Samba 2.2.0 PDC Problem

[Andrew Bartlett]

On NT, log in as local admin, and use network control panal to join the
domain.  You may need the add user script as exampled in the
Samba-PDC-HOWTO, but then you can just 'create computer account in
domain' and put in the root password (which must already be in the
smbpasswd file.).

When it comes to logging into the domain, if you are using a PAM based
setup, you may trip over a bug in Samba 2.2.0 - and be told that your
account is disabled.  If this occurs, edit your /etc/pam.d/samba file to
change the account line to use pam_permit.so 

(Or wait for 2.2.1, which will have this bug firmly squashed - both the
bug will be fixed and a parameter disabling PAM altogether by default
will be added)

Andrew Bartlett
abartlet at pcug.org.au


tmaly at mvista.com wrote:
> 
> You may need to run a "smbpasswd -a -m MACHINE1" before you do this. I
> think if this does not happen, then it tries to add the machine via the
> credentials of the current logged in user (I could be wrong, but it's a
> hunch). Any way, W2K knows to pop up a box asking for credentials to add
> the machine account (from the already-existent UNIX account), but I
> think NT4 doesn't. Just an idea.
> 
> Hilary Cheng wrote:
> >
> > HI All,
> >
> >     I have tried Samba2.2.0 to setup a PDC for my network. I have setup
> > and create all the machines accounts and user accounts. when I join
> > the domain from NT4WS, it shows up a Error Dialog "Unable to
> > connect to the domain controller for this domain. Have your
> > administrator
> > check your computer account on the domain.". then I check the log file
> > I found that there is an errror.
> >
> > session_trust_account: Trust Account MACHINES1$ - password failed
> >
> > since the machines account should not have password. but it tells
> > me that I need a password for the machines account.
> >
> > Can anyone help me to solve this problem ?
> >
> > Regards,
> >
> > Hilary
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> 
> --
> Tomas Maly
> "IT Freak"
> IT Department
> MontaVista Software
> http://www.mvista.com
> (408) 328 8429 desk
> (408) 592 0350 cell
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
Andrew Bartlett
abartlet at pcug.org.au