[Samba] Access Denied when trying to login to samba PDC

[Thomas Graham]

While trying to set up samba as a PDC, I followed O'Reillys Using Samba. This resulted in the
following smb.conf:

[global]
workgroup = GRAHAM
encrypt passwords = true
log level = 1
max log size = 1000
hosts allow = 192.168.0/24 192.168.1/24
hosts deny = 1.1.1.1/0.0.0.0
domain logons = yes

security = user
os level = 34
local master = yes
preferred master = yes
domain master = yes

[temp]
comment = shared temporary directory
path = /usr/tmp
readonly = no
guest ok = yes

[homes]
comment = Home Directories
browseable = no
writable = yes
valid users = %S
create mode = 0664
directory mode = 0775
map to guest = bad user

If I try to join the domain "GRAHAM" from any of the WinXP(NT5.1) machines, by changing from
workgroup GRAHAM to Domain GRAHAM, then click OK, I am prompted to "Enter the name and password of
an account with permission to join the domain."

If I enter a valid username and password (that allows access to the shared drives) I get the
response:
	"The following error occurred attempting to access the domain "GRAHAM": ACCESS IS DENIED."

[2003/02/16 11:30:47, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1416)
  unable to open passdb database.

If I enter a bad username/pass I get the response:
	"The following error occurred attempting to access the domain "GRAHAM": Logon failure:
Unknown username/bad password"

[2003/02/16 11:29:17, 1] smbd/password.c:pass_check_smb(561)
  Account for user 'tg-1998' was disabled.
[2003/02/16 11:29:17, 1] smbd/password.c:pass_check_smb(561)
  Account for user 'tg-1998' was disabled.
[2003/02/16 11:29:17, 1] smbd/reply.c:reply_sesssetup_and_X(988)
  Rejecting user 'tg-1998': authentication failed
[2003/02/16 11:29:18, 1] smbd/password.c:pass_check_smb(561)
  Account for user 'tg-1998' was disabled.
[2003/02/16 11:29:18, 1] smbd/password.c:pass_check_smb(561)
  Account for user 'tg-1998' was disabled.
[2003/02/16 11:29:18, 1] smbd/reply.c:reply_sesssetup_and_X(988)
  Rejecting user 'tg-1998': authentication failed


nmbd.log:
[2003/02/16 11:45:15, 0] nmbd/nmbd_logonnames.c:add_logon_names(156)
  add_domain_logon_names:
  Attempting to become logon server for workgroup GRAHAM on subnet 192.168.0.108 [2003/02/16
11:45:15, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(291)
  become_domain_master_browser_bcast:
  Attempting to become domain master browser on workgroup GRAHAM on subnet 192.168.0.108 [2003/02/16
11:45:15, 0] nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(305)
  become_domain_master_browser_bcast: querying subnet 192.168.0.108 for domain master browser on
workgroup GRAHAM [2003/02/16 11:45:19, 0] nmbd/nmbd_logonnames.c:become_logon_server_success(115)
  become_logon_server_success: Samba is now a logon server for workgroup GRAHAM on subnet
192.168.0.108 [2003/02/16 11:45:19, 0] nmbd/nmbd_responserecordsdb.c:find_response_record(237)
  find_response_record: response packet id 30328 received with no matching record. [2003/02/16
11:45:19, 0] nmbd/nmbd_responserecordsdb.c:find_response_record(237)
  find_response_record: response packet id 30329 received with no matching record. [2003/02/16
11:45:24, 0] nmbd/nmbd_become_dmb.c:become_domain_master_stage2(115)
  *****

  Samba server SUN is now a domain master browser for workgroup GRAHAM on subnet 192.168.0.108

  *****
[2003/02/16 11:45:38, 0] nmbd/nmbd_become_lmb.c:become_local_master_stage2(404)
  *****

  Samba name server SUN is now a local master browser for workgroup GRAHAM on subnet 192.168.0.108

  *****
[2003/02/16 11:46:34, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:34, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12 [2003/02/16 11:46:47, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x7
	
I am running samba 2.2.3a-12 on a Sun Sparc64 running Debian GNU/Linux 3.0 "woody". All the client
machines will be running windows XP pro/home edition.

Thomas Graham.

--
But be not afraid of greatness:
   some men are born great, some achieve greatness,
   and some have greatness thrust upon them.
--