w2k and authentication

[Tom Hudak]

I'm having some issues with my new flashy 2.2 based PDC. All seems to work
fine with 9x/ME (ugh, I know...) in that they (lusers) can log in using their
existing user-names passwords using domain level logins.
However, when setting up the domain login's on a w2k machine after adding the
machine to all the authentication files and setting up a trust account for the
machine name, I can't for the life of me get it to log me in. I had to setup a
root domain user and get w2k to join the domain using that user but now I
can't login with that user or any other for that matter.

I get the following winblows error:
Your account has been disabled. Please see your system administrator.

Obviously the account hasn't been disabled, but upon trying to login on this
machine I get the following in the smbd logs:
PAM: Init user: thudak
[2001/04/25 09:19:29, 1] lib/util_sock.c:get_socket_name(1055)
  Gethostbyaddr failed for 10.0.2.214
[2001/04/25 09:19:29, 4] passdb/pampass.c:proc_pam_start(173)
  PAM: setting rhost to: 10.0.2.214
[2001/04/25 09:19:29, 4] passdb/pampass.c:proc_pam_start(181)
  PAM: setting tty
[2001/04/25 09:19:29, 4] passdb/pampass.c:proc_pam_start(188)
  PAM: Init passed for user: thudak
[2001/04/25 09:19:29, 4] passdb/pampass.c:pam_account(246)
  PAM: Account Management for User: thudak
[2001/04/25 09:19:29, 0] passdb/pampass.c:pam_account(268)
  PAM: UNKNOWN ERROR for User: thudak
[2001/04/25 09:19:29, 2] passdb/pampass.c:pam_error_handler(66)
  PAM: Account Check Failed : Authentication service cannot retrieve
authentication info.
[2001/04/25 09:19:29, 4] passdb/pampass.c:proc_pam_end(144)
  PAM: PAM_END OK.
[2001/04/25 09:19:29, 0] passdb/pampass.c:pam_accountcheck(381)
  PAM: Account Validation Failed - Rejecting User!

I'm not sure what exactly is failing, but the UNKNOWN ERROR seems to
winblows'ish for me... I would like to know at least an error # or something
to that effect.
Has anyone else seen this? Any ideas? I'm 1 step away from using w2k inside a
VMware session to do account management of my Samba2.2 PDC!
Thanks,
-- 
Thomas J. Hudak
Systems Administrator
Sistina Software Inc. - www.sistina.com
Phone: 612.379.3951 
Page: 612.318.1967
Fax: 612.379.3952
Key fingerprint = BEC6 3181 4C9B A7BB AF11  4717 6F85 B346 380D 523E

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: not available
Url : http://lists.samba.org/archive/samba-ntdom/attachments/20010425/8536a98c/attachment.bin