[Samba] PDC operation: "controller cannot be located" error

Richard Fox rfox at sbsii.com
Wed Oct 30 16:10:47 GMT 2002

Hi all,

I am running Samba 2.2.5 on a RedHat 7.3 system. I am attempting to
establish this server (thor) as the PDC on my private network of (currently)
2 machines. The first machine
I want to connect is an NT client, mercury. I followed instructions from
various web resources, the PDC howto, etc and have this as my smb.conf file:

        workgroup = THORDOMAIN
        netbios name = THOR
        server string = Samba PDC %v %h
        encrypt passwords = yes
        domain logons = yes
        logon script = netlogon.bat
        share modes = no
        os level = 64
        local master = yes
        domain master = yes
        preferred master = yes
        domain admin group = @admins
        security = user
        smb passwd file = /etc/samba/smbpasswd
        hosts allow = 192.168.1., 127.
        max log size = 50
        unix password sync = yes
        passwd program = /usr/bin/passwd %u
        passwd chat = *New*password* %n\n *Please*retype*new*password* %n\n
        logon home = \\%L\%u
        logon drive = H:
        logon path = \\%L\Profiles\%u
 #       add user script = /usr/sbin/useradd -d /dev/null -g machines -s
/bin/false -M %u
        comment = Home Directories
        path = %H
        writeable = Yes
        valid users = %S
        create mode = 0664
        directory mode = 0775
        comment = Network Logon Services
        path = /home/samba/netlogon
        read only = yes
        guest ok = no
        write list = @adm
        path = /home/samba/profiles
        browseable = No

The netlogon and profiles dirs were created, permissions set. Netlogon.bat
is in /usr/bin. I created an account for my NT box:

# useradd -g machines -d /dev/null -s /bin/false mercury$
# passwd -l mercury$
# smbpasswd -a -m mercury

When I try to logon to the domain from mercury I get an error msg on my NT
box which says "the
domain controller for this domain cannot be located."

My log.smbd file says:

[2002/10/30 10:20:28, 2] smbd/server.c:open_sockets(215)
  waiting for a connection
[2002/10/30 10:46:23, 3] smbd/oplock.c:init_oplocks(1211)
  open_oplock_ipc: opening loopback UDP socket.
[2002/10/30 10:46:23, 3] lib/util_sock.c:open_socket_in(813)
  bind succeeded on port 0
[2002/10/30 10:46:23, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(298)
  Linux kernel oplocks enabled
[2002/10/30 10:46:23, 3] smbd/oplock.c:init_oplocks(1241)
  open_oplock ipc: pid = 3008, global_oplock_port = 32773
[2002/10/30 10:46:23, 3] lib/access.c:check_access(318)
  check_access: no hostnames in host allow/deny list.
[2002/10/30 10:46:23, 0] lib/access.c:check_access(331)
  Denied connection from  (
[2002/10/30 10:46:23, 1] smbd/process.c:process_smb(869)
  Connection denied from
[2002/10/30 10:46:23, 3] smbd/sec_ctx.c:set_sec_ctx(313)
  setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2002/10/30 10:46:23, 2] smbd/server.c:exit_server(461)
  Closing connections
[2002/10/30 10:46:23, 3] smbd/connection.c:yield_connection(48)
  Yielding connection to
[2002/10/30 10:46:23, 3] smbd/connection.c:yield_connection(61)
  yield_connection: tdb_delete for name  failed with error Record does not
[2002/10/30 10:46:23, 3] smbd/server.c:exit_server(495)
  Server exit (connection denied)

One part I do not understand is that it says
    Denied connection from  (

If this is an IP address, I have no idea who this connection attempt is
from, I am on a private network with no mapping from our router. So this
must be mercury trying to connect. Perhaps to someone with a deeper
knowledge of samba this log file might point to a severe configuration error
I may have, why mercury can't locate the PDC. Yes, the systems can ping
eachother. Is my config file set up correctly? Your help is greatly


More information about the samba mailing list