Samba 2.2.0 PDC Problem

[Andrew Bartlett]

What are the relevent logfile entires?  The code in question is
verifying that the workstation has a vaid account, workstation trust
accounts all end in $.  

Is there a valid, enabled account for the comptuer in the smbpasswd
file?

Andrew Bartlett

Hilary Cheng wrote:
> 
> Hi,
> 
>     Yes, i have set the smbpasswd and I have tried to replace
> samba from pam_unix.o to pam_permit.o. But It can't join the
> trust domain.
> 
>     When I get into the source code, I found the error occuried  at
> smbd/reply.c ( line 466 ).
> 
> 466    if (!smb_password_ok(smb_trust_acct, NULL, (unsigned char *)smb_passwd,
> (unsigned char *)smb_nt_passwd)) {
> 467      DEBUG(0,("session_trust_account: Trust Account %s - password
> failed\n", user));
> 468      SSVAL(outbuf, smb_flg2, FLAGS2_32_BIT_ERROR_CODES);
> 469      return(ERROR(0, NT_STATUS_LOGON_FAILURE));
> 470    }
> 
> when it tried to compare two password, it failed. It is strange that it will be
> only called
> when the username is ended with "$".
> 
> Regards,
> 
> Hilary
> 
> Andrew Bartlett wrote:
> 
> > On NT, log in as local admin, and use network control panal to join the
> > domain.  You may need the add user script as exampled in the
> > Samba-PDC-HOWTO, but then you can just 'create computer account in
> > domain' and put in the root password (which must already be in the
> > smbpasswd file.).
> >
> > When it comes to logging into the domain, if you are using a PAM based
> > setup, you may trip over a bug in Samba 2.2.0 - and be told that your
> > account is disabled.  If this occurs, edit your /etc/pam.d/samba file to
> > change the account line to use pam_permit.so
> >
> > (Or wait for 2.2.1, which will have this bug firmly squashed - both the
> > bug will be fixed and a parameter disabling PAM altogether by default
> > will be added)
> >
> > Andrew Bartlett
> > abartlet at pcug.org.au
> >
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba

-- 
Andrew Bartlett
abartlet at pcug.org.au