[Samba] Can't join AD anymore after migration to 3.0.30
- Date: Wed, 04 Jun 2008 16:08:44 +0200
- From: Jens Nissen <jens.nissen@xxxxxxx>
- Subject: [Samba] Can't join AD anymore after migration to 3.0.30
After migrating from 3.0.26a to 3.0.30 I cannot join my AD member server to the domain anymore:
I get a DCERPC_FAULT_INVALID_TAG.As I didn't change my Windows 2000 SBS Server, this looks like a new feature in Samba 3.0.30.
Do I have to also migrate my Heimdal - if so, which version is required? Kind regards, Jens P.S: Is there a way to find out the code changes in Samba 3.0.30? I didn't find a 3.0.30 tag in the tags nor in the branches.The latest tag is 3.0.26a. This makes it somewhat difficult to figure out, what could be different.
Or am I looking in the wrong places in the repository? Updating http://www.samba.org/samba/subversion.html would be nice, as the "major current branches" indicated there do not exist. P.P.S: Log and Configuration: ------------------------------------------------------------------------- Log on level 10 looks like this:net ads join -d 10 -w $WORKGROUP -U$Administrator$password -s "/etc/config/smb.conf"
-------------------------------------------------------------------------
[2008/06/04 15:16:13, 10] lib/util.c:dump_data(2264)
[000] 00 05 00 03 03 10 00 00 00 20 00 00 00 0B 00 00 ........ . ......
[010] 00 00 00 00 00 00 00 00 00 06 00 00 1C 00 00 00 ........ ........
[020] 00 .
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_debug(84)
000000 smb_io_rpc_hdr rpc_hdr
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0000 major : 05
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0001 minor : 00
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0002 pkt_type : 03
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0003 flags : 03
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0004 pack_type0: 10
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0005 pack_type1: 00
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0006 pack_type2: 00
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0007 pack_type3: 00
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint16(681)
0008 frag_len : 0020
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint16(681)
000a auth_len : 0000
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint32(710)
000c call_id : 0000000b
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_debug(84)
000010 smb_io_rpc_hdr_resp rpc_hdr_resp
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint32(710)
0010 alloc_hint: 00000000
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint16(681)
0014 context_id: 0000
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0016 cancel_ct : 00
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint8(616)
0017 reserved : 00
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_debug(84)
000018 smb_io_rpc_hdr_fault fault
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_dcerpc_status(799)
0018 status : DCERPC_FAULT_INVALID_TAG
[2008/06/04 15:16:13, 5] rpc_parse/parse_prs.c:prs_uint32(710)
001c reserved: 00000000
[2008/06/04 15:16:13, 1]
rpc_client/cli_pipe.c:cli_pipe_validate_current_pdu(625)
cli_pipe_validate_current_pdu: RPC fault code
DCERPC_FAULT_INVALID_TAG received from remote machine sbs2000.domain.
test pipe \samr fnum 0x4005! [2008/06/04 15:16:13, 10] rpc_client/cli_pipe.c:rpc_api_pipe(843) rpc_api_pipe: got PDU len of 32 at offset 0 [2008/06/04 15:16:13, 10] intl/lang_tdb.c:lang_tdb_init(138) lang_tdb_init: /lib/de_DE.msg: No such file or directory Failed to set password for machine account (NT code 0x1c000006) [2008/06/04 15:16:13, 6] libsmb/clientgen.c:write_socket(152) write_socket(7,45) [2008/06/04 15:16:13, 6] libsmb/clientgen.c:write_socket(155) write_socket(7,45) wrote 45[2008/06/04 15:16:13, 10] lib/util_sock.c:read_smb_length_return_keepalive(623)
got smb length of 35 [2008/06/04 15:16:13, 5] lib/util.c:show_msg(484) [2008/06/04 15:16:13, 5] lib/util.c:show_msg(494) size=35 smb_com=0x4 smb_rcls=0 smb_reh=0 smb_err=0 smb_flg=136 smb_flg2=51201 smb_tid=18439 smb_pid=6300 smb_uid=32770 smb_mid=18 smt_wct=0 smb_bcc=0 [2008/06/04 15:16:13, 10] libsmb/clientgen.c:cli_rpc_pipe_close(394) cli_rpc_pipe_close: closed pipe \samr to machine sbs2000.domain.test [2008/06/04 15:16:13, 6] libsmb/clientgen.c:write_socket(152) write_socket(7,39) [2008/06/04 15:16:13, 6] libsmb/clientgen.c:write_socket(155) write_socket(7,39) wrote 39[2008/06/04 15:16:13, 10] lib/util_sock.c:read_smb_length_return_keepalive(623)
got smb length of 35
[2008/06/04 15:16:13, 5] lib/util.c:show_msg(484)
[2008/06/04 15:16:13, 5] lib/util.c:show_msg(494)
size=35
smb_com=0x71
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=136
smb_flg2=51201
smb_tid=18439
smb_pid=6300
smb_uid=32770
smb_mid=19
smt_wct=0
smb_bcc=0
[2008/06/04 15:16:13, 1] utils/net_ads.c:net_ads_join(1548)
call of net_join_domain failed: NT code 0x1c000006
[2008/06/04 15:16:13, 2] utils/net.c:main(1066)
return code = -1
Failed to join domain: NT code 0x1c000006
-------------------------------------------------------------------------
This is my smb.conf
-------------------------------------------------------------------------
[global]
dos charset = ISO-8859-1
unix charset = ISO-8859-1
display charset = ISO-8859-1
workgroup = DOMAIN
realm = DOMAIN.TEST
server string = NASdrive
interfaces = ixp0
security = ADS
allow trusted domains = No
password server = sbs2000.domain.test
private dir = /var/lib/adsamba/private
passdb backend = tdbsam
guest account = samba
log level = 10
log file = smblog.ad
max log size = 0
name resolve order = wins bcast host
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_KEEPALIVE
SO_RCVBUF=8192 SO_SNDBUF=8192
load printers = No
show add printer wizard = No
preferred master = No
local master = No
domain master = No
wins server = 192.168.1.4
idmap uid = 1000-60000
idmap gid = 1000-60000
winbind enum users = Yes
winbind enum groups = Yes
winbind offline logon = Yes
admin users = DOMAIN\\Administrator
ea support = Yes
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/listinfo/samba
- Follow-Ups:
- RE: [Samba] Can't join windows 2008 AD with 3.0.30 "Failed to join domain: Improperly formed account name"
- From: Clayton Hill
- Re: [Samba] Can't join AD anymore after migration to 3.0.30
- From: Guenther Deschner
- RE: [Samba] Can't join windows 2008 AD with 3.0.30 "Failed to join domain: Improperly formed account name"
- Prev by Date: Re: [Samba] Home Lan computer browser(s)
- Next by Date: [Samba] Network transfer speed issues in RHEL4
- Previous by thread: [Samba] Home Lan computer browser(s)
- Next by thread: Re: [Samba] Can't join AD anymore after migration to 3.0.30
- Index(es):