Samba 2.2.0 PDC Problem

[Hilary Cheng]

Hi,

    Yes, i have set the smbpasswd and I have tried to replace
samba from pam_unix.o to pam_permit.o. But It can't join the
trust domain.

    When I get into the source code, I found the error occuried  at
smbd/reply.c ( line 466 ).

466    if (!smb_password_ok(smb_trust_acct, NULL, (unsigned char *)smb_passwd,
(unsigned char *)smb_nt_passwd)) {
467      DEBUG(0,("session_trust_account: Trust Account %s - password
failed\n", user));
468      SSVAL(outbuf, smb_flg2, FLAGS2_32_BIT_ERROR_CODES);
469      return(ERROR(0, NT_STATUS_LOGON_FAILURE));
470    }

when it tried to compare two password, it failed. It is strange that it will be
only called
when the username is ended with "$".

Regards,

Hilary

Andrew Bartlett wrote:

> On NT, log in as local admin, and use network control panal to join the
> domain.  You may need the add user script as exampled in the
> Samba-PDC-HOWTO, but then you can just 'create computer account in
> domain' and put in the root password (which must already be in the
> smbpasswd file.).
>
> When it comes to logging into the domain, if you are using a PAM based
> setup, you may trip over a bug in Samba 2.2.0 - and be told that your
> account is disabled.  If this occurs, edit your /etc/pam.d/samba file to
> change the account line to use pam_permit.so
>
> (Or wait for 2.2.1, which will have this bug firmly squashed - both the
> bug will be fixed and a parameter disabling PAM altogether by default
> will be added)
>
> Andrew Bartlett
> abartlet at pcug.org.au
>