Domain authentication with a Windows 2000 PDC

[Andrew Bartlett]

"Auleta, Michael" wrote:
> 
> I've successfully added my Samba 2.2.2 server running Solaris 8 to my
> Windows 2000 domain.  Now I'm unable to access any shares.  I set up logging
> on smbd to 3, and when I try to access the samba server I see this in the
> log file:
> 
> smbd/password.c:connect_to_domain_password_server(1372)
>   connect_to_domain_password_server: unable to setup the PDC credentials to
> machine PDC. Error was : NT_STATUS_ACCESS_DENIED.
> 
> My smb.conf is set for domain security, I specify my password server(s),
> domain logons are set to yes, and I'm using a usermap file.  The log file
> shows the correct mapping of the NT -> UNIX id, but it almost  appears as if
> instead of sending the NT user id to the PDC, it's sending the UNIX id.
> 
> If I back down to server security, I can map drives.  Am I missing anything?

You need to join the domain first.  smbpasswd -j DOMAIN
-Uadministrator%password (see manpage)

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net