[Samba] Failed To Join Domain

[Michael Sloan]

We've got several samba systems here working (mostly using local
authentication), but would like to remove one of our NT servers and replace
it with a Samba server using winbind.

After compiling Samba 2.2.3a (including pam and winbind), I cannot get the
system to join the domain. After several false starts and attempts, I
stopped smbd, nmbd, and winbindd, removed the MACHINE.SID file and the
secrets.tdb file, deleted the samba server in Server Manager on the domain
controller, waited 30 minutes, then added the server.

Upon trying 'smbpasswd -j DOMAIN -r PDC' on the samba server (without
smbd/nmbd/winbindd running), I got the following error message:

cli_net_auth2: Error NT_STATUS_NO_TRUST_SAM_ACCOUNT
cli_bt_setup_creds: auth2 challenge failed
modify_trust_password: unable to setup the PDC credentials to machine PDC.
Error
 was: NT_STATUS_NO_TRUST_SAM_ACCOUNT.
change_trust_account_password: Failed to change password for domain DOMAIN.
Unable to join domain DOMAIN.

The PDC is across a T1 link at our other site, with a BDC here on site, but
on another IP subnet...

samba server <w.x.y.z>------cisco 2600-------BDC <w.x.a.b>
                                 |
                                 | T1 link
                                 |
                               PDC <w.x.d.e>

Suggestions?


Michael Sloan
Network Administrator
The Printing House, Ltd.
email: michael at theprintinghouse.com
voice: (850) 875-1500x155
fax: (850) 875-4080