[Samba] NT_STATUS_ACCESS_DENIED

[Van Sickler, Jim]

1.  Be sure the LINUX01 (computer) has been added to the domain.
2.  (as root) smbpasswd -j DOMTEST -r PDC

Don't add the -U user, and see if that works.

Jim

> -----Original Message-----
> From: morgan31 at libero.it [mailto:morgan31 at libero.it]
> Sent: Tuesday, July 23, 2002 3:52 AM
> To: samba at lists.samba.org
> Subject: [Samba] NT_STATUS_ACCESS_DENIED 
> 
> 
> Hi list,
> I'm running samba 2.0.7 on SuSE Linux.
> I'd like to join into NT domain and my /etc/smb.conf file looks like:
> [global]
>   	workgroup = DOMTEST
>  	security = server
>  	password server = PDC
> 	netbios name = LINUX01 
> 	domain logons = yes
>  	encrypt passwords = yes
> 	local master = no
> 	interfaces = 10.1.3.102/255.255.255.0
> 	bind interfaces only = no
> 	guest account = nobody
>    	keep alive = 30
>    	os level = 20
> 	announce as = NT
> 	announce version = 4.2
>    	kernel oplocks = false
>    	printing = bsd
>    	printcap name = /etc/printcap
>    	load printers = yes
>    	socket options = TCP_NODELAY
>    	map to guest = Bad User
>    	wins support = no
>    	domain master = yes	
> 	debug level = 4
> 
> When I invoke the command:
> smbpasswd -j DOMTEST -r PDC -U user 
> it returns:
> pm_process() returned Yes
> added interface ip=10.1.3.102 bcast=10.1.3.255 nmask=255.255.255.0
> resolve_lmhosts: Attempting lmhosts lookup for name PDC<0x20>
> resolve_hosts: Attempting host lookup for name PDC<0x20>
> Connecting to 10
> .1.1.1 at port 139
> cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
> cli_nt_setup_creds: auth2 challenge failed
> modify_trust_password: unable to setup the PDC credentials to machine 
> PDC. Error was : NT_STATUS_ACCESS_DENIED.
> 2002/07/23 14:46:20 : change_trust_account_password: Failed to change 
> password for domain DOMTEST.
> Unable to join domain DOMTEST.
> 
> I've tryed to add a machine with the command:
> smbpasswd -a -m linux01 but it wasn't successfull, so I've created a 
> user named linux01 and by running
>  the same command again the error was:
> 
> User linux01$ does not exist in system password file 
> (usually /etc/passwd). Cannot add account without a valid 
> local system 
> user.
> Failed to modify password entry for user linux01$
> 
> But linux01 exists in the /etc/passwd file!
> 
> Any suggestions?
> Thanks.N