admin group

Roman, James (J.D.) jroman6 at ford.com
Tue Jan 25 16:33:04 GMT 2000


It appears that you are trying to do two different things.  I'll address
what I think is the main issue first, adding the NT4 WS to the domain.

To add a machine to the domain you must first create a machine ID in the
/etc/passwd file.  To do this, you take the computer name from the
workstation and add a $ to the end of the name.  For example, if your
computer name is machine1, then add an entry for machine1$ to your passwd
file.  On many Linux distributions you can use the useradd command:
/usr/sbin/useradd -d /dev/null machine1$

You should edit your passwd file so that machine accounts have the home
directory set to /dev/null and the password set to /bin/false for security
reasons. (You don't want someone to be able to telnet or ftp in as the
machine name.)  Your passwd entry should look like this:

machine1$:*:1000:1000:any description:/dev/null:/bin/false

After entering the machine name into the passwd file, you then add it to the
smbpasswd file with the command:

smbpasswd -a -m machine1

This specifies to add (-a) a new machine (-m) account to the file.

After this is complete, go to the workstation and add it to the domain, but
DO NOT check the "Create a computer account in the domain" box.  (This will
bomb with an error message.)  Just change the Domain name to the one
configured on your Samba machine and click OK.  You should get the message
that your machine was successfully added to the domain. 

-----Original Message-----
From: Ivan Makfinsky [mailto:imak at bellatlantic.net]
Sent: Tuesday, January 25, 2000 10:36 AM
To: Multiple recipients of list SAMBA-NTDOM
Subject: admin group


ok, i am having trouble setting up a user as an admin for the domain. The
man pages are outdated and i cannot search the archives...
i am using the latest tng code and have added the user to the group wheel,
smb.conf has "domain admin group = wheel" and that's not working. When
trying to join an nt ws, i get the response that the user does not have
sufficient rights to perform this task... what am i doing wrong?

imak


More information about the samba-ntdom mailing list