Error was : code 131 (again...)

[Allan Carhart]

Hey everyone. I've been searching the web, and see this is a common problem,
but haven't found a solution. So I guess I'll go ahead and start my own
thread here -- I'm getting very frustrated trying to add my samba server
to my NT domain.

Domain name is 'EASTSIDE", PDC name is 'PANTHER', IP is 10.0.0.245
My WINS server is sitting at 10.0.0.1

I've added my samba system to the Server Manager on my PDC.

I then execute this command "smbpasswd -j EASTSIDE -r PANTHER -D 10"
And receive this output:
----------------------------------------------------------------------
do_reseed: got 40 bytes from /dev/urandom.
resolve_name: Attempting wins lookup for name PANTHER<0x20>
bind succeeded on port 0
nmb packet from 10.0.0.1(137) header: id=5255 opcode=Query(0) response=No
    header: flags: bcast=No rec_avail=No rec_des=Yes trunc=No auth=No
    header: rcode=0 qdcount=1 ancount=0 nscount=0 arcount=0
    question: q_name=PANTHER<20> q_type=32 q_class=1
Sending a packet of len 50 to (10.0.0.1) on port 137
read_udp_socket: lastip 10.0.0.1 lastport 137 read: 62
parse_nmb: packet id = 5255
Received a packet of len 62 from (10.0.0.1) port 137
nmb packet from 10.0.0.1(137) header: id=5255 opcode=Query(0) response=Yes
    header: flags: bcast=No rec_avail=No rec_des=Yes trunc=No auth=Yes
    header: rcode=0 qdcount=0 ancount=1 nscount=0 arcount=0
    answers: nmb_name=PANTHER<20> rr_type=32 rr_class=1 ttl=4014
    answers   0 char ......   hex 04000A0000F5
Got a positive name query response from 10.0.0.1 ( 10.0.0.245 )
Connecting to 10.0.0.245 at port 139
write_socket(4,76)
write_socket(4,76) wrote 76
Sent session request
got smb length of 1
size=1
smb_com=0x0
smb_rcls=0
smb_reh=0
smb_err=0
smb_flg=0
smb_flg2=0
smb_tid=0
smb_pid=0
smb_uid=0
smb_mid=0
smt_wct=0
smb_bcc=0
modify_trust_password: machine PANTHER rejected the session setup. Error was : code 131.
2000/02/24 04:24:26 : change_trust_account_password: Failed to change password for domain EASTSIDE.
----------------------------------------------------------------------

I really don't know where to go from here. I've been studying these docs, but
I'm sure I'm missing something. 

Here is my [global] section of smb.conf:
----------------------------------------------------------------------
# Global parameters
[global]
        workgroup = EASTSIDE
        netbios name = LPRINT1
        security = SHARE
        encrypt passwords = Yes
        update encrypted = Yes
        log file = /var/log/samba.d/smb.%m
        max log size = 50
        name resolve order = wins bcast lmhosts
        local master = No
        wins proxy = Yes
        wins server = 10.0.0.1
        printing = lprng
----------------------------------------------------------------------

I have set 'security = SHARE' for the time being, because the docs seem to 
indicate I should not change that to 'security = domain' until after
I've succesfully gotten through the 'smbpasswd' hurdle.
...I hope I'm being clear.

By the way, I couldn't get  'security = server' to work either.
When I had that set with PANTHER as my password server,
I received the following message in my logs:

[2000/02/24 03:48:51, 1] smbd/password.c:server_cryptkey(1022)
  PANTHER rejected the session
[2000/02/24 03:48:51, 1] smbd/password.c:server_validate(1063)
  password server  is not connected
[2000/02/24 03:48:51, 0] passdb/smbpass.c:startsmbfilepwent(50)
  startsmbfilepwent: unable to open file /etc/smbpasswd

---

The NT side:  NT4 with Service Pack 6 Hostname: PANTHER
The SAMBA Side: Linux 2.2.x with SAMBA-2.0.5a, Hostname: LPRINT1

The two systems are on the same physical (10.0.0.x) network. I have
set encryption to 'yes' on the samba side, although I haven't done
any re-linking to make it use encryption. Am I missing something with that?
I've also made the "EnablePlainPassword" registry change on the NT side.

Well, I know this message is LONG, but I hope I'm providing you all
with the necessary information up front! Please let me know if you can give
me a hand!

Thanks,

Allan Carhart
allan at carhart.com