[Samba] Root can't login to domain workstations

[Paul Gienger]

>>I'm pretty sure i added root to samba database, but i tried it again in
>>other machine , first thing i did was smbpasswd -a root , but still get
>>the same strange error:
>>"The system cannot log you on due to the following error :
>> A device attached to the system is not functioning."
>>    
>>
>
>This is the error log from the machine where i was trying to log in:
>  
>
I've chopped out all but this one line from your logs

>[2005/03/15 17:35:52, 1] rpc_server/srv_netlog_nt.c:_net_sam_logon(766)
>  _net_sam_logon: user REMAXPRAIA\root has user sid S-1-5-21-1916702674-2089629516-631066457-1000
>   but group sid S-1-5-21-378043444-2358454591-1624186084-512.
>  The conflicting domain portions are not supported for NETLOGON calls
>  
>
If you notice, there's a SID conflict going on here.  It's specifically 
complaining about the user and group sids, which I don't know if that's 
enough to force a failed login, but it's a place to start looking.

Run a net getlocalsid on the server to find out what the server thinks 
is it's SID should be, you need to make this number match out everyplace 
that it is incorrect.  Make sure your smbldap-tools set is configured 
with the right value for a start.  I think you can go in and replace the 
portion of the SID on any users/groups that don't have the right data, 
just by editing your LDAP data, but I'd entertain some confirmation of 
that idea.

See if that doesn't help things.

-- 
Paul Gienger                    Office: 701-281-1884
Applied Engineering Inc.
Systems Architect               Fax:    701-281-1322
URL: www.ae-solutions.com       mailto: pgienger at ae-solutions.com