[Samba] Samba as a PDC for W2K Network

Frank Fürst ffrank at rz.uni-potsdam.de
Wed Jun 19 00:30:03 GMT 2002

"Matt Hughes" <mhughes at inav.net> schrieb:

> 	I have setup a Machine Trust Account with the following commands with no
> success:
> /usr/sbin/useradd -g 100 -d /dev/null -c "corp" -s /bin/false corp$
> passwd -l corp$
> smbpasswd -a -m corp$

As far as I know (and as the HOWTOs say), you cannot join a domain with
Win2K after you've created a Machine Trust Account manually. Rather,
give root a password in /etc/[samba/]smbpasswd (different to his unix
password) and create the trust account on the fly, as described in the

> 	I'm a little befuddled.  Any advice or something I may have missed in my
> smb.conf file?  Thanks a bundle in advance.
> [global]
>         workgroup = INAVNET2
>         netbios name = SYMPHONY2
>         server string = Samba %v on (%L)
>         encrypt passwords = Yes
>         obey pam restrictions = Yes
>         pam password change = Yes
>         passwd program = /usr/bin/passwd %u
>         passwd chat = *New*password* %n\n *Retype*new*password* %n\n
> *passwd:*all*authentication*tokens*updated*successfully*
>         unix password sync = Yes
>         log file = /var/log/samba/%m.log
>         max log size = 0
>         socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>         add user script = /usr/sbin/useradd -d /dev/null -g 100 -s
> /bin/false -M %u
>         logon drive = H:        domain logons = Yes

That should be on separate lines.

Bye, Frank
Frank Fürst, physikalische Biochemie, Universität Potsdam, Germany
Tel.: +49-331-977-5244		Fax: +49-331-977-5062

More information about the samba mailing list