Hi,
?
I am using samba+freeRADIUS talk to AD server on win2003 server.?Everything is
OK when I use samba-3.0.8.?
?
Now I want to updated to samba-3.3.3.? But failed at join to domain controler.
(net ads join -U user%pwd).
?
debug:
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
SPNEGO login failed: Invalid parameter
failed session setup with NT_STATUS_INVALID_PARAMETER
Failed to join domain: failed to lookup DC info for domain 'xxx.COM'
over rpc: Invalid parameter
?
My smb.conf:
AH-02fa83:~$ cat /usr/local/lib/smb.conf
[global]
??????? workgroup =?xxx
??????? netbios name = AH-02fa83
??????? server string = Samba Server
??????? log file = /var/log/samba/%m.log
??????? max log size = 500
??????? security = ads
??????? password server = 10.155.20.81
??????? #Enable support for only NTLMv2 on the server
??????? encrypt passwords = yes
??????? lanman auth = no
??????? ntlm auth = no
??????? socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
??????? dns proxy = no
??????? idmap uid = 16777216-33554431
??????? idmap gid = 16777216-33554431
??????? template shell = /bin/bash
??????? winbind use default domain = no
??????? realm = xxx.COM
?
?Thanks.
John
___________________________________________________________
?????????????????
http://card.mail.cn.yahoo.com/
?
I check the debug message again.
When I use samba-3.0. It use cli_session_setup_plaintext to do net-join.
When I use samba-3.3.3. It use cli_session_setup_ntlmssp.? And AD return
STATUS_MORE_PROCESSING_REQUIRED in Session setup AndX Response frame.??
?
John.
--- 2009-04-29 11:26:20? "John " elmer_krb@yahoo.cn ?
???: "?? " <elmer_krb@yahoo.cn>
??: net join: Failed to parse NTLMSSP packet
???: samba@lists.samba.org
??: 2009-04-29 11:26:20
Hi,
?
I am using samba+freeRADIUS talk to AD server on win2003 server.?Everything is
OK when I use samba-3.0.8.?
?
Now I want to updated to samba-3.3.3.? But failed at join to domain controler.
(net ads join -U user%pwd).
?
debug:
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
SPNEGO login failed: Invalid parameter
failed session setup with NT_STATUS_INVALID_PARAMETER
Failed to join domain: failed to lookup DC info for domain 'xxx.COM'
over rpc: Invalid parameter
?
My smb.conf:
AH-02fa83:~$ cat /usr/local/lib/smb.conf
[global]
??????? workgroup =?xxx
??????? netbios name = AH-02fa83
??????? server string = Samba Server
??????? log file = /var/log/samba/%m.log
??????? max log size = 500
??????? security = ads
??????? password server = 10.155.20.81
??????? #Enable support for only NTLMv2 on the server
??????? encrypt passwords = yes
??????? lanman auth = no
??????? ntlm auth = no
??????? socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
??????? dns proxy = no
??????? idmap uid = 16777216-33554431
??????? idmap gid = 16777216-33554431
??????? template shell = /bin/bash
??????? winbind use default domain = no
??????? realm = xxx.COM
?
?Thanks.
John
?????????????????
___________________________________________________________
?????????????????
http://card.mail.cn.yahoo.com/
?
I captured the pkts. It show STATUS_MORE_PROCESSING_REQUIRED error.
Please see the attached doc.
--- 2009-04-29 11:26:20?? <elmer_krb@yahoo.cn>?
???: "?? " <elmer_krb@yahoo.cn>
??: net join: Failed to parse NTLMSSP packet
???: samba@lists.samba.org
??: 2009-04-29 11:26:20
Hi,
?
I am using samba+freeRADIUS talk to AD server on win2003 server.?Everything is
OK when I use samba-3.0.8.?
?
Now I want to updated to samba-3.3.3.? But failed at join to domain controler.
(net ads join -U user%pwd).
?
debug:
Failed to parse NTLMSSP packet, could not extract NTLMSSP command
SPNEGO login failed: Invalid parameter
failed session setup with NT_STATUS_INVALID_PARAMETER
Failed to join domain: failed to lookup DC info for domain 'xxx.COM'
over rpc: Invalid parameter
?
My smb.conf:
AH-02fa83:~$ cat /usr/local/lib/smb.conf
[global]
??????? workgroup =?xxx
??????? netbios name = AH-02fa83
??????? server string = Samba Server
??????? log file = /var/log/samba/%m.log
??????? max log size = 500
??????? security = ads
??????? password server = 10.155.20.81
??????? #Enable support for only NTLMv2 on the server
??????? encrypt passwords = yes
??????? lanman auth = no
??????? ntlm auth = no
??????? socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
??????? dns proxy = no
??????? idmap uid = 16777216-33554431
??????? idmap gid = 16777216-33554431
??????? template shell = /bin/bash
??????? winbind use default domain = no
??????? realm = xxx.COM
?
?Thanks.
John
?????????????????
___________________________________________________________
?????????????????
http://card.mail.cn.yahoo.com/