[Samba] api_netlog_rpc: NET_SAMLOGON failed

[Peter Peltonen]

Hi,

I've got a RH72 box called FILESERV acting as a PDC for a while now.
It's been doing fine with Win2k clients. The version of the PDC Samba is
2.2.3a-1.

I've now added a RH72/samba-2.2.1a-4 machine called GOA to the domain.
I've set it to use FILESERV as the password server. On GOA I created a
local linux user that's name matches the one in the Windows domain
(peter). It does not seem to work: When I try to access the "juuri"
share on GOA from a Win2k client, my authentication is not accepted.
This error apperas in the PDC's logs:

--<snip>--
[2002/07/17 14:53:23, 0] rpc_server/srv_netlog.c:api_net_sam_logon(206)
  api_net_sam_logon: Failed to marshall NET_R_SAM_LOGON.
[2002/07/17 14:53:23, 0] rpc_server/srv_pipe.c:api_rpcTNP(1200)
  api_rpcTNP: api_netlog_rpc: NET_SAMLOGON failed.
--</snip>--

Nothing in GOA's logs. What might be wrong? I created a local account
for root on GOA with smbpasswd -a and that seems to work fine.

GOA's smb.conf:
--<snip>--
[global]
	workgroup = WORKGROUP
	netbios name = GOA
	server string = Samba %v on (%L)
        security = DOMAIN
        password server = FILESERV
	encrypt passwords = Yes
	log file = /var/log/samba/log.%m
	max log size = 0
	socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
	dns proxy = No
	remote announce = 192.168.0.255
#	hosts allow = 192.168.0.
	local master = no
	os level = 0        


[printers]
	comment = All Printers
	path = /var/spool/samba
	printable = Yes
	browseable = No

[juuri]
	path = /
	writeable = Yes
--</snip>--


FILESERV's smb.conf:
--<snip>--
[global]
  netbios name = FILESERV
  workgroup = WORKGROUP
  server string = Samba %v on (%L)
  printcap name = /etc/printcap
  load printers = yes
  log file = /var/log/samba/log.%m
  max log size = 50
  security = user
  ; act as a pdc
  domain logons = yes
  domain admin group = @admin
  ; NT profiles stored here
  logon path = \\%L\%U\winnt_profile
  ; Home Directory
  logon home = \\%L\%U
  logon drive = H:
  ; the script to execute from netlogon share dir
  logon script = %U.bat
  socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
  os level = 65
  local master = yes
  domain master = yes 
  preferred master = yes
  wins support = no
  dns proxy = no 
  encrypt passwords = yes
  add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false
-M %u 
  time server = yes
--</snip>--

Regards,
Peter