[Samba] Re: Unable to join Samba server to Win2k domain

2003-12-21 Thread Henrik Larsson 
> Attached is my smb.conf and krb5.conf
>
> The debug log files are too big to attach here but i have uploaded them to
a
> webserver.

Since no one responded, would it be ok to file this as a bug report?

Best regards Henrik



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Unable to join Samba server to Win2k domain

2003-12-18 Thread Henrik Larsson 
> It will be good if you can paste your krb5.conf and smb.conf with the
> mail, so that we can see where you have gone wrong.
> But just to double check some basic issues:

Hi Ivan

Attached is my smb.conf and krb5.conf

The debug log files are too big to attach here but i have uploaded them to a
webserver.

net join ads:
http://www.larsson.as/filesnet-ads-join.txt

net join before a computer account is created in the AD:
http://www.larsson.as/files/net-join-noaccount.txt

net join after a computer account is create in the AD:
http://www.larsson.as/files/net-join-account.txt


Best regards Henrik


begin 666 krb5.conf
M6VQO9V=I;[EMAIL PROTECTED]&5F875L=" ]($9)3$4Z+W9A7!E7!E&%M<&QE+F-O;3HW
M-#D-"B,@(&1E9F%U;'1?9&]M86EN([EMAIL PROTECTED];7!L92YC;VT-"B-]#0H-"EMD
M;VUA:6Y?2$I(&UO2!A
M;[EMAIL PROTECTED] [(&9O65S( T*=VEN8FEN9"!E;G5M(&=R;W5P&%M<&QE(')E"!S964-"B,@=&AE('-M8BYC;VYF(&UA;B!P86=E#0H[(" @
M:&]S=',@86QL;W<@/2 Q.3(N,38X+C$N(#$Y,[EMAIL PROTECTED],BX@,3([EMAIL PROTECTED]
M(&EF('EO=2!W86YT('1O(&%U=&]M871I8V%L;'D@;&]A9"!Y;W5R('!R:6YT
M97(@;&ES="!R871H97(-"B,@=&AA;B!S971T:6YG('[EMAIL PROTECTED] @:6YD:79I
M9'5A;&QY('1H96X@>6]U)VQL(&[EMAIL PROTECTED]&AI7!E('5N;&5S2!S=7!P;W)T960@<')I;G0@"P@:'!U>"P@<6YX
M#0H[(" @<')I;G1I;F<@/2!B2!M;V1E+B!-;W-T('!E;W!L92!W:6QL
M('=A;[EMAIL PROTECTED][EMAIL PROTECTED]('-E8W5R:71Y7VQE
M=F5L+G1X="!F;W(@9&5T86EL2!W:71H('-E8W5R:71Y(#T@2!W:7-H('1O('5S92!P87-S=V]R9"!E;F-R>7!T:6]N+B!0;&5A'0@
M:[EMAIL PROTECTED]&AE(%-A;6)A(&1O8W5M96YT871I;VXN#0HC($1O(&YO="!E;F%B;&4@
M=&AI7!T('!A7!T('!A0T*(R @(" @(" @=&AE(&5N8W)Y<'1E9"!334(@<&%S"!P87-S=V]R9"!S>6YC([EMAIL PROTECTED]("!P87-S=V0@<')O9W)A;2 ]
M("]U'[EMAIL PROTECTED]('1H92!M86YU86P@<&%G97,@9F]R(&1E=&%I;',-"B @
M('-O8VME="!O<'1I;VYS([EMAIL PROTECTED]/1$5,[EMAIL PROTECTED]&/[EMAIL PROTECTED](@
M4T]?4TY$0E5&/[EMAIL PROTECTED](-"@T*(R!#;VYF:6=U<[EMAIL PROTECTED]@=&[EMAIL 
PROTECTED](&UU
M;'1I<&QE(&EN=&5R9F%C97,-"B,@268@>6]U(&AA=F4@;75L=&EP;&4@;F5T
M=V]R:R!I;G1E6]U(&UU6YC:')O;FES871I;VX@
M:&5R90T*(R @2!H:6=H97(@8VAA;F-E(&]F
M('=I;FYI;F<@=&AE(&5L96-T:6]N#0H[(" @<')E9F5R6]U('=A;[EMAIL PROTECTED]@=&[EMAIL PROTECTED]@82!D;VUA:6X@;&]G;VX@&%M<&QE(&)E;&]W(&5X8VQU9&5S('5S92!O9B!N86UE(')E2!T;R!B92!K;F]W;B!V:6$@;&UH;W-T@T*#0HC(%=)3E,@4')O>'[EMAIL PROTECTED]'D@/2!Y97,-"@T*(R!$3E,@4')O>'[EMAIL PROTECTED]65S#0IS:&]R
M="!P65S#0IM86YG;&[EMAIL PROTECTED] ]('EE2!C87)E
M9G5L('=I=&@@8V%S92!S96YS:71I=FET>2 M(&ET(&-A;B!B65S#0H-"B,@56XM8V]M;65N="!T:&[EMAIL PROTECTED];&]W:6YG(&%N9"!C
M2!F;W(@1&]M86EN($QO9V]N
M6QE('!R:6YT('-Y65S('1O(&%L
M;&]W('5S97(@)V=U97-T(&%C8V]U;G0G('1O('!R:6YT#0H[(" @9W5E65S#0H[(" @65S#0H[(" @=W)I=&4@
M;&ES=" ]($!S=&[EMAIL PROTECTED]($]T:&5R(&5X86UP;&5S+B -"B,-"B,@02!P
M2!T:&4@
M9&5F875L="!U2!O=&AE2!T:&ES
M#0HC(&1I2!M=7-T(&)E('=R:71A8FQE(&)Y('1H92!D969A=6QT
M('5S97(N($%N;W1H97(@=7-E2!T:&%T('5S97(@:6YS=&5A9"X-"CM;<'5B;&EC70T*.R @('!A=&@@
M/2 O=7-R+W-O;65W:&5R92]E;'-E+W!U8FQI8PT*.R @('!U8FQI8R ]('EE
M2!T:&4@'1E;F1E9"!T;PT*(R!A7-H87)E70T*.R @(&-O;6UE;G0@/2!-87)Y)W,@86YD($9R
M960G[EMAIL PROTECTED])O=W-E86)L92 ]
M('EE2!M87-K(#T@
&,#http://lists.samba.org/mailman/listinfo/samba

