[Samba] Authenticating users using server=domain

[Daniel Buchmann]

Hi,

I'm new to this list, so sorry if this has been brought up before.
I've searched the archives, and it looks like I'm having the same
problem as Bill Gardner in his post:
http://lists.samba.org/pipermail/samba/2002-April/070640.html
Unfortunately I couldn't find any answer to that post in the archives,
so I'm asking here..

I have a Samba 2.2.3a server running on IBM AIX. Here's my [global]
section:

        workgroup = BIBSYSNO
        netbios name = UTVIKLE
        server string = Samba Server
        interfaces = 10.4.0.16/24
        security = DOMAIN
        encrypt passwords = Yes
        password server = *
        log level = 3
        log file = /usr/local/samba/var/log.%m
        max log size = 50
        character set = ISO8859-1
        domain master = False
        dns proxy = No
        wins server = 10.2.0.2
        guest account = webuser

The PDC is called ATLAS. I ran
    "smbpasswd -r ATLAS -j BIBSYSNO -U administrator"
which gave me the successful message:
    "Joined domain BIBSYSNO."
..and I find my samba server "utvikle" in the Computers folder in the
Active Directory on the Windows 2000 server.

But when trying a "smbclient -L utvikle", I get the following errors in
log.smbd (ATLAS has IP address 10.2.0.2):

[2002/09/07 19:07:23, 3] lib/util_sock.c:open_socket_out(830)
  Connecting to 10.2.0.2 at port 445
[2002/09/07 19:07:23, 0] rpc_client/cli_netlogon.c:cli_net_auth2(157)
  cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
[2002/09/07 19:07:23, 0] rpc_client/cli_login.c:cli_nt_setup_creds(74)
  cli_nt_setup_creds: auth2 challenge failed
[2002/09/07 19:07:23, 0]
smbd/password.c:connect_to_domain_password_server(1336) 
connect_to_domain_password_server: unable to setup the PDC credentials
to machine ATLAS. Error was : NT_STATUS_OK.
[2002/09/07 19:07:23, 0] smbd/password.c:domain_client_validate(1554)
  domain_client_validate: Domain password server not available.

Is there anything I need to do in the Active Directory?
Any tip could prove useful.. and I'm in kind of a pressure situation
here.. need to get this up and running before monday... ;)


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: This is a digitally signed message part
Url : http://lists.samba.org/archive/samba/attachments/20020907/cdf21f2f/attachment.bin