trying to join WinNT/2000 Domain

[Andrew Bartlett]

Bill Parker wrote:
> 
> Hi All,
> 
>         When I attempt to join a domain //dbsroot, I get the following
> error message:
> 
> [root at fileserver samba.d]# smbpasswd -j //dbsroot
> cli_net_auth2: Error NT_STATUS_NO_TRUST_SAM_ACCOUNT
> cli_nt_setup_creds: auth2 challenge failed
> modify_trust_password: unable to setup the PDC credentials to machine
> DBSROOT. Error was : NT_STATUS_NO_TRUST_SAM_ACCOUNT.
> 2001/12/03 13:20:34 : change_trust_account_password: Failed to change
> password for domain //DBSROOT.
> Unable to join domain //DBSROOT.

This will only work if you have the machine account already added with
server manager (or eqiv).  Use the -Uuser%pass option to add it from the
Samba end.

> What am I missing here (confusing stuff).  I also understand
> Samba 3.0 is in Alpha test right now, and will have native
> active directory support for Win2K systems (or am I wrong again)?

The Samba 3.0 alpha can join an ADS domain and accept kerberos logins on
that basis. See the ADS-HOWTO in textdocs for details.

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net