win2k domain-less client failing to authenticate when security=domain

[Jonathan Detert]

Hello,

I've got a linux box running smbd & nmbd versions 2.0.6 with security = DOMAIN,
and an NT4 box as the password server.  The sole domain controlled by that NT4
box is named "MSOE".  All is well with win98 clients.  However, Win2k clients
that are not part of an NT domain, but simply belong to a "workgroup" named "MSOE",
are unable to authenticate.  The /var/log/samba/log.%m file on the linux box says
this:

        [2001/04/23 13:39:52, 0] smbd/password.c:domain_client_validate(1470)
          domain_client_validate: unable to validate password for user
          detertj in domain SATURN to Domain controller JUPITER. Error
          was NT_STATUS_NO_SUCH_USER.          

I assume that the problem is that the client says it's in the "SATURN"
domain rather than the "MSOE" domain (which is the domain that JUPITER
is PDC for).

Any idea how to fix this?  I assume adding SATURN to the MSOE domain
would fix this, but I'm told by others here that we don't want to do
that.  Ideas?

Thanks
-- 
Happy Landings,

Jon Detert
Unix System Administrator, Milwaukee School of Engineering
1025 N. Broadway, Milwaukee, Wisconsin 53202