samba-tng: Cannot create trust account as admin.

[Greg Dickie]

For sure, I only removed that workstation. If I smbpasswd -a -m it and join its
fine (same with Win2K RC3 BTW) but it doesn't like the admin account to modify
it. What daemon it that done in? One problem with the new architecture is
finding stuff, Does anyone have an LXR site set up?

Greg 


On 17-Jan-00 Luke Kenneth Casson Leighton wrote:
> you still need the samba-server's trust account, and you still need to do
> smbpasswd -j SAMBA_DOMAINNAME.
> 
> smbd et al will use this trust account to contact netlogond to verify any
> users, that's why.
> 
> On Mon, 17 Jan 2000, Greg Dickie wrote:
> 
>> 
>> Nope, it's worse if I remove it from smbpasswd: I get "The machine account
>> for
>> this computer either does not exist or is inaccessible" which is true except
>> that I clicked the "create computer account" thingy and have put my username
>> & 
>> password which is domain admin AND "admin user" on the PDC.  I'll see if I
>> can
>> see anything in the logs, I assume netmon wouldn't be too useful in this
>> case...
>> 
>> 
>> Greg 
>> 
>> On 17-Jan-00 Luke Kenneth Casson Leighton wrote:
>> > hmmm..... that shouldn't be the case.
>> > 
>> > you're using "admin/pass" in the dialog box?
>> > 
>> > try removing the workstation trust account from private/smbpasswd.
>> > 
>> > check if it gets added, what the "flags" are set to.  it if says "[DW
>> > ]", let me know, i think i may still have a bug, there.
>> > 
>> > On Tue, 18 Jan 2000, Greg Dickie wrote:
>> > 
>> >> 
>> >> Hi,
>> >> 
>> >>   Apologies if this is a known bug but I finally managed to get TNG
>> >>   working
>> >>   for
>> >> me by zapping all the "private" files and recreating them. I seem to have
>> >> domain admin. privileges and profiles are fine BUT if I want to join a
>> >> workstation to the domain without using smbpasswd first (ie: just the NT
>> >> dialog), it does not seem to work (it did in the old 2.1 code). It tells
>> >> me
>> >> my
>> >> account does not have privilege. Any pointers to where I could start
>> >> looking
>> >> to
>> >> debug this?
>> >> 
>> >> Greg
>> >> 
>> >> ---------------------------------------------------------------------
>> >> Greg Dickie
>> >> Just A Guy*
>> >> *from discreet (the logic is gone)
>> >> Montreal 
>> >> (514) 954-7171
>> >> greg at discreet.com
>> >> 
>> > 
>> > <a href="mailto:lkcl at samba.org"   > Luke Kenneth Casson Leighton    </a>
>> > <a href="http://www.cb1.com/~lkcl"> Samba and Network Development   </a>
>> > <a href="http://samba.org"        > Samba Web site                  </a>
>> > <a href="http://www.iss.net"      > Internet Security Systems, Inc. </a>
>> > <a href="http://mcp.com"          > Macmillan Technical Publishing  </a>
>> > 
>> >  ISBN1578701503 DCE/RPC over SMB: Samba and Windows NT Domain Internals
>> 
>> ---------------------------------------------------------------------
>> Greg Dickie
>> Just A Guy*
>> *from discreet (the logic is gone)
>> Montreal 
>> (514) 954-7171
>> greg at discreet.com
>> 
> 
> <a href="mailto:lkcl at samba.org"   > Luke Kenneth Casson Leighton    </a>
> <a href="http://www.cb1.com/~lkcl"> Samba and Network Development   </a>
> <a href="http://samba.org"        > Samba Web site                  </a>
> <a href="http://www.iss.net"      > Internet Security Systems, Inc. </a>
> <a href="http://mcp.com"          > Macmillan Technical Publishing  </a>
> 
>  ISBN1578701503 DCE/RPC over SMB: Samba and Windows NT Domain Internals

---------------------------------------------------------------------
Greg Dickie
Just A Guy*
*from discreet (the logic is gone)
Montreal 
(514) 954-7171
greg at discreet.com