[Samba] SAMBA and SNAP Server

[Andrew Bartlett]

Irving Carrion wrote:
> 
> After upgrading from Samba PDC 2.2.3a-6 to Samba PDC
> 2.999+3.0cvs20020906-1 to fix a SNAP server problem, I am unable to join
> a WinXP machine to the domain.  I get the following error message in
> Windows:
> 
> "The following error occurred attempting to join the domain
> 'yourdomain.com':  Access is denied"
> 
> My log tells me the following:
> 
> [2002/09/30 12:54:26, 0] passdb/pdb_tdb.c:tdb_update_sam(789)
>   tdbsam: no NUA rids available, cannot add user spacewalker1$!
> [2002/09/30 12:54:26, 0]
> rpc_server/srv_samr_nt.c:_api_samr_create_user(2302)
>   could not add user/computer spacewalker1$ to passdb.  Check
> permissions?
> [2002/09/30 13:01:18, 0] smbd/service.c:set_admin_user(309)
>   root logged in as admin user (root privileges)
> 
> So I chmod 777 /etc/samba/passdb.tdb and it still doesn't work.

Do *NOT* do that.  Passdb.tdb *must* not be world readable, prefereably
700.  

> I also added the signorseal patch to the XP box.
> 
> Am I missing something here?  If need be, I'll post the smb.conf file.

You are using tdbsam_nua, and have not set up an non-unix account range
in your smb.conf.  (See the smb.conf manpage).  Or, set a 'add machine
account script' so that you have a 'real' unix account to add to tdbsam.

Andrew Bartlett

-- 
Andrew Bartlett                                 abartlet at pcug.org.au
Manager, Authentication Subsystems, Samba Team  abartlet at samba.org
Student Network Administrator, Hawker College   abartlet at hawkerc.net
http://samba.org     http://build.samba.org     http://hawkerc.net