[Samba] Re: Unable to join Samba server to Win2k domain

2003-12-16 Thread Henrik Larsson 
> Anyone know what could cause all these problems or a straight solution how
> to solve them?

Upgraded to 3.0.1, and i still can't add my Samba server to the Windows 2000
domain. Same errors as described in my previous mail.

What information more than the one i supplied could be usefull if i should
add this as a bugreport?

Best regards Henrik



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

[Samba] Unable to join Samba server to Win2k domain

2003-12-13 Thread Henrik Larsson 
Dear Samba users.

I have tried to add my Samba server to a Win2k AD mixed mode domain for
several days. I have searched the Internet for information, but couldn't
find a solution. So I will try to describe my problems here.

I first tried to use "security = ADS" and add the Samba server as a native
member.

I have changed the settings in my krb5.conf and tested this with kinit:
-- cut
# kinit -V
Password for [EMAIL PROTECTED]:
Authenticated to Kerberos v5
-- cut

But when I try to add the server to the domain with the command "net ads
join MEMBER -Uadministrator%password -d 10" I get the following error:
-- cut
[2003/12/13 23:30:00, 1] libsmb/clikrb5.c:ads_krb5_mk_req(269)
  krb5_cc_get_principal failed (No credentials cache found)
[2003/12/13 23:30:00, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(385)
  Got KRB5 session key of length 8
[2003/12/13 23:30:00, 1] utils/net_ads.c:ads_startup(181)
  ads_connect: Invalid credentials
[2003/12/13 23:30:00, 2] utils/net.c:main(759)
  return code = -1
-- cut

If i use a wrong password, I get a "preauthentication failed" so again the
kerberos part should be OK.

I then tried "security = domain".

If I don't create a computer in the AD I get this error when running "net
rpc join MEMBER -Uadministrator%password -d 10":
-- cut
[2003/12/13 23:27:40, 0] rpc_client/cli_pipe.c:rpc_api_pipe(424)
  cli_pipe: return critical error. Error was Call timed out: server did not
respond after 1 milliseconds
[2003/12/13 23:27:40, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(286)
  error setting trust account password: NT_STATUS_UNSUCCESSFUL
Unable to join domain DOMAIN.
[2003/12/13 23:27:40, 2] utils/net.c:main(759)
  return code = 1
-- cut

If I create a computer account and set it to allow pre Window 2000 computers
to use this account I get:
-- cut
[2003/12/13 23:29:28, 1] libsmb/cliconnect.c:cli_full_connection(1426)
  failed tcon_X with NT_STATUS_ACCESS_DENIED
[2003/12/13 23:29:28, 1] utils/net.c:connect_to_ipc_anonymous(179)
  Cannot connect to server (anonymously).  Error was NT_STATUS_ACCESS_DENIED
[2003/12/13 23:29:28, 6] lib/util_sock.c:write_socket(407)
  write_socket(5,45)
[2003/12/13 23:29:28, 6] lib/util_sock.c:write_socket(410)
  write_socket(5,45) wrote 45
[2003/12/13 23:29:28, 10]
lib/util_sock.c:read_smb_length_return_keepalive(463)
  got smb length of 35
[2003/12/13 23:29:28, 5] lib/util.c:show_msg(456)
[2003/12/13 23:29:28, 5] lib/util.c:show_msg(466)
  size=35
  smb_com=0x4
  smb_rcls=0
  smb_reh=0
  smb_err=0
  smb_flg=136
  smb_flg2=51201
  smb_tid=22538
  smb_pid=6905
  smb_uid=3
  smb_mid=28
  smt_wct=0
  smb_bcc=0
Unable to join domain DOMAIN.
-- cut

So as you can see, I haven't really succeed using any method.

Anyone know what could cause all these problems or a straight solution how
to solve them?


Best regards Henrik



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba