Windows XP logon problem - Smab 2.2.5

[Yashpal Nagar]

On Mon, Aug 19, 2002 at 01:49:56PM +0300, Yasser Sedky spoke out thus:
> Hi all,
> 
> I'm actually fed up with this problem. I saw many questions around this
> problem, they are all giving same steps, and they are all failing to
> solve the problem!
> 
> I'm installing Samba 2.2.5 on FreeBSD 4.6 box, I followed all steps of
> HOW-TO to make Samba act as PDC.
> 
> I did the following:
> 
> 1- Samba successfully installed as PDC.
> 2- WinXP patched with the RequireSignorSeal patch.
  You mean you have "Disabled Secure Sign & seal always" ?

> 2- WinXP stations joined the Domain successfully , machine accounts
> created manually with the "$" at end of machine name.
> 3- WinXP restarted successfully ;-)
> 4- I tried to login using an enabled user, sometimes I can log , other
> times I get "Domain Controller is not available" 

add user script = /usr/sbin/useradd -g machines -d /dev/null -s /bin/false -c Ma
chine %m$

use the line above in smb.conf. to create m/c accounts automatically.

I have used 2.2.1a samba release.

> 6- In all cases I can see the SAMBA shares, when I log locally I get an
> authentication dialog box to reach the Samba Shares!
Ok
> 7- Profile/Homes directory persmissions are checked.
Ok
> 
> PS: should I downgrade to Samba 2.2.3a ? Or should I through my XP away?
> 
> Anyone has solution to this very COMMON problem ????
> 
> 
> On my WinXP I set:
> WINS IP = Samba IP 
> NetBIOS over TCP/IP enabled
ok
> 
> On my smb.conf I made:
> 
> <snip>-------------
> 
> [global]
>         ;basic server settings
>         workgroup = MISRTECH
>         netbios name = ZEUS
>         interfaces = 192.168.1.1/24 127.0.0.0/24
>         server string = Zeus Domain Controller
>         socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192
> SO_RCVBUF=8192
> 
>         ;PDC and master browser settings
>         os level = 64

You can use it as higher as 255. This is responsible when actual election is going on whether SAMBA server
has to act as PDC or what is its weightage.

>         preferred master = yes
>         local master = yes
>         domain master = yes
> 
>         ;security and logging settings
>         security = user
>         encrypt passwords = yes
>         log file = /var/log/samba/log.%m
>         log level = 10
>         max log size = 50
>         hosts allow = 192.168.1., 127.

Do you really need this ? "host allow ". I would recommend to comment it first and see.
It actually denies the smb connection to these network hosts.
check it.

> 
>         ;user profiles and home directory
>         logon home = \\%L\%U\
>         logon drive = Z:
>         logon path = \\%L\profiles\%U
> 
>         domain logons = Yes
>         dns proxy = No
>         wins support = Yes
>         admin users = root
> 
> [homes]
>         comment = Home Directories
>         path = /my/samba/homes
>         valid users = %S
>         read only = No
>         browseable = No
>         writable = yes
> 
> [netlogon]
>         comment = Network Logon Service
>         path = /usr/local/samba/lib/netlogon
>         guest ok = No
>         share modes = No
>         writable = no
>         browseable = No
> 
> [Profiles]
>         path = /my/samba/profiles
>         create mask = 0600
>         directory mask = 0700
>         guest ok = No
>         browseable = No
>         writable = Yes
> 
> <snip>-------------
> 
> 
> Many thanks,
> Yasser Sedky
> 
> 

Bye

-Yash


-- 
Yashpal Nagar
Systems Administrator
Delhicall Centres 'Gurgaon'
Ph 0124-6223849 , cell 9811499273
---------------------------