[Samba] problem logging on to samba domain (pdc) from a win x pworkstation

Jim Wharton jwharton at acpafl.org
Thu Apr 10 19:53:29 GMT 2003


You don't have to modify any host file anywhere. The steps are create Uni=
x
account "machinename$" then add that account to samba: smbpasswd -a -m
machinename (without the dollar sign) then add that machine to the domain
from windows. Make sure you have added root to smbpasswd as well. When
windows asks you for a user that has privledges to add people to the doma=
in,
use root and root's samba password. After a reboot, it should be fine.

Jim

> -----Original Message-----
> From: samba-bounces+creole3=3Dbellsouth.net at lists.samba.org
> [mailto:samba-bounces+creole3=3Dbellsouth.net at lists.samba.org]On
>  Behalf Of
> dominik
> Sent: Thursday, April 10, 2003 3:39 PM
> To: Jim Wharton
> Cc: samba at lists.samba.org; desaster at freenet.de
> Subject: AW: [Samba] problem logging on to samba domain (pdc)=20
> from a win
> xpworkstation
>=20
>=20
> I had assumed that already and did that manually.
>=20
> Might I have to change further keys on my xp workstation in=20
> the control
> panel in order to become a domain member of my samba domain?
>=20
> Why doesn't the workstation find the domain controller =3D samba pdc at
> logon time? Do I have to modify any host file on XP, install a dns
> server?
>=20
> Cheers,
>=20
> Dominik
>=20
> -----Urspr=FCngliche Nachricht-----
> Von: Jim Wharton [mailto:jwharton at acpafl.org]=20
> Gesendet: Donnerstag, 10. April 2003 15:17
> An: 'dominik'; 'samba at lists.samba.org'
> Cc: 'desaster at freenet.de'
> Betreff: RE: [Samba] problem logging on to samba domain (pdc)=20
> from a win
> xpworkstation
>=20
> If I'm not mistaken, the sign or seal hack from samba2.2.3 is broken.
> Use
> the newer hack or manually modify your registry.
>=20
> Jim
>=20
> > -----Original Message-----
> > From: samba-bounces+creole3=3Dbellsouth.net at lists.samba.org
> > [mailto:samba-bounces+creole3=3Dbellsouth.net at lists.samba.org]On
> >  Behalf Of
> > dominik
> > Sent: Thursday, April 10, 2003 9:05 AM
> > To: samba at lists.samba.org
> > Cc: desaster at freenet.de
> > Subject: [Samba] problem logging on to samba domain (pdc) from a win
> > xpworkstation
> >=20
> >=20
> > Dear list,
> >=20
> > I've got a problem logging on to my samba domain from a win=20
> xp ws. The
> > problem now persists for several months and I've no more=20
> ideas what to
> > try next.
> >=20
> > Can somebody help me pls? I have been reading the list=20
> > casually but did
> > nit find an answer.
> >=20
> > Problem: I finally managed to join my samba domain "do1" from=20
> > my client
> > ws. After rebooting the client, when trying log on to the domain, a
> > window pops up telling me that either the domain controller is not
> > available or the client machine account is not found.
> >=20
> > log.smbd says:
> > [2003/04/10 14:04:09, 0] smbd/password.c:authorise_login(872)
> >   authorise_login: rejected invalid user nobody=20
> >=20
> > However it is possible to reach a samba share via the net use -u
> > command.
> >=20
> > Included:
> > - smb.conf
> > - lmhosts
> > - log.nmbd
> > - log.smbd
> >=20
> > Thanks a lot!
> >=20
> > Cheers,
> >=20
> > Dominik
> >=20
> > --------------------------------------------------------------------
> >=20
> > OS - Server
> > - Samba PDC on SuSE 8.0
> > - Samba 2.2.3a (I will upgrade later...)
> >=20
> > OS Client Win XP without SP1. Require Sign or Seal hack is applied.
> >=20
> > Accounts on linux
> > - smb_cl$ , /bin/false, no login allowed, groups: samba,users
> > - smb_usr , /bin/sh, normal password, groups: samba,users
> >=20
> > Accounts on Samba
