Windows 64-bit kills Samba PDC logins

ericthebikeman · 05-17-2005, 12:13 PM

I've been unable to login to my Samba PDC after upgrading to Windows XP 64-bit. Any account with Admin rights gets a RPC Error after the password is entered, everyone else can login but no admin rights on XP is next to worthless.
Prior versions of windows can still login just fine, it only affects XP-x64. I've tried upgrading Samba but that didn't help.

ericthebikeman · 05-17-2005, 12:14 PM

Screen of the error I get
http://home.mindspring.com/~ops21/rpc-error.jpg

this213 · 05-19-2005, 07:13 AM

I'm having the exact same issue. If I find anything I'll let you know

ericthebikeman · 05-20-2005, 07:39 PM

Your the 4th person I've seen so far. Unfortunately I've run into nothing but skeptics, blaming me for bad configurations like I'm some kind of idiot. Any Win32 client works fine if I set requiresignorseal to 0 in the registry, XP-64 doesn't though. I think this is still pretty rare since only early adopters who happen to have a Samba PDC will run into this. For some reason I can't help but think MS messed with the way SMB works again to keep non-MS products from working.

Just for laughs what version are you running? Could you post your smb.conf?

Samba 3.0.14a

[global]
use client driver = yes
netbios name = Phobos
workgroup = Home
server string = Samba 3 PDC

domain logons = yes
domain master = yes
preferred master = yes
os level = 64

;security
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
passwd program = /usr/bin/passwd %u
unix password sync = yes
pam password change = yes
min passwd length = 4
map acl inherit = yes
null passwords = no
utmp = yes
interfaces = eth1
bind interfaces only = yes
security = user
log level = 2
;login settings
logon script = logon.bat
logon path = \\%L\profiles\%U

socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
dns proxy = no

# For low-risk security reasons on Win2000/WinXP networks (no Win98)
# restrict anonymous = 2

# WINS / VPN
# ----------

preferred master = yes
wins support = yes
wins server =

#============================ Share Definitions ==============================

idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
template shell = /bin/false
winbind use default domain = no

[profiles]
path = /home/samba/profiles
profile acls = yes
writable = yes
browseable = no

[netlogon]
writeable = yes
public = yes
write list = eric
path = /home/netlogon

[homes]
read only = no
browseable = Yes
hide dot files = yes

this213 · 05-22-2005, 05:16 PM

I couldn't afford to keep this system off the domain long enough to get this resolved, so I installed Win2K Pro instead and have no issues with it at all - it even seems to run faster than XP x64 did (go figure), so I might just keep it this way anyway. So far everything I've wanted to run on here has done so extremely well, and joining the domain was just like any other computer on the network - and without even changing any registry values (like in XP)

I should have some more time later in the week to get into this again, unless I happen to see a fix in the mean time.

Anyway, here's my global section. This server has a crapload of share defs, so I won't bother posting those (shares shouldn't matter anyway for just logging into the domain):

version 3.0.14a as well, but it's been upgraded over the years from 2.2.7 - hence the apparent differences.

Code:

[global]
	workgroup = MYNET
	domain name = MYNET
	netbios name = GLSS
	server string = Samba PDC
	interfaces = 192.168.0.1
	bind interfaces only = Yes
	encrypt passwords = Yes
	pam password change = Yes
	passwd program = /usr/bin/passwd %u
	passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully*
	username map = /etc/samba/smbusers
	unix password sync = Yes
	log file = /var/log/samba/%m.log
	max log size = 0
	socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
	add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u
	logon script = %U.bat
	logon path = \\%L\Profiles\%U
	domain logons = Yes
	os level = 66
	preferred master = Yes
	domain master = Yes
	dns proxy = No
	Admin Users = SomeUser

browny_amiga · 05-26-2005, 05:49 AM

Well, it would at least really fit Microsofts profile of trying to kill off any competition. Total world domination, nothing less is what they want.
The more delicious that it just does not work with Linux, as I would say, it is their worst nightmare come true.
Our little penguin is bullet proof, can breath underwater, needs no air in vacuum and cannot be bought, bankrupted or corrupted ;-)

ericthebikeman · 06-25-2005, 12:48 PM

The error isn't something you can fix with a change in the config file since the bug was caused by something in the codebase. The Samba project released 3.0.20pre1 which takes care of the RPC errors when logging into Samba in PDC mode.

RPMs & source are available at the official Samba website.