summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGerald Carter <jerry@samba.org>2005-04-11 19:41:47 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 10:56:35 -0500
commitabd028d3879a377058aeccce21af9e5d481e0ad6 (patch)
tree7f0fee39abd373eeeb512a8a76a1122d08777eb3
parent121c22d1d5f2f673cedbbfe658a97e816938eef1 (diff)
downloadsamba-abd028d3879a377058aeccce21af9e5d481e0ad6.tar.gz
samba-abd028d3879a377058aeccce21af9e5d481e0ad6.tar.bz2
samba-abd028d3879a377058aeccce21af9e5d481e0ad6.zip
r6296: add message about known interoperability issue with Windows 2003 SP1 DCs
(This used to be commit 88c2ed1534d5239273458768b7b3f05102a2af16)
-rw-r--r--source3/nsswitch/winbindd_cm.c10
1 files changed, 10 insertions, 0 deletions
diff --git a/source3/nsswitch/winbindd_cm.c b/source3/nsswitch/winbindd_cm.c
index 832672e64c..c5cf1d5f46 100644
--- a/source3/nsswitch/winbindd_cm.c
+++ b/source3/nsswitch/winbindd_cm.c
@@ -1021,6 +1021,16 @@ NTSTATUS cm_get_sam_handle(struct winbindd_domain *domain, CLI_POLICY_HND **retu
cli_shutdown(conn->cli);
DLIST_REMOVE(cm_conns, conn);
SAFE_FREE(conn);
+
+ /* log a message for possible Windows 2003 SP1 DC's */
+ if ( NT_STATUS_EQUAL(result,NT_STATUS_ACCESS_DENIED) && (lp_security() == SEC_DOMAIN) ) {
+ DEBUG(0,("samr_connect() received NT_STATUS_ACCESS_DENIED. If you are connecting \n"));
+ DEBUGADD(0,("to a Windows 2003 SP1 DC, this is a known issue. There are two current \n"));
+ DEBUGADD(0,("workarounds:\n"));
+ DEBUGADD(0,("(a) Move your configuration to security = ads, or\n"));
+ DEBUGADD(0,("(b) set 'client schannel = no' in smb.conf and use 'wbinfo --set-auth-user'\n"));
+ DEBUGADD(0,(" to define the credentials when connecting to the DC\n"));
+ }
return result;
}