> > - smb_cl$ , normal user, workstation trust account, normal password
> > - smb_usr , normal user, normal password
> >=20
> >=20
> > --------------------------------------------------------------------
> > smb.conf
> >=20
> > # Samba config file created using SWAT
> > # from 192.168.0.15 (192.168.0.15)
> > # Date: 2003/04/10 11:24:27
> >=20
> > # Global parameters
> > [global]
> > =09workgroup =3D DO1
> > =09netbios name =3D P4LIN
> > =09server string =3D p4lin
> > =09encrypt passwords =3D Yes
> > =09update encrypted =3D Yes
> > =09map to guest =3D Bad User
> > =09name resolve order =3D lmhosts bcast host wins
> > =09socket options =3D SO_KEEPALIVE TCP_NODELAY IPTOS_LOWDELAY
> > =09character set =3D ISO8859-15
> > =09domain admin group =3D dom root admin
> > =09domain logons =3D Yes
> > =09os level =3D 64
> > =09lm announce =3D False
> > =09preferred master =3D True
> > =09domain master =3D True
> > =09valid users =3D dom root smb_usr
> > =09admin users =3D dom root
> > =09hosts allow =3D 192.168.0.14 192.168.0.15
> > =09printing =3D cups
> > =09veto files =3D /*.eml/*.nws/riched20.dll/*.{*}/
> >=20
> > [homes]
> > =09comment =3D Home Directories
> > =09read only =3D No
> > =09create mask =3D 0640
> > =09directory mask =3D 0750
> > =09browseable =3D No
> >=20
> > [printers]
> > =09comment =3D All Printers
> > =09path =3D /var/tmp
> > =09create mask =3D 0600
> > =09printable =3D Yes
> > =09browseable =3D No
> >=20
> > [pub]
> > =09path =3D /pub
> > =09guest ok =3D Yes
> >=20
> > [profiles]
> > =09path =3D /var/lib/samba/profiles
> >=20
> > [lp]
> > =09path =3D /dev/lp0
> > =09read only =3D No
> > =09create mask =3D 0600
> > =09guest ok =3D Yes
> > =09printable =3D Yes
> > =09printer name =3D lp
> > =09oplocks =3D No
> >=20
> > [netlogon]
> > =09path =3D /var/lib/samba/netlogon
> > =09read only =3D No
> >=20
> >=20
> > --------------------------------------------------------------------
> > lmhosts
> >=20
> > # This file provides the same function that the lmhosts=20
> file does for
> > # Windows. It's another way to map netbios names to ip addresses.
> > #
> > # Cf. section 'name resolve order' in the manual page of=20
> smb.conf for
> > # more information.
> >=20
> > 127.0.0.1=09localhost
> > 192.168.0.14=09p4lin
> > 192.168.0.15=09smbcl
> >=20
> >=20
> > 192.168.0.14 p4lin #PRE #DOM:do1
> >=20
> >=20
> > --------------------------------------------------------------------
> > log.nmbd
> >=20
> >=20
> > [2003/04/10 13:27:43, 0] nmbd/nmbd.c:main(783)
> >   Netbios nameserver version 2.2.3a started.
> >   Copyright Andrew Tridgell and the Samba Team 1994-2002
> > [2003/04/10 13:27:44, 0] libsmb/namequery.c:getlmhostsent(514)
> >   getlmhostsent: too many columns in lmhosts file (obsolete syntax)
> > [2003/04/10 13:27:44, 0] nmbd/nmbd_logonnames.c:add_logon_names(156)
> >   add_domain_logon_names:
> >   Attempting to become logon server for workgroup DO1 on subnet
> > 192.168.0.14
> > [2003/04/10 13:27:44, 0]
> > nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(291)
> >   become_domain_master_browser_bcast:
> >   Attempting to become domain master browser on workgroup DO1=20
> > on subnet
> > 192.168.0.14
> > [2003/04/10 13:27:44, 0]
> > nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(305)
> >   become_domain_master_browser_bcast: querying subnet=20
> 192.168.0.14 for
> > domain master browser on workgroup DO1
> > [2003/04/10 13:27:48, 0]
> > nmbd/nmbd_logonnames.c:become_logon_server_success(115)
> >   become_logon_server_success: Samba is now a logon server=20
> > for workgroup
> > DO1 on subnet 192.168.0.14
> > [2003/04/10 13:27:48, 0]
> > nmbd/nmbd_responserecordsdb.c:find_response_record(237)
