Trouble when re-joining a NT Domain

Richard Sharpe sharpe at
Thu Jul 13 16:34:51 GMT 2000

At 11:56 PM 7/13/00 +1000, Peter Samuelson wrote:
>[Pau Garcia i Quiles < at>]
>> I was succesfully joining the domain, but I didn't remember I did
>> already joined, and I relaunched that order: smbpasswd -j
>> THE_DOMAIN. Now I get this:
>> cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
>Joining the domain in Samba 2.0.x involves connecting to the PDC using
>the "default password" for your machine name (the default password is
>easily-computed and well-known, ergo not very secure), then changing
>your machine account password and storing the new (random) one in the
>local file "{DOMAIN}.{MACHINE}.mac".

Hmmm, I was under the impression that it changed the NT4 hash for the
machine trust account in the smbpasswd file ...

>I don't know whether a failed attempt to join trashes your
>{DOMAIN}.{MACHINE}.mac file.  If so, you will need to re-join the
>domain.  If not, you are still in the domain.
>> What can I do? (besides removing GREAT_SERVER from THE_DOMAIN and
>> adding it again) :-?
>If "THE_DOMAIN.GREAT_SERVER.mac" was trashed by smbpasswd the second
>time, this is your only option.

Ummmm, I have had lots of success simply adding the machine account again:

   smbpasswd -a -m machine


Richard Sharpe, sharpe at
Samba (Team member,, Ethereal (Team member,

More information about the samba-ntdom mailing list