[Samba] Samba as a DC

[Gil Disatnik]

Hey there,

I have configured samba to behave as a DC "by the book" (by the howto in 
fact...).
Everything seems to work fine, I am using windows XP clients, I have 
changed the registry settings like the howto says, rebooted and then added 
the station. I have managed to log into the machine with a domain user and 
everything looked great, when I tried adding the domain user to the local 
admins by:
login in as local administrator.
go the users/group profile and open the administrators group.
(I saw MYDOMAINNAME\domain admins there so the station registration process 
looks good)
I then tried to add my user by adding it with and without the domainname\ 
as a prefix I tried adding domain users as well with no success, nothing 
seems to work here.
I did the same many times in my office where I have a windows DC and it 
always worked, what have I missed here?
Another thing is that it pops up to ask for the domain admin password, now 
- maybe I forgot it but I don't remember this happening with the windows DC.

smbd.log shows:
[2003/04/13 19:36:12, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2050)
   Returning domain sid for domain XXXXXXXXX -> 
S-X-X-XX-XXXXXXXXXXX-2XX5XXXXX5-2XXX5X2XX

(censored domain name and sid out... sorry)

log level is only 2 but when I tried putting it on 5 it didn't give too 
much useful info...

A possible workaround could be simply adding everyone to the domain admins 
group, does that involves adding the corresponding unix users to the root 
group? I would really hate to do that...

Some details on the environment...
i386 machine running slack-current (9.0 + all latest patches)
samba 2.2.8a
Linux 2.4.20


Regards

Gil Disatnik
UNIX system/security administrator.

GibsonLP at EFnet
http://www.disatnik.com
_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_
"Windows NT has detected mouse movement, you MUST restart
your computer before the new settings will take effect, [ OK ]"
--------------------------------------------------------------------
Windows is a 32 bit patch to a 16 bit GUI based on a 8 bit operating
system, written for a 4 bit processor by a 2 bit company which can
not stand 1 bit of competition.
-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-