Solution: "Could not update internal security to add machine to domain"

[Luke Kenneth Casson Leighton]

gerald,

you want to limit the number of entries after the S-1-5-21 to 3.  see
docs/NTDOMAIN.txt.

luke

On Wed, 1 Apr 1998, Gerald Heinig wrote:

> Hi all,
> 
> Thanks to a sample smb.conf from Johan Hedin I've now got NT domain
> logons on our Samba server.
> In case anyone comes across the following message from NT (translated
> from the german) whilst trying to connect the NT wks to the Samba
> server:
> 
> Could not update internal security. Could not add MACHINE to DOMAIN
> 
> The problem arose because I had got the domain sid wrong. I had
> mistakenly put
> 
> domain sid = 1-5-21-111-222-333-444
>                       ^^^^
> 
> instead of
> 
> domain sid = S-1-5-21-111-222-333-444
>                      ^^^
> 
> ie. I forgot the S- at the beginning of the sid.
> 
> It might be worthwhile to put this in the FAQ. I don't know how many
> other people made the same mistake.
> 
> cheers
> 
> Gerald
> 
> 
> 

<a href="mailto:lkcl at samba.anu.edu.au" > Luke Kenneth Casson Leighton  </a>
<a href="http://mailhost.cb1.com/~lkcl"> Samba and Network Development </a>
<a href="http://www.samba.co.uk"       > Samba and Network Consultancy </a>