Hello,
This about another attempt of joining a (samba controlled) domain. It is samba version 3.0.14 with a LDAP backend. The client is a Windows XP computer. I do get message "welcome to the domain" (reboot to activate) But an user login fails ... I think I have nailed it down to a strange SID that the client brings in. On a working system I have this LDAP entry: | dn: uid=tosh$,ou=Computers,ou=Users,dc=yourdomain,dc=tld | objectClass: top | objectClass: inetOrgPerson | objectClass: posixAccount | objectClass: sambaSamAccount | cn: tosh$ | sn: tosh$ | uid: tosh$ | uidNumber: 2014 | gidNumber: 515 | homeDirectory: /dev/null | loginShell: /bin/false | description: Computer | gecos: Computer | structuralObjectClass: inetOrgPerson | sambaSID: S-1-5-21-2689494773-1951033108-3857615256-5028 | sambaPrimaryGroupSID: S-1-5-21-2689494773-1951033108-3857615256-515 | displayName: TOSH$ | sambaPwdMustChange: 2147483647 | sambaAcctFlags: [W ] | sambaPwdCanChange: 1128030550 | sambaNTPassword: 6EB64F5A71C942C2FAFF3AC003B03686 | sambaPwdLastSet: 1128030550 Note the same base SID On the failing system there is this after adding a client: | dn: uid=coco$,ou=Computers,ou=Users,dc=yourdomain,dc=tld | objectClass: top | objectClass: inetOrgPerson | objectClass: posixAccount | objectClass: sambaSamAccount | cn: coco$ | sn: coco$ | uid: coco$ | uidNumber: 2015 | gidNumber: 515 | homeDirectory: /dev/null | loginShell: /bin/false | description: Computer | gecos: Computer | sambaSID: S-1-5-21-1217595360-3837695174-1118015926-5030 | sambaPrimaryGroupSID: S-1-5-21-2202232871-2120539869-948389690-515 | displayName: COCO$ | sambaPwdCanChange: 1128087802 | sambaPwdMustChange: 2147483647 | sambaNTPassword: 43C26C7D4326A9C5746A35B643E3FB5B | sambaPwdLastSet: 1128087802 | sambaAcctFlags: [W ] Note the different base SID. Could be confirmed that base SIDs should be te same? (or could be told that it is okay ;-) Anyway: which way to go ? ( or what to read next ? ;-) Cheers Geert Stappers
signature.asc
Description: Digital signature
-- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
