At 06:19 16/11/2001, Gordon Rowell wrote: >I believe I've got it after a trawl through the Samba source. > >chmod 0660 /etc/smbpasswd # i.e. 0600 root root > >seems to do the trick. I can now join a domain as "admin", since admin is >in group root and can now write to the smbpasswd file. As root and admin >are the only members of the root group, this should be fine.
I couldn't get this to work... The steps I went through: 1. Installed Gordon's new RPMs 2. Ran the expand template and smb reload commands 3. Connected to the manager and changed the system password (why was this step required? I had to use the existing password to connect...) 4. Connected my Win 2K box to the test LAN. I did this by remaining logged in as my ID (an admin user) and dropping and renewing the DHCP lease to get an address on the test LAN, after swapping the cable, of course. 5. Changed from workgroup to domain. At the user/password dialog I used the admin ID and got "The following error occurred attempting to join the domain "mitel-networks". The account used is a computer account. Use your global user account or local user account to access this server". Trying as root: "The remote procedure call failed". 6. I then logged in as the local administrator. Changing the domain as admin gave me "Incorrect user ID or password". I tried this a couple of times to ensure I hadn't mistyped it. 7. As root: "Welcome to the mitel-networks domain". Yes!!!! 8. Logged in as my test ID - did not appear to run netlogon.bat. Checked mappings to verify this. 9. Tried a "net use h: /home" command from the command line - failed saying it wasn't defined (I think - I neglected to note the message). It does seem that it's not picking up the "logon script" parameter from smb.conf. I also noted that you've changed ".profiles" to "._winprofile". Is there a specific reason for this? So I had some success, but the netlogon.bat not running is a big problem. I'm not an NT Server person, so I don't know what to check for in my local settings, if any. I did try to specify netlogon.bat in the Advanced User settings in Win 2K. I guess one of the basic questions is "does the NETLOGON share get mapped as Z: the same way it does with Win 9x"? If not, my netlogon.bat would likely not run very well. The fact that the net use commands don't want to run is baffling to me, too. Des -- Please report bugs to [EMAIL PROTECTED] Please mail [EMAIL PROTECTED] (only) to discuss security issues Support for registered customers and partners to [EMAIL PROTECTED] To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] Archives by mail and http://www.mail-archive.com/devinfo%40lists.e-smith.org
