machine names same as usernames -> problems...

[Bradley W. Langhorst]

On Thu, 2003-02-06 at 17:47, Richard Sharpe wrote:
> On Thu, 6 Feb 2003, Bradley W. Langhorst wrote:
> 
> > On Thu, 2003-02-06 at 15:39, Andrew Bartlett wrote: 
> > > > adil (users) and
> > > > adil$ (machine)
> > > > cannot work.
> > > 
> > > Why can't it work?  I've seen this discussed a number of times, but
> > > never really been told why it doesn't work.  That $ is there for exactly
> > > that reason you know - to make them different.  
> 
> [...]
> 
> > > Can you describe the failure please? 
> > I thought this was well known...
> > The machine simply fails to join the domain. With a message about bad
> > password or invalid machine account.
> 
> Under what circumstances can't/doesn't this work?
> 
> Does it not work only in the case that adil and adil$ both exist in the 
> passwd database of the Samba server? 
it certainly fails in that situation.
I've had less specific troubles with machines 

I thought you were just saying that there is no solution to this
problem...

        
        When a user tries to log on, the workstation also tries to
        register that user's name as a NetBIOS name, with types of <00>
        and <03>. However, they clash with the already registered
        machine names. SOL.
        
I've just tested an XP machine joining to a samba3a21 domain (ldap
backend)
it fails with this in the log

[2003/02/06 17:42:02, 2] passdb/pdb_ldap.c:ldapsam_search_one_user(641)
  ldapsam_search_one_user: searching
for:[(&(uid=bwlang$)(objectclass=sambaAccount))]
[2003/02/06 17:42:03, 2] passdb/pdb_ldap.c:ldapsam_search_one_user(641)
  ldapsam_search_one_user: searching
for:[(&(uid=bwlang$)(objectclass=sambaAccount))]
[2003/02/06 17:42:03, 0] passdb/pdb_ldap.c:ldapsam_add_sam_account(1857)
  User already in the base, with samba properties
[2003/02/06 17:42:03, 0]
rpc_server/srv_samr_nt.c:_api_samr_create_user(2302)
  could not add user/computer bwlang$ to passdb.  Check permissions?
[2003/02/06 17:42:04, 2] smbd/server.c:exit_server(534)
  Closing connections

the very nice descriptive error message on the client is
"Access is denied"

there was no account bwlang$ when i started
there was an account bwlang.
interestingly - the join created the bwlang$ account but failed
nonetheless

brad

-- 
Bradley W. Langhorst <brad at langhorst.com>