AW: NT_STATUS_NO_TRUST_SAM_ACCOUNT - Multi Domains

[ggage at mmm.com]

Thanks for the response, Daniel.

There is a trust between the domains.  We have many NT ws's and servers in this
configuration.  I want the samba box to work the same way  (ie. reside in the
ITNTdomain but logon to the WINS domain).  The error msg states "
domain_client_validate: Domain password server not available".  Does this mean
that samba doesn't know how to find winsaccts046 in the WINS domain?  Nowhere in
the smb.conf is there any reference to WINS.  Just password server =
winsacct046.  I'm lost...

Thanks,
George





------------------------------------------------------------------------------------------------------------------------------------------------

-------------- next part --------------


Hi,

the domain which winsaccts046 is in must have a trust relation to your ITNT
domain.

Kind regards,
Daniel

-----Urspr?ngliche Nachricht-----
Von: ggage at mmm.com [mailto:ggage at mmm.com]
Gesendet: Mittwoch, 3. Januar 2001 23:01
An: samba-ntdom at us5.samba.org
Betreff: NT_STATUS_NO_TRUST_SAM_ACCOUNT - Multi Domains
-------------------------------------------------------------------------




Before I ask you to read too much, I think that my question boils down to:
Is
it OK to join my samba server (cadbert) to a domain (ITNT) as a member and
authenticate passwords off of a server (winsaccts046) in another domain
(WINS)?

I have successfully joined the ITNT domain with smbpasswd -j ITNT -r adam
(adam
is PDC of ITNT) after the NT admin added cadbert to ITNT.

When mapping a share  from an NT client or using smbclient, I get the
following
error.  BTW,  I have read the postings in the Oct 2000 archives and have
tried
their suggestions about removing and re-adding the samba server to the
domain.

share: \\cadbert\it
user: usren006 ( also tried with DOM:  wins\usren006 )

[2001/01/03 15:52:10, 0] rpc_client/cli_netlogon.c:(159)
  cli_net_auth2: Error NT_STATUS_NO_TRUST_SAM_ACCOUNT
[2001/01/03 15:52:10, 0] rpc_client/cli_login.c:(72)
  cli_nt_setup_creds: auth2 challenge failed
[2001/01/03 15:52:10, 0] smbd/password.c:(1261)
  connect_to_domain_password_server: unable to setup the PDC credentials to
mach
ine WINSACCTS046. Error was : NT_STATUS_NO_TRUST_SAM_ACCOUNT.
[2001/01/03 15:52:10, 0] smbd/password.c:(1454)
  domain_client_validate: Domain password server not available.
<------   WHY NOT?
[2001/01/03 15:52:10, 0] passdb/smbpass.c:(87)
  startsmbfilepwent_internal: unable to open file
/etc/opt/samba/private/smbpass
wd. Error was No such file or directory
[2001/01/03 15:52:10, 0] passdb/passdb.c:(149)
  unable to open smb password database.
[2001/01/03 15:52:10, 1] smbd/password.c:(500)
  Couldn't find user 'usren006' in smb_passwd file.
[2001/01/03 15:52:10, 2] smbd/reply.c:(914)
  NT Password did not match for user 'usren006' ! Defaulting to Lanman
[2001/01/03 15:52:10, 0] passdb/smbpass.c:(87)
  startsmbfilepwent_internal: unable to open file
/etc/opt/samba/private/smbpass
wd. Error was No such file or directory
[2001/01/03 15:52:10, 0] passdb/passdb.c:(149)
  unable to open smb password database.
[2001/01/03 15:52:10, 1] smbd/password.c:(500)
  Couldn't find user 'usren006' in smb_passwd file.
[2001/01/03 15:52:10, 1] smbd/reply.c:(933)
  Rejecting user 'usren006': bad password


sbm.conf:
# Global parameters
   [global]
           workgroup = ITNT
           netbios name = CADBERT
           server string = Samba Server 2.0.7
           security = DOMAIN
           encrypt passwords = Yes
           min password length = 3
           map to guest = Bad User
           password server = winsaccts046
           debug level = 2
           syslog = 0
           log file = /var/opt/samba/log.%m
           max log size = 1000
           local master = No
           guest account = samba
           writeable = Yes
           hosts allow = 169.14.
           short preserve case = No
           dos filetime resolution = Yes
           domain logons = No

   [it]
           path = /it
           valid users = +it