Windows Vista can’t join OD domain

[Vegan_admin]

Hi All
Really hope you guys can help.
We have an OD master with SMB enabled and set as PDC.
There is no problems for WinXP users to join and bind to the directory. But when trying to bind a Vista machine. It will not accept my directory account.
The only thing I can think of is kerberos problems. But the kerberos realm is running smoothly
Any ideas?
Thanks

[mosx86]

Is this ODmaster, Tiger or Leopard?

[Vegan_admin]

Sorry this is an OD master running leopard 10.5.2.
Im really lost here…

[mosx86]

[QUOTE][u]Quote by: Vegan_admin[/u][p]Sorry this is an OD master running leopard 10.5.2.
Im really lost here…[/p][/QUOTE]

I’m working on something similar but haven’t had time to get into it too deeply yet. On my setup, NTLMv2 password authentication is failing. You can use ‘dirt’ to check the SMB password, but it doesn’t use NTLMv2 so I’m not exactly sure how to verify that…

I will post more as I get a chance to look at it (hopefully by next week)…

[mosx86]

[QUOTE][u]Quote by: MacTroll[/u][p]You can have dirt use a specific auth method.

dirt -a nt -u user[/p][/QUOTE]

That will only test the SMB-NT password, not the SMB-NTLMv2.

I haven’t found out how to verify the SMB-NTLMv2 as of yet.

Here is the password log when running the above dirt command:

[b]Apr 10 2008 09:53:20 AUTH2: {slotID, diradmin} SMB-NT authentication succeeded.[/b]

Here is the password log when trying to join Vista to the 10.5.2 OD PDC domain:

[b]Apr 10 2008 12:23:42 DoAuth: {slotID, diradmin} SMB-NTLMv2 authentication failed, SASL error -13 (password incorrect).[/b]

[Vegan_admin]

This is exactly what my log says as well… hope you find a solution…
This is really annoying more of my users upgrade to Vista…

[mosx86]

[QUOTE][u]Quote by: Vegan_admin[/u][p]This is exactly what my log says as well… hope you find a solution…
This is really annoying more of my users upgrade to Vista…[/p][/QUOTE]

Talk about a late response (by me)…

The only tool I know that can check NTLMv2 passwords is “ntlm_auth.” However I get winbind errors when using it and as far as I can tell winbindd isn’t running on any of my Tiger SMB servers or PDC/BDC.

[Author]

Posts