Unable to join domain

[Eric Wallace]

I can't seem to coax Samba 2.2.2 on Solaris 8/Sparc into joining my NT 4.0 domain, and the error message is useless.

I've manually added the Samba server name to the domain (as "NT Workstation or Server", not BDC), so it's ready and waiting for the join and password synchronization. I stop the Samba services, then run "smbpasswd -j MEFP -r meadmin01 -UAdministrator%PASSWORD", and this is the response each time:

	INFO: Debug class all level = 3   (pid 20507 from pid 20507)
	added interface ip=139.187.255.90 bcast=139.187.255.255 nmask=255.255.0.0
	added interface ip=127.0.0.1 bcast=255.255.255.255 nmask=0.0.0.0
	resolve_lmhosts: Attempting lmhosts lookup for name meadmin01<0x20>
	resolve_wins: Attempting wins lookup for name meadmin01<0x20>
	resolve_wins: WINS server == <139.187.172.78>
	bind succeeded on port 0
	Got a positive name query response from 10.10.20.1 ( 139.187.48.34 ) <-- nevermind the stupid 10.10.x.x IP, it's the WINS server's internal network address
	Connecting to 139.187.48.34 at port 139
	session setup ok
	Domain=[MEFP] OS=[Windows NT 4.0] Server=[NT LAN Manager 4.0]
	Unable to join domain MEFP.

'secrets.db' gets created in the appropriate directory. No other log entries appear.

If I go ahead and configure Samba with "security=domain", then the domain thinks it's a BDC (shouldn't it be a member server?!?), but authentication consistently fails, with log messages complaining of a broken trust account as you'd expect. (I have of course completely removed it from the domain since then.) Perhaps Samba is somehow remembering it's previous life as a PDC ("security=user") and trying to join as a DC instead of a member server?

	~eric w. wallace
	   national semiconductor/maine
	   i.s. infrastructure senior system engineer