Unable to join Win2k Pro SP2 to Samba 2.2.2 PDC
security at zule.ne.mediaone.net
security at zule.ne.mediaone.net
Wed Jan 9 06:05:12 GMT 2002
Thanks,
As far as the add user script is concerned, I had not gotten
the point of impelementing that yet. In the mean time I just manually add
users using the "useradd" command and then execute the command:
smbpasswd -a "username"
smbpasswd -e "username"
Here is the root entry in the smbpasswd file, I just did not send
it with the original post:
root:0:AAD3B435B51404EEAAD3B435B51404EE:31D6CFE0D16AE931B73C59D7E0C089C0:[U
]:LCT-3C3A1FE6:root,,,
Thanks again,
-Mark
On 9 Jan 2002, Kohei Yoshida wrote:
> On Wed, 2002-01-09 at 08:31, security at zule.ne.mediaone.net wrote:
> > Hello,
> > I have Samba 2.2.2 running on RedHat 7.1 acting as a PDC. I have
> > successfully joined Win98 as well as NT4.0 stations into this domain but
> > have been unable join any w2k devices. I have attempted both Pro and
> > Server, with and without service packs. A sniffer trace shows that
> > everytime the w2k machine tries to join the domain the PDC responds with
> > NetLogon command 15 "Station not in Domain's Computer List". The win2k
> > device just responds with a generic message along the lines of
> > incorrect password or the domain cannot be contacted. Now I have been
> > actively following
> > the mailing lists and have attempted just about every suggestion that
> > anyone has made in the past, but to no avail. If anyone has any
> > suggestions I would greatly appreciate it.
> >
> > Best Regards,
> > -Mark Persons
>
> I found at least two things that are lacking here. One is "add user
> script" parameter in your global section, and a password entry for root
> in your smbpasswd file (the password doesn't have to match the one in
> /etc/passwd). IIRC these two things are not necessary to have Win9x/ME
> or WinNt clients, but you need them for win2k clients. In other words,
> you can't manually create machine accounts for win2k.
>
> For details go to
>
> http://us1.samba.org/samba/docs/Samba-HOWTO-Collection.html#SAMBA-PDC
>
> and look under section 8.4.2.
>
> Kohei
>
> > # Global parameters
> > [global]
> > workgroup = XX
> > netbios name = kane
> > wins server = 172.16.200.203
> > # wins server = 172.16.200.208
> > interfaces = 172.16.200.203 127.0.0.1
> > bind interfaces only = yes
> > preferred master = yes
> > domain master = yes
> > local master = yes
> > # OS Level = 34
> > OS Level = 64
> > # remote announce = zeus
> > server string = Unix SMB Server on %h v%v
> > security = USER
> > # password server = apollo
> > encrypt passwords = yes
> > password level = 2
> > max log size = 100
> > dns proxy = No
> > restrict anonymous = no
> > name resolve order = lmhosts wins host bcast
> > create mask = 0777
> > force directory mode = 0777
> > locking = yes
> > log level = 2
> > log file = /var/log/samba/samba.log.%m
> > domain admin group = @wheel
> > domain logons = yes
> > # These are the things I added from Dejanews
> > # max xmit = 65535
> > # strict sync = no
> > # strict locking = no
> > # hide files = no
> > # read raw = yes
> > # write raw = yes
> > # oplocks = yes
> > # dead time = 15
> > status = yes
> >
> >
> > socket options = TCP_NODELAY IPTOS_LOWDELAY
> > ; Security and file integrity related options
> > ; Strict locking is available for paranoid locking
> > situations only
> > ; enabling this severely degrades read / write performance.
> > ; strict locking = yes
> > ; fake oplocks = yes
> > #share modes = yes
> > #veto files = /lost*/
> > #local master = no
> >
> > [netlogon]
> > path=/usr/local/samba/lib/netlogon
> > writeable = no
> > write list = ntadmin
> >
> > #
> > # This is for automounted home dir's to appear in explorer windows
> > # homedir map = auto.home
> > # NIS homedir = yes
> > [homes]
> > comment = Home Directories
> > read only = No
> > browseable = No
> >
> > #########################################################################################
> > smbpasswd file:
> >
> >
> > PC16$:602:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:[U
> > ]:LCT-00000000:PC16 PDCacct.
> > NT1$:606:5AA6327063FA3C030040A3697CF771AB:5AA6327063FA3C030040A3697CF771AB:[W
> > ]:LCT-3C027E47:
> > PEPSI$:608:6FD92534BFEC8274AAD3B435B51404EE:6FC5929356B92633861B4610B93BDF61:[W
> > ]:LCT-3C02A4A7:
> > WPI1$:611:1AA2440BF558D6DB6B04BED96CEF7A9A:1AA2440BF558D6DB6B04BED96CEF7A9A:[W
> > ]:LCT-3C0C030F:
> > mark123456789123456789:613:36F821466A974D4DAAD3B435B51404EE:E95F5EE42AB18DC4D888C0E01185EDDF:[UX
> > ]:LCT-3C1693D2:
> > NT8$:615:AD8B1B2EBCC270E14BBF4C76B543B521:AD8B1B2EBCC270E14BBF4C76B543B521:[W
> > ]:LCT-3C17B697:
> > NT4$:616:E756DE8A52AB0E43A2C5E4312B855720:E756DE8A52AB0E43A2C5E4312B855720:[W
> > ]:LCT-3C17B682:
> > test1:617:E88D94D6EBD10FC7AAD3B435B51404EE:AACD12D27C87CAC8FC0B8538AED6F058:[UX
> > ]:LCT-3C18CE62:
> > NAS1$:621:CDB971CFC905E273B8AE461DCB9ABAB3:CDB971CFC905E273B8AE461DCB9ABAB3:[W
> > ]:LCT-3C3A2631:
> > NAS3$:622:78F0B678048D3E85945A9FB83D0882C9:78F0B678048D3E85945A9FB83D0882C9:[W
> > ]:LCT-3C3A2B6B:
> > NAS2$:623:4A6C776B39FDD6B42B5C67ABC85AAE9C:4A6C776B39FDD6B42B5C67ABC85AAE9C:[W
> > ]:LCT-3C3A1E4C:
> > test2:624:E3FDADCB358C2967AAD3B435B51404EE:0E8231621F574D3636255FF36DD86C9C:[UX
> > ]:LCT-3C3A1FFB:
> > test3:625:3DB7B914FAE75EC0AAD3B435B51404EE:ED78E4BEE2001D143286284067C3BE3F:[UX
> > ]:LCT-3C3A299D:
> > ACTON$:626:83E65F76765BC107AAD3B435B51404EE:5C0598D154404189430AECE40C351C50:[W
> > ]:LCT-00000000:
> >
> >
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions: http://lists.samba.org/mailman/listinfo/samba
> >
>
>
More information about the samba
mailing list