net rpc join -S MERLIN -Uroot%password [2005/10/28 18:12:39, 0] rpc_client/cli_pipe.c:cli_rpc_pipe_open_schannel(2625) cli_rpc_pipe_open_schannel: failed to get schannel session key from server MERLIN for domain MIDEARTH. [2005/10/28 18:12:39, 0] utils/net_rpc_join.c:net_rpc_join_ok(61) Error connecting to NETLOGON pipe. Error was NT_STATUS_ACCESS_DENIED Unable to join domain MIDEARTH. Level 10 smbd logs are attached. PS: Why are we now checking for an account for the domain itself?
Created attachment 1552 [details] Level 10 smbd log on attempted "net rpc join -S MERLIN -Uroot%password"
Created attachment 1553 [details] interactive debug 10 net rpc info -d10 -S MERLIN -Uroot%password - Output in file.
Created attachment 1561 [details] smbd level 10 log - SVN 11479
Created attachment 1562 [details] net command level 10 log - SVN 11479
What do you have in your smb.conf ? This code is returning the domain name : if ( IS_DC ) { fstrcpy( machine_account, lp_workgroup() ); } else { /* Hmmm. Is this correct for trusted domains when we're a member server ? JRA. */ if (strequal(domain, lp_workgroup())) { fstrcpy(machine_account, global_myname()); } else { fstrcpy(machine_account, domain); } }
(In reply to comment #5) > What do you have in your smb.conf ? > > This code is returning the domain name : > > if ( IS_DC ) { > fstrcpy( machine_account, lp_workgroup() ); > } else { The "net rpc join" was executed on the PDC to join it to its own domain.
Created attachment 1563 [details] Patch I've applied to 3.0 This should fix it (it's in HEAD and 3.0 SVN so just update to test). Jeremy.
Thank-you Jeremy. - John T.