From: Gerald Carter <jerry@samba.org>
Date: Mon, 11 Apr 2005 19:41:47 +0000 (+0000)
Subject: r6296: add message about known interoperability issue with Windows 2003 SP1 DCs
X-Git-Tag: samba-misc-tags/initial-v3-0-unstable~4948
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=88c2ed1534d5239273458768b7b3f05102a2af16;p=thirdparty%2Fsamba.git

r6296: add message about known interoperability issue with Windows 2003 SP1 DCs
---

diff --git a/source/nsswitch/winbindd_cm.c b/source/nsswitch/winbindd_cm.c
index 832672e64cb..c5cf1d5f464 100644
--- a/source/nsswitch/winbindd_cm.c
+++ b/source/nsswitch/winbindd_cm.c
@@ -1021,6 +1021,16 @@ NTSTATUS cm_get_sam_handle(struct winbindd_domain *domain, CLI_POLICY_HND **retu
 			cli_shutdown(conn->cli);
 			DLIST_REMOVE(cm_conns, conn);
 			SAFE_FREE(conn);
+
+			/* log a message for possible Windows 2003 SP1 DC's */
+			if ( NT_STATUS_EQUAL(result,NT_STATUS_ACCESS_DENIED) && (lp_security() == SEC_DOMAIN) ) {
+				DEBUG(0,("samr_connect() received NT_STATUS_ACCESS_DENIED.  If you are connecting \n"));
+				DEBUGADD(0,("to a Windows 2003 SP1 DC, this is a known issue.  There are two current \n"));
+				DEBUGADD(0,("workarounds:\n"));
+				DEBUGADD(0,("(a) Move your configuration to security = ads, or\n"));
+				DEBUGADD(0,("(b) set 'client schannel = no' in smb.conf and use 'wbinfo --set-auth-user'\n"));
+				DEBUGADD(0,("    to define the credentials when connecting to the DC\n"));
+			}
 			
 			return result;
 		}