Re: [Samba] XP Joining domain

[Derek Harkness]

How does pdbedit help me join a Windows XP client to my Samba domain?

I've read through all the howto section on domain membership. Unfortunately the online howto section doesn't have page numbers. :( According to the docs I can either add passwd backend = smbpasswd or just delete the option from the config file, if the option doesn't exist 3.0 falls back to smbpasswd used in 2.2.

The ultimate goal is to move to ldap. But I can't do that until I get samba 3 working. But why should the back prevent XP from properly setting the machine password? NT 4 and 2K both happily join the domain set their password and play VERY nice. On the client side XP tells me it joined the domain, but when I try and login it gives me a machine account error messages (see below). If I login as the local Administrator I can even map a drive to the samba server.

Logon error
"Windows cannot connect to the domain, either because the domain controller is down or otherwise unavailable, or because your computer account was not found. Please try again later."

Thanks for the help!
Derek

On Jun 7, 2004, at 3:31 PM, Jason Gray wrote:

Have you tried pdbedit? Also, If you read the pages 123 - 138 in the
Samba-How-to Collection you will get a great trouble-shooting section and
methods to get your machines and users to connect to your PDC. You will
also need to add the passwd backend = smbpasswd to your smb.conf
file...among other things. You might want to think about migrating to the
tdb password backend instead. It's more reliable.

Jason

-----Original Message-----
From: Derek Harkness [mailto:[EMAIL PROTECTED]
Sent: Monday, June 07, 2004 12:00 PM
To: Jason Gray
Subject: Re: [Samba] XP Joining domain

More details...

I'm not using ldap, currently using the smbpasswd backend.  I'm
exploring the migration path from a samba 2.2 installation to samba
3.0.  I'm using the add machine script which is creating an account in
the unix password file, then an account is created in the smbpasswd
file but the account is disabled.

/etc/samba/smbpasswd:xptest$:27652:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:[DW         ]:LCT-00000000:

/etc/passwd:xptest$:x:27652:968:NTMachine:/dev/null:/bin/false

My samba configure is more or less default.  Changed things like
workgroup, load printers = no, and added the needed domain options.

Thanks,
Derek

On Jun 7, 2004, at 2:40 PM, Jason Gray wrote:

There is a machine account and user account needed to login.  It
sounds like
you are using LDAP.  If this is the case you need to make sure that a
password is set for the user using smbpasswd <username>.  It would be
helpful to see your smb.conf file as well.  There are various tools
that you
can use to add both machine and user accounts in the LDAP backend.  If
you
are using something else as your password backend then let em know
what that
is too.

Jason

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Behalf Of Derek Harkness
Sent: Monday, June 07, 2004 11:20 AM
To: [EMAIL PROTECTED]
Subject: [Samba] XP Joining domain

I'm attempting to join a Samba 3.0.4 domain on a Debian linux box, with
a Windows XP client.

Problems
1) Can only get the join to work if I use the root account. On Win2k I
can use any account in the Domain Admins group.
2) The join succeeds, the unix account and the smb account are created
but the smb account is disabled, and the password contains all XXXXs.
Joining the domain works fine from Win2k.

I've tried adjusting the Signing entries. I tried manually creating
the machine accounts, and I get a can't access machine account error on
login.

Any thoughts?

Thanks!
Derek

"This world is a comedy to those who think and a tragedy to those who
feel."

My lack of knowledge is only exceeded by my lack of concern.
--Anonymous GE Engineer

Isn't sanity just a one-trick pony anyway? I mean, all you get is that one trick, rational thinking, but when you're good and crazy, well, the sky's the limit!
"The Tick (comic book)"

PGP.sig
Description: This is a digitally signed message part

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba