Domain login on WinXP

Christian Barth barth at cck.uni-kl.de
Wed Jan 23 02:48:06 GMT 2002


> Hello Vegard,
> 
> As I mentioned in earlier messages - I AM using Windows XP Professional and
> I do not have to make ANY changes to smbpasswd after I added the machine
> account. What changes are you referring to?
> 
> Sincerely,
> 
> Martijn Tigchelaar.
> 
> 
> -----Original Message-----
> From: Vegard.Hanssen at mf.no [mailto:Vegard.Hanssen at mf.no] 
> Sent: 22 January 2002 07:51 PM
> To: m.o.tigchelaar at kpn.com
> Subject: RE: Domain login on WinXP
> 
> Works fine with the WinNT machines, I'm doing it there - but WinXP seems
> to need to change the /etc/samba/smbpasswd file anyway, and then it needs
> root-access, which I don't like to give to it.
Win2k and WinXP machines can not be joined to the domain with the 
predefined account and password in smbpasswd like WinNT. The insist 
on using the "Add comupter Account Dialog" form the client. For this 
dialog to succed you currently have to use root and its password with 
samba.

Christian


> 
> On Tue, 22 Jan 2002 m.o.tigchelaar at kpn.com wrote:
> 
> > Hi there,
> > 
> > I usually do a "smbpasswd -a -m MACINENAME" before adding a new machine to
> > the domain. It works for me:-)
> > 
> > Sincerely,
> > 
> > Martijn Olivier Tigchelaar.
> > 
> > 
> > -----Original Message-----
> > From: Vegard.Hanssen at mf.no [mailto:Vegard.Hanssen at mf.no] 
> > Sent: 22 January 2002 12:27 PM
> > To: samba at lists.samba.org
> > Subject: Domain login on WinXP
> > 
> > I have been trying to get WinXP to log into a samba-server. Without doing
> > something to my setup I got an error "No Access" to the server when trying
> > to join the domain. (btw, I have created the shell-account for the
> > computer, but not the samba-account for the computer)
> > 
> > The errors from the log:
> > 
> > [2002/01/22 10:49:22, 0] rpc_server/srv_samr.c:api_samr_set_userinfo(672)
> >   api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO.
> > [2002/01/22 10:49:22, 0] passdb/pdb_smbpasswd.c:startsmbfilepwent(171)
> >   startsmbfilepwent_internal: unable to open file /etc/samba/smbpasswd.
> > Error was Permi
> > ssion denied
> > [2002/01/22 10:49:22, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1459)
> >   unable to open passdb database.
> > 
> > 
> > Obviously there is a problem writing to /etc/samba/smbpasswd.
> > 
> > My samba setup is something like (wrong names..):
> > 
> > smbusers:
> > admin = administrator admin
> > 
> > smb.conf:
> > domain admin group = admin
> > 
> > ---
> > 
> > So the admin user should have enough permissions to do the job - but what
> > happens is that the admin user itself tries to write to
> > /etc/samba/smbpasswd, which only the root-shell user has permission to do.
> > So I tried to "chown admin.admin /etc/samba/smbpasswd", and voila, it
> > worked. I could add the computer from WinXP to the domain using the admin
> > user. But I then had to enable the computer with "smbpasswd -e
> > computername$" to log in.
> > 
> > But, samba changes the owner of smbpasswd back to root, so this isn't a
> > solution.
> > 
> > Then I tried to change smbusers to:
> > 
> > root = administrator admin
> > 
> > which would set the admin user to shell root user. But then I got Wrong
> > username or password when trying to add the computer from WinXP. Perhaps
> > samba tries to log on as root with the same passwd which I use for admin
> > user?
> > 
> > And if that's true, the only thing, which I can think of, to work this out
> > is to actually use a root user from samba. And I don't like that....You
> > shouldn't need to let the user have full access to your server too.
> > 
> > Any thoughts on this? samba crew? A bug which forces the writing to
> > /etc/samba/smbpasswd to log on the shell account which you try to generate
> > the computer account with?
> > 
> > 
> > Vegard
> > 
> > 
> > -- 
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> > 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 


               _(_)_                          wWWWw   _
   @@@@       (_)@(_)   vVVVv     _     @@@@  (___) _(_)_
  @@()@@ wWWWw  (_)\    (___)   _(_)_  @@()@@   Y  (_)@(_)
   @@@@  (___)     `|/    Y    (_)@(_)  @@@@   \|/   (_)\
    /      Y       \|    \|/    /(_)    \|      |/      |
 \ |     \ |/       | / \ | /  \|/       |/    \|      \|/
jgs|//   \\|///  \\\|//\\\|/// \|///  \\\|//  \\|//  \\\|// 
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^




More information about the samba mailing list