From abd028d3879a377058aeccce21af9e5d481e0ad6 Mon Sep 17 00:00:00 2001 From: Gerald Carter Date: Mon, 11 Apr 2005 19:41:47 +0000 Subject: r6296: add message about known interoperability issue with Windows 2003 SP1 DCs (This used to be commit 88c2ed1534d5239273458768b7b3f05102a2af16) --- source3/nsswitch/winbindd_cm.c | 10 ++++++++++ 1 file changed, 10 insertions(+) (limited to 'source3') diff --git a/source3/nsswitch/winbindd_cm.c b/source3/nsswitch/winbindd_cm.c index 832672e64c..c5cf1d5f46 100644 --- a/source3/nsswitch/winbindd_cm.c +++ b/source3/nsswitch/winbindd_cm.c @@ -1021,6 +1021,16 @@ NTSTATUS cm_get_sam_handle(struct winbindd_domain *domain, CLI_POLICY_HND **retu cli_shutdown(conn->cli); DLIST_REMOVE(cm_conns, conn); SAFE_FREE(conn); + + /* log a message for possible Windows 2003 SP1 DC's */ + if ( NT_STATUS_EQUAL(result,NT_STATUS_ACCESS_DENIED) && (lp_security() == SEC_DOMAIN) ) { + DEBUG(0,("samr_connect() received NT_STATUS_ACCESS_DENIED. If you are connecting \n")); + DEBUGADD(0,("to a Windows 2003 SP1 DC, this is a known issue. There are two current \n")); + DEBUGADD(0,("workarounds:\n")); + DEBUGADD(0,("(a) Move your configuration to security = ads, or\n")); + DEBUGADD(0,("(b) set 'client schannel = no' in smb.conf and use 'wbinfo --set-auth-user'\n")); + DEBUGADD(0,(" to define the credentials when connecting to the DC\n")); + } return result; } -- cgit