[Samba] Can't join Samba PDC from Win2k

[Neil Muller]

I went through exactly the same thing over the weekend and after help from this
list I got it all working. What I had to do was add settings for domain admin
group and domain admin users to my smb.conf global section (both items were set
to root) and I also made root a samba user. If you have done all this and its
still not working make sure the machine trust account is being created correctly
(check smbpasswd and /etc/passwd for entries with your w2k machine name with a $
appended.

Neil





Quoting Brian Lavender <brian at brie.com>:

> I am trying to make my Samba server act as a domain controller, but I
> can't join the domain. When I go into Windows 2k and I right click the
> computer, the properties button, and try to make it a part of the
> domain,
> it asks me for a user account, and a password. I am not sure what user
> account to type in here. What user account do I type in?
> 
> Below is my smb.conf file. I followed the howto from 
> 
> ftp://us6.samba.org/pub/samba/docs/htmldocs/Samba-PDC-HOWTO.html
> 
> and you can see where I put the adduser in my global configuration so
> a machine is added automatically.
> 
> # from linux.local (127.0.0.2)
> # Date: 2002/05/18 21:55:34
> 
> # Global parameters
> [global]
> 	netbios name = DASERVER
> 	workgroup = CHEDDAR
> 	map to guest = Bad User
> 	socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
> 	character set = ISO8859-15
> 
> 	os level = 64
> 	preferred master = yes
> 	domain master = yes
> 	local master = yes
> 
> 	security = user
> 
> 	encrypt passwords = Yes
> 
> 	domain logons = yes
> 
> 	logon path = \\%N\profiles\%u
> 	
> 	logon drive = H:
> 	logon home = "\\%N\%U"
> 
> 	logon script = logon.cmd
> 
> 	printing = lprng
> 	veto files = /*.eml/*.nws/riched20.dll/*.{*}/
> 
> 	add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false
> -M %u 
> 
> 
> [homes]
> 	comment = Home Directories
> 	read only = No
> 	create mask = 0640
> 	directory mask = 0750
> 	browseable = No
> 
> [printers]
> 	comment = All Printers
> 	path = /var/tmp
> 	create mask = 0600
> 	printable = Yes
> 	browseable = No
> 
> ;DOMAIN SPECIFIC INFO
> [netlogon]
> 	comment = NETLOGON service
> 	path = /home/netlogon
> 	read only = yes
> 	write list = ntadmin
> 
> [profiles]
> 	path = /home/profiles
> 	read only = no
> 	create mask = 0600
> 	directory mask = 0700
> 	
> 
> 
> -- 
> Brian Lavender
> http://www.brie.com/brian/
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 



---
Neil Muller
Neologix Pty Ltd
http://www.neologix.net
PO Box 3183, Weston Creek, ACT, 2611, Australia
email: neil at neologix.net
voice: +61 2 62875900    fax:   +61 2 62875911   
mob:   +61 408 977 976