Hello,
my probs are still the same (i tried with and without requiresignoreseal and signsecurechanel patch).
i use two different admin accounts, both are within smbpasswd and can be used with swat.
in details:
1.
conf:
admin users = root
domain admin group = root @root


try joining the domain without existing mashine accout:
xp error: unknow user or invalid password
samba log:
rpc_server/srv_netlog_nt.c:get_md4pw(176)
get_md4pw: Workstation fraggle$: no account in domain

try joining the domain with existing mashine accout for fraggle$:
xp error: unknown user or invalid password
samba log (syslog level 10): nothing

2.
conf:
admin users = administrator
domain admin group = administrator @administrator

xp error: access denied
samba box: mashine accout for fraggle$ created
fraggle$:1008:NO PASSWORDXXXXXXXXXXXXXXXXXXXXX:NO PASSWORDXXXXXXXXXXXXXXXXXXXXX:
[NDW ]:LCT-3F210B9C:
samba.log:
[2003/07/25 12:51:07, 0] smbd/service.c:make_connection(381)
make_connection: administrator logged in as admin user (root privileges)
[2003/07/25 12:51:07, 0] rpc_server/srv_netlog_nt.c:get_md4pw(176)
get_md4pw: Workstation fraggle$: no account in domain
[2003/07/25 12:51:08, 0] smbd/service.c:make_connection(381)
make_connection: administrator logged in as admin user (root privileges)
[2003/07/25 12:51:08, 0] libsmb/smbencrypt.c:decode_pw_buffer(260)
decode_pw_buffer: incorrect password length (-1821683352).
[2003/07/25 12:51:08, 0] rpc_server/srv_samr_nt.c:_samr_delete_dom_user(2686)
_samr_delete_dom_user: Not yet implemented.


maybe it's a prob for the tecnical list???
I really tried everything written in any available manual please help.
thx
Patrick Flohr

Marian Mlcoch, Ing wrote:

Try revert to domain admin root and aply next XP patch as described on
http://hr.uoregon.edu/davidrl/samba/samba-pdc.html

5.3.3. Windows 2000/XP Professional
To allow Windows XP Professional (not W2K) to join a Samba Domain, you will
need to first make the following changes to your registry and reboot:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
"requiresignorseal"=dword:00000000
"signsecurechannel"=dword:00000000


The second setting is a bit of an unknown; many can join a Samba domain without setting it; others claim it doesn't work for their system until they do set it. In short, your mileage may vary ;-)


----- Original Message ----- From: "Patrick Flohr" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, July 25, 2003 11:22 AM
Subject: [Samba] disabled mashine account without password





Hi,

when i try to join a winxp pro client to my samba domain i get an access
denied error.
Checking /etc/passwd and smbpasswd shows an new created mashine account,
but the account
is disabled and without a password.

I'm using a debian 3.0 Linux with Samba 2.2.8a-1.0 and the following add
user script:
/usr/sbin/useradd -d /dev/null -g workstations -s /bin/false -M %u

Is there something wrong with the script?

Some informatio about the xp-client:
-- signorseal patch applied
-- accessing shares without probs possible

additional information:
-- some probs with root accout see thread from 23.7

Thank you in advance for all help
Patrick Flohr



--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba







--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Reply via email to