Hi,
I'm trying to set up an OD server as PDC for our PCs. I configured DNS, OD, samba and I can login on an XP client. However, I haven't been able to change password from a client.
When I try changing the password from Ctrl-Alt-Del I get a "wrong username or password" or something (I can't be more precise as the only test client I have is in italian), and I get this in the samba logfile:
[2005/08/30 15:03:56, 1] /SourceCache/samba/samba-92.9/samba/source/rpc_server/srv_pipe.c:api_pipe_ntlmssp_verify(453)
api_pipe_ntlmssp_verify: User [HQ.INET.IT]\[acampi] from machine MULETTO succeeded authentication on named pipe samr, but session key was of incorrect length [0].
Out of curiosity, I tried installing MIT Kerberos client for Windows, and I was able to obtain tickets etc. But when I try using kpasswd, I get:
Cannot resolve network address for KDC in requested realm changing password
and nothing much in kdc.log:
Aug 30 15:11:43 kdc.hq.inet.it krb5kdc[729](info): AS_REQ (7 etypes {18 17 16 23 1 3 2}) 213.92.85.70: NEEDED_PREAUTH: email@hidden for kadmin/email@hidden, Additional pre-authentication required
Aug 30 15:11:45 kdc.hq.inet.it krb5kdc[729](info): AS_REQ (7 etypes {18 17 16 23 1 3 2}) 213.92.85.70: ISSUE: authtime 1125407505, etypes {rep=16 tkt=16 ses=16}, email@hidden for kadmin/email@hidden
The windows PC is on the same test LAN as the server, ipfw is wide open. What else? Ah, of course using kpasswd from the OD server (or a Unix client, for that matter) works.
What am I missing?
Bye,
Andrea
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/email@hidden
This email sent to email@hidden