> >   find_response_record: response packet id 21106 received with no
> > matching record.
> > [2003/04/10 13:27:48, 0]
> > nmbd/nmbd_responserecordsdb.c:find_response_record(237)
> >   find_response_record: response packet id 21107 received with no
> > matching record.
> > [2003/04/10 13:27:53, 0]
> > nmbd/nmbd_become_dmb.c:become_domain_master_stage2(115)
> >   *****
> >  =20
> >   Samba server P4LIN is now a domain master browser for=20
> > workgroup DO1 on
> > subnet 192.168.0.14
> >  =20
> >   *****
> > [2003/04/10 13:28:08, 0]
> > nmbd/nmbd_become_lmb.c:become_local_master_stage2(404)
> >   *****
> >  =20
> >   Samba name server P4LIN is now a local master browser for=20
> workgroup
> > DO1 on subnet 192.168.0.14
> >  =20
> >   *****
> >=20
> > --------------------------------------------------------------------
> > log.smbd
> >=20
> > lib/access.c:check_access(325)
> >   Denied connection from  (192.168.0.13)
> > [2003/04/10 13:24:09, 0] smbd/password.c:authorise_login(872)
> >   authorise_login: rejected invalid user nobody
> > [2003/04/10 13:24:09, 0] smbd/password.c:authorise_login(872)
> >   authorise_login: rejected invalid user nobody
> > [2003/04/10 13:27:44, 0] smbd/server.c:main(698)
> >   smbd version 2.2.3a started.
> >   Copyright Andrew Tridgell and the Samba Team 1992-2002
> > [2003/04/10 13:29:09, 0] smbd/password.c:authorise_login(872)
> >   authorise_login: rejected invalid user nobody
> > [2003/04/10 13:29:09, 0] smbd/password.c:authorise_login(872)
> >   authorise_login: rejected invalid user nobody
> > [2003/04/10 13:34:09, 0] smbd/password.c:authorise_login(872)
> >   authorise_login: rejected invalid user nobody
> > [2003/04/10 13:34:09, 0] smbd/password.c:authorise_login(872)
> >   authorise_login: rejected invalid user nobody
> > [2003/04/10 13:39:09, 0] smbd/password.c:authorise_login(872)
> >   authorise_login: rejected invalid user nobody
> > [2003/04/10 13:39:09, 0] smbd/password.c:authorise_login(872)
> >   authorise_login: rejected invalid user nobody
> > [2003/04/10 13:44:09, 0] smbd/password.c:authorise_login(872)
> >   authorise_login: rejected invalid user nobody
> > [2003/04/10 13:44:09, 0] smbd/password.c:authorise_login(872)
> >   authorise_login: rejected invalid user nobody
> > [2003/04/10 13:49:09, 0] smbd/password.c:authorise_login(872)
> >   authorise_login: rejected invalid user nobody
> > [2003/04/10 13:49:09, 0] smbd/password.c:authorise_login(872)
> >   authorise_login: rejected invalid user nobody
> > [2003/04/10 13:54:09, 0] smbd/password.c:authorise_login(872)
> >   authorise_login: rejected invalid user nobody
> > [2003/04/10 13:54:09, 0] smbd/password.c:authorise_login(872)
> >   authorise_login: rejected invalid user nobody
> > [2003/04/10 13:57:02, 0] smbd/password.c:authorise_login(872)
> >   authorise_login: rejected invalid user nobody
> > [2003/04/10 13:57:02, 0] smbd/password.c:authorise_login(872)
> >   authorise_login: rejected invalid user nobody
> > [2003/04/10 13:59:09, 0] smbd/password.c:authorise_login(872)
> >   authorise_login: rejected invalid user nobody
> > [2003/04/10 13:59:09, 0] smbd/password.c:authorise_login(872)
> >   authorise_login: rejected invalid user nobody
> > [2003/04/10 14:04:09, 0] smbd/password.c:authorise_login(872)
> >   authorise_login: rejected invalid user nobody
> > [2003/04/10 14:04:09, 0]
> >=20
> > --=20
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> >=20
>=20
>=20
> OutBound Mail Scanned by Mcafee Web Appliance.
>=20
>=20
> --=20
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>=20


OutBound Mail Scanned by Mcafee Web Appliance.




More information about the samba mailing list