Trouble when re-joining a NT Domain

[Richard Sharpe]

At 11:56 PM 7/13/00 +1000, Peter Samuelson wrote:
>
>[Pau Garcia i Quiles <pgquiles.teleline.es at teleline.es>]
>> I was succesfully joining the domain, but I didn't remember I did
>> already joined, and I relaunched that order: smbpasswd -j
>> THE_DOMAIN. Now I get this:
>
>> cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
>
>Joining the domain in Samba 2.0.x involves connecting to the PDC using
>the "default password" for your machine name (the default password is
>easily-computed and well-known, ergo not very secure), then changing
>your machine account password and storing the new (random) one in the
>local file "{DOMAIN}.{MACHINE}.mac".

Hmmm, I was under the impression that it changed the NT4 hash for the
machine trust account in the smbpasswd file ...

>I don't know whether a failed attempt to join trashes your
>{DOMAIN}.{MACHINE}.mac file.  If so, you will need to re-join the
>domain.  If not, you are still in the domain.
>
>> What can I do? (besides removing GREAT_SERVER from THE_DOMAIN and
>> adding it again) :-?
>
>If "THE_DOMAIN.GREAT_SERVER.mac" was trashed by smbpasswd the second
>time, this is your only option.

Ummmm, I have had lots of success simply adding the machine account again:

   smbpasswd -a -m machine

>Peter
>

Regards
-------
Richard Sharpe, sharpe at ns.aus.com
Samba (Team member, www.samba.org), Ethereal (Team member, www.zing.org)