> -----Original Message-----
> From: Andrew Bartlett [mailto:[EMAIL PROTECTED]
> Sent: Thursday, March 31, 2005 3:31 PM
> To: Snodgrass, Micah
> Cc: [email protected]
> Subject: RE: [Samba] ntlm_auth question
> 
> 
> On Thu, 2005-03-31 at 07:36 -0600, Snodgrass, Micah wrote:
> > Thank you much Andrew, joining the domain did the trick. For the
> > record, doing a net rpc join -U administrator from the 
> > Linux/FreeRADIUS box joined the machine to the domain, 
> > but still no luck. I took a look at the Win2k3 AD server, 
> > and had to check the foolish little check box on the account 
> > for the Linux computer that said something like 
> > "This machine is a Pre-Windows 2000 machine"  and then we 
> were talking. 
> 
> Had you done a 'net ads join' and set 'security=ads' in your smb.conf,
> then it would have worked.
> 
> I'm lining up a micro-patch to make the error message 
> indicate the need
> for a domain join.

Hmmm... no I didn't.  I'm not familiar with the "net ads" command *digs out 
google and man pages*  - At this point, it's safe to say that I have done 
neither. smb.conf has security = server, and then password server = 
ip.of.AD.server.  Once I sat down at the AD server and checked that foolish 
"this is a pre-windows 2000 computer"  checkbox,  ntlm_auth started working 
fine, and I moved on to the next hurdle in the project which is a problem with 
the FreeRADIUS config file. (something totally unrelated to samba, so I won't 
bore you with the details. 

thanks again for the help. I'll do some digging into security=ads and "net ads 
..."  as it sounds like they may save me future headaches. 

-MS
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to