NT 4 login problems

[Sean E. Millichamp]

On Tue, 14 Mar 2000, Luke Kenneth Casson Leighton wrote:

> sean, it's not going nevcessarilty to be something you did, however let's
> check it out.
> 
> follow standard procedure, see TNG faq debug instructions.
> 
> first thing, send smb.conf.

attached.

> second thing prepare to recompile with ./configure.developer.
> 
> third thing,, prepare debug logs level 100.

I recompiled as of the CVS version at about 8 AM Wednesday, GMT -0500

I will be sending the logs in a private mail to you luke in just a minute.

> now, i know you ar running the tng daemons as root, but it doesn't look
> that way, the euid=99 means that an incoming connetion is being made as
> non-root, which is why the access is failing. only root can read the
> seret_db (which contains $MACHINE.ACC trust account secret).
> 
> therefore, access denied (0xc000022).
> 
> 
> so, why?

yah, that's what I was wondering too.  I really am running them all as
root :)

> why you, when i tested this last week, and it worked.  why you, when other
> people report it's ok?
> 
> maybe there is a previous connection, but that can't be right, beause you
> just  did a reboot, right?
> 
> maybe it's because you use nt-srv standalone (as an nt wksta).
> 
> create some log files and send them to me, and send the smb.conf to the
> list, ok?

Other info possibly of interest:
It's NT 4 Server with SP3 installed as a standalone.

I followed the TNG FAQ exactly and used the sample smb.conf file as a
reference.  The NT server *says* it joined the domain successfully but
when I reboot and try to log in as either a standard user or a user
supposedly mapped as a domain administrator I get the "The system cannot
log you on to this domain because the system's computer account in its
primary domain is missing or the password on that account is incorrect."

This sounds like the same (or very similar) problem that Tom Crummey has
and there was another person who emailed me privately and said he had
similar experiences.  I encouraged him to send in a debug report as well
but haven't heard back.

Thanks.

Sean

------------------------------------------
 Sean E. Millichamp, Consultant
 Ingematics - A Division of Compu-Aid, Inc.