Samba PDC and Win2K client

[Robby Tanner]

I believe an X means that the account is disabled.

> -----Original Message-----
> From: samba-ntdom-admin at lists.samba.org
> [mailto:samba-ntdom-admin at lists.samba.org]On Behalf Of Chad R. Larson
> Sent: Wednesday, January 02, 2002 12:13 AM
> To: samba-ntdom at lists.samba.org
> Cc: Bill Bloom
> Subject: Samba PDC and Win2K client
> 
> 
> Ok, I'm pretty much stumped.
> 
> I've got Samba 2.2.2 on a FreeBSD 2.2.8-STABLE system that's pretty
> well behaving itself.  It prints, it serves up shares, etc.
> 
> It also thinks it is the PDC for a DCF domain here in my house, as
> well as the Master Browser and a WINS server.  All of that works
> ducky with Win9x systems.  But I cannot get my Win2K Pro notebook to
> join the domain, no matter how much I try.
> 
> Symptoms:
> 1)  The notebook says "Login failure: unknown user name or bad
>     password."
> 2)  A tethereal trace shows the PDC saying "NETLOGON SAM Response -
>     user unknown" in the midst of a bunch of SMB session setup
>     chatter.
> 3)  The log file for the client shows:
> +---------------
> | [2002/01/01 21:47:30, 0] 
> rpc_server/srv_samr.c:api_samr_set_userinfo(672)
> |   api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO.
> | [2002/01/01 21:47:30, 0] 
> passdb/pdb_smbpasswd.c:startsmbfilepwent(171)
> |   startsmbfilepwent_internal: unable to open file 
> /usr/local/private/smbpasswd
> |   Error was Permission denied
> | [2002/01/01 21:47:30, 0] 
> passdb/pdb_smbpasswd.c:pdb_getsampwrid(1459)
> |   unable to open passdb database.
> +---------------
> 4)  If I force the permissions on the smbpasswd file to be something
>     other than 600, some process sets them back.
> 
> 5)  The smb and nmb daemons are running as root, the files in
>     /usr/local/private are readable by root.  Each time an attempt
>     fails, the secrets.tdb file is altered.
> 
> 6)  The smbpasswd command seems to work fine, adding and deleting
>     users and all, so the smbd =can= get to and alter the file.  (BTW,
>     what does an 'X' in the attributes field mean?)
> 
> So, it looks to me like some process running as not-root is trying
> to read the password file and failing, and then passing the failure
> back up the stream.
> 
> Attached is my smb.conf file.  Any help would be appreciated.
> 
> 	-crl
> --
> Chad R. Larson (CRL15)   602-953-1392   Brother, can you paradigm?
> chad at dcfinc.com         chad at larsons.org          larson1 at home.com
> DCF, Inc. - 14623 North 49th Place, Scottsdale, Arizona 85254-2207
>