Thanks for the help.

Does anyone know exactly what modification to the machine trust account it
smb_join tries to make? That same account, I can say, created the machine
account, and has made many changes to it via windows RSAT. If I knew the
exact change, I could reproduce it?

Also my only other clue is from debugging Samba where I see this...

auth_check_password_send: Checking password for unmapped user

For some reason, smb_join is sending a blank set of domain, username and
password to authenticate by Samba just before smbadm reports it can't make
the change.

On Thu, Mar 8, 2012 at 10:05 AM, Nico Williams <>wrote:

> On Wed, Mar 7, 2012 at 10:07 PM, Michael Farnbach
> <> wrote:
> > Mar  7 20:55:59 indi smbd[11053]: [ID 232655 daemon.notice] ldap_modify:
> > is unwilling to perform
> This means that the DC rejected the modification of the machine trust
> account.  This is probably because your administrator account is not a
> member of the right group.
> Nico
> --
cifs-discuss mailing list

Reply via email to