The Samba-Bugzilla – Bug 8451
3.6.0 net join failure
Last modified: 2012-12-20 11:03:05 UTC
I built Samba 3.6.0 on a Solaris 8 Sparc box. We are using it with a Windows Server 2000 domain controller. When I issue the following command:
./net join member -W adi -U administrator%password -S starfish2
I get the following error.
Could not connect to server starfish2
The username or password was not correct.
Connection failed: NT_STATUS_LOGON_FAILURE
I tried it without the %password and let it prompt me for the password and got the same error message. The net command from Samba 3.5.11 works, so I can work around the problem for now.
The following is not really part of this bug, but I think that I should note it here. The reason I was doing the net join is because after upgrading from Samba 3.5.11 to 3.6.0 the Samba server could no longer get user account information from the domain controller.I found that if I deleted the machines account on the domain controller and then rejoined the domain, the Samba server now worked correctly. Fortunately the 3.5.11 net command worked and made the 3.6.0 server happy. The original net join was probably done with a version of Samba prior to version 3.0.
This problem still exists in Samba 3.6.1. The net join command does work with the newly released Samba 3.5.12. Since this bug was reported, I have built Samba on a Solaris 10 I386 box that we recently got. The same problems exists and I had to build both 3.6.1.and 3.5.12 to be able to use this machine.
The problem still exists in Samba 3.6.3. I still have to keep Samba 3.5.12 around to do a net join.
could you please provide your smb.conf?
As well as the complete output of failing "net join -d10 ..." ?
And could you try to not specify -W and -S on the command line?
(instead info should be taken from the smb.conf).
If it was not for the attempt to specify it on the command line,
I would have guessed this was a duplicate of bug #8729.
But that is only affecting interactive password entry.
So it must be something different.
Created attachment 7314 [details]
Created attachment 7315 [details]
smb.conf.mackerel included from smb.conf
Created attachment 7316 [details]
debug output with -W and -S specified
Created attachment 7317 [details]
debug output without -W and -S
I hope that all the attachments are good. Note that running net join without the -W and -S does not get the required information from smb.conf. This behavior is the same as with version 3.5.12.
Created attachment 7318 [details]
debug output with -W and -S specified as type text/plain
attachment forcing type text/plain
The attachments look good.
I need to find some time to take a closer look...
The problem still exists with Samba 3.6.8.
Fixed in Samba 3.6.10
I expect that the fix is a side effect of one of the following:
* BUG 9272: 'net ads join' does not provide AES keys in host keytab.
* BUG 9326: Fix 'net ads join' message for the dns domain.
* BUG 8966: Fix 'net rpc share allowedusers' to work with 2008r2.
Closing out bug report.
Tom, thanks a lot for your feedback! :-)