[Samba] Joining a Domain With NT4 PDC Instructions Don't Work

[Andrew Bartlett]

Harvey Wamboldt wrote:
> 
> Keywords: samba, NT4, PDC, smbpasswd, problem, "join domain"
> NT_STATUS_NO_TRUST_SAM_ACCOUNT,
> "unable to setup the PDC credentials to machine"
> 
> Version: samba-2.2.3a, built on SPARC/Solaris 5.7 with gcc.

> I eventually figured this out from smbpasswd(8).  Perhaps this is a
> bug since one would think that running:
> 
>    smbpasswd -j <DOM> -r <PDC> -UAdministrator%password
> 
> would accomplish the same thing, but in my case at least it doesn't.

This does work, its just that there was a big/little endien bug in Samba
2.2 at the time of the release.

The other method is inheriently insecure, as the password is set to a
known value until the machine changes it during the join.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net