[TriLUG] Help with SAMBA acting as PDC for windows

[John-David Henderson]

Yes, This is the contents of the smbusers file
 
# Unix_name = SMB_name1 SMB_name2 ...
root = admin administrator
nobody = guest pcguest smbguest
it = @it
oranet = @oranet
dmerkle = dmerkle
 
 
I am a member of the "it" group.
 
The it group is on a NIS server acting as a group that I am a member.
 
BTW, I am coming into this postion with this already in place, but had something
like this in place at another location.
 
Thanks. 
 
JD Henderson
<http://www.landemonium.com> 
email - jd at savagegeek.com
mobile - 919-649-5589
 

________________________________

From: trilug-bounces at trilug.org on behalf of Mark Fowle
Sent: Wed 10/5/2005 10:00 AM
To: Triangle Linux Users Group discussion list
Subject: Re: [TriLUG] Help with SAMBA acting as PDC for windows



Just curious - is the user you are trying to use to add the machine to the
domain in the smbusers file and associated with root?

- Mark

> Hello,
>
> I have a situation that is happening to one of my Windows XP workstations
> trying to connect
> to a SAMBA server acting as a Primary Domain Controller.  So to begin
> with, the server is
> a RedHat Fedora Core 3 Running SAMBA version 3.0.10-1.fc3
>
> So what is happening is when I am trying to join the machine account to
> our "WEBNET" domain,
> the error on the Windows XP workstation is " The following error occurred
> attempting to join the domain WEBNET: Access is denied
>
> Now, I am using a valid username to authenticate the machine account, and
> the machine account exists
> in the /etc/samba/smbpasswd file.  Also the machine account exists in the
> /etc/passwd and /etc/shadow file.
>
> entry in /etc/passwd file:
> n-pace$:x:1105:105::Machine Account:/dev/null:/bin/false
>
> entry in /etc/shadow file:
> n-pace$:!:13011:0:99999:7:::
>
> entry in /etc/samba/smbpasswd file
> n-pace$:1105:498B3F3A1D654D56AAD3B435B51404EE:7C5D6F77A7C4A52F3F771BA178AD21D4:[W
>          ]:LCT-4342E59A:
>
> Now I do know when getting the error above it means:
> There isn't a machine account entered in smbpasswd for the computer you're
> attempting to have
> join the domain, or the machine account is currently disabled. It's also
> possible that you're
> trying to join the domain using an account name other than "root", which
> is required.
>
>
> Also, this machine was on the domain as a different machine account, but I
> removed the account from the /etc/passwd file /etc/shadow file, and
> /etc/samba/smbpasswd file.
>
> Can anybody help?
>
> Thank you very much
>
> JD Henderson
> <http://www.landemonium.com>
> email - jd at savagegeek.com
> mobile - 919-649-5589
>
> --
> TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
> TriLUG Organizational FAQ  : http://trilug.org/faq/
> TriLUG Member Services FAQ : http://members.trilug.org/services_faq/
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>

--
TriLUG mailing list        : http://www.trilug.org/mailman/listinfo/trilug
TriLUG Organizational FAQ  : http://trilug.org/faq/
TriLUG Member Services FAQ : http://members.trilug.org/services_faq/