[Samba] Making Samba a member of NT security domain fails - why?

Clay, John John.Clay at lfr.com
Tue Apr 16 12:44:03 GMT 2002


I am following 2.5.2 in the Samba-howto-collection in an attempt to make my
Samba server part of my NT security domain.  I have Samba 2.2.3 on Slack 8.0
(2.2.19). The smb.conf is as follows:

# Samba config file created using SWAT
# from localhost (127.0.0.1)
# Date: 2002/04/16 14:20:05

# Global parameters
[global]
	workgroup = LFRG-TLH
	netbios name = HUMPHRY
	server string = Samba 2.2.3
	security = DOMAIN
	encrypt passwords = Yes
	min passwd length = 0
	null passwords = Yes
	password server = *

[print$]
	path = /usr/local/samba/printers
	guest ok = Yes
	printable = Yes
	print command = /usr/bin/lpr -r %s
	printer name = lp

[test]
	comment = For testing only please
	path = /export/samba/test

[homes]
	read only = No

I've added a machine account for "humphry".
I've executed: smbpasswd -r tlh-file-print -j lfrg-tlh (the pdc and domain
names) but get the following error:

cli_net_auth2: Error NT_STATUS_NO_TRUST_SAM_ACCOUNT
cli_nt_setup_creds: auth2 challenge failed
modify_trust_password: unable to setup the PDC credentials to machine
TLH-FILE-PRINT. Error was : NT_STATUS_NO_TRUST_SAM_ACCOUNT.
2002/04/16 14:28:44 : change_trust_account_password: Failed to change
password for domain LFRG-TLH.

I've added an NT user account "root" and password ensemble that is the same
as on the Linux box.
I've put a couple of disk directory shares on the Linux box and those have
been available to their users (same user names and passwords as the accounts
on the NT domain)

Can anyone tell me what I'm missing?

Thanks in advance

John M. Clay
Senior Engineer
LFR Levine Fricke
tel: (850) 422-2555
e-mail: john.clay at lfr.com





More information about the samba mailing list