Join NT Domain : password problem, or so it seems

[Damien Veillon]

Hi everybody,

I have a problem with the join NT domain procedure.
I would like to use the "security = domain" authentification mode.
Therefore, I followed the instructions found in the DOMAIN_MEMBER.txt
file, by Jeremy Allison.

Here is my config :

  samba box (newly configured) :
    hostname : host201
    netbios name : host201
    OS : Solaris 7
    samba version : 2.0.7
  NT domain :
    domain name : DOM5
    PDC : PDC407
    PDC OS : NT 4 service pack 5
  WINS server : WINS406 which is also NT 4 / SP 5


Here is what I get :

step 1 : On the PDC (PDC407), adding the netbios name of the samba box
(host201) whith the "server manager for domains" tool, as a "Windows NT
workstation or server".
  => OK.

step 2 : stopping the samba daemons on the samba box (host201)
  => OK.

step 3 : joining the domain with the command :

  smbpasswd -j DOM5 -r PDC407

  => not OK ; damn !

I got the following messages :

--
host201 # smbpasswd -j DOM5 -r PDC407
cli_net_srv_pwset: NT_STATUS_WRONG_PASSWORD
modify_trust_password: unable to change password for machine HOST201 in domain DOM5 to Domain controller PDC407. Error was NT_STATUS_WRONG_PASSWORD.
2001/02/20 16:29:18 : change_trust_account_password: Failed to change password for domain DOM5.
Unable to join domain DOM5.
host201 # 
--

Here is an extract of my smb.conf file when in step 1 :

--
[global]
        workgroup = DOM5
        netbios name = host201
        security = server
        password server = PDC407
        wins server = WINS406
--

I checked the samba mailing list archive from january 2000 to february
2001 but found nothing regarding this problem.

I believe that the step 1 phase would create a trust account for the
samba box, with a well-known initial trust account password. This
allows smbpasswd to join the domain. Maybe there is something wrong in
that area ? Unfortunately, I don't know the NT mecanisms well enough to
figure out.

If anyone has any idea... please help !
Thanks,
Damien.