the Windows 2003 ADS box, I trust the proxy for delegation.

Now, from a Windows 2000 pro box, joined to <domain> and logged in as
a normal user with full rights to share1 (the unproxied share), I try
map \\<proxy_netbios_domain>\share1cifs to a drive, which gives "No
logon servers available... ".

Using Samba3 smbclient on proxy box like so:
$ smbclient -L //localhost -U Administrator%<adminpass>
gives me NT_STATUS_NO_LOGON_SERVERS.

I'm at a loss because I'm not even trying to delegate credentials -
I've given the full spec to cifs vfs via smb.conf.

Are there any Samba4 people on this list?


Thanks,
Gavin

-- 
Gavin Beatty

SEMPER UBI SUB UBI

On Thu, Dec 11, 2008 at 5:37 PM, Gavin Beatty <gavinbeatty@gmail.com>
wrote:
> Hello,
>
> I'm trying to use the cifs proxy vfs module in Samba4. I can join the
> domain seemingly without problem. When trying to access the proxy
> server (and hence its share) I get NT_STATUS_NO_LOGON_SERVERS.
[snip]
> root@proxy# net join <ads_netbios_domain> MEMBER -U
Administrator%<adminpass>
My own fault. I overlooked my use of MEMBER when joining. I intended
to join as a BDC like so:
root@proxy# net join <ads_netbios_domain> BDC -U
Administrator%<adminpass>

All, is well now. Sorry for the noise.

-- 
Gavin Beatty

SEMPER UBI SUB UBI