[Samba] Samba PDC and NIS

[Jeroen Keiren]

Hi Sam,

Have you added the machine account to smbpasswd using a $ sign at the end of its name in the foolowing fashion computername$, I think this might cause your problem.

Jeroen

On Wed, 27 Aug 2003 12:00:29 -0400 (EDT)
"Samuel R. Waters" <srw at cs.rit.edu> wrote:

> 
> Hi Folks-
> 
> I've been trying to set up a Samba PDC, and sync it with our NIS passwd
> file.  The goal is to allow a brand new lab of PCs running W2k SP4 to
> login using our existing NIS setup, and be able to access their home
> directories as network drives. I think I've figured out how to do this,
> but I wanted to check and make sure it'd work, in theory at least.  I'm
> also having an odd problem with the PDC that I'm hoping someone here might
> have an answer for...
> 
> My setup:
> NIS master running Solaris 2.9 and Samba 2.2.8a
> NIS client/file server running Solaris 2.9 and Samba 2.2.8a
> W2k SP4 PC (single machine at the moment, will be a lab full soon)
> 
> First, the passwd sync:
> My plan is to grab all the accounts currently in the NIS passwd file, and
> add them to the smbpasswd file on the NIS master, then turn unix password
> syncing on.  I'll then set up the NIS master to copy the smbpasswd file to
> the NIS client every time it's updated.
> 
> First...will this work?
> Second....does it matter that the NIS passwd file isn't in /etc/passwd?
> 
> 
> Next, the PDC:
> This is the one that's driving me crazy currently.  I've set up the PDC on
> the NIS client, and am just trying to use a temporary smbpasswd file with
> a few test and machine accounts on it.  The samba server appears to be set
> up correctly-testparm and smbclient seem happy.  From the Windows box in
> question, I can connect to the samba server, map shares, and join the
> Windows box to the domain.  However, when I try to log into the domain, I
> get the error message "The system cannot log you on to the domain because
> the system's computer account is missing of the password on that account
> is incorrect".  I added the account to the smbpasswd file using "smbpasswd
> -a -m machinename", and didn't get an error.  I've also tried changing the
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netlogon\parameters\RequireSignorSeal
> and the
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation\parameters\EnablePlainTextPassword
> registry entries, but to no avail.
> 
> 
> Here's my smb.conf file:
> [global]
> 
>         domain logons = yes
>         guest account = smbguest
>         logon drive = u:
>         logon home = \\frazi.cs.rit.edu\%U
>         socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192
> SO_SNDBUF=8192
>         workgroup = TESTCS
>         netbios name = FRAZI
>         server string = %L-Samba %v
>         interfaces = 129.21.36.157/255.255.255.0
>         syslog = 3
>         log file = /var/adm/samba/log.%U
>         max log size = 50
>         log level = 3
>         announce version = 4.2
>         name resolve order = lmhosts bcast wins
>         debug level = 1
>         time server = Yes
>         deadtime = 15
>         os level = 99
>         preferred master = Yes
>         domain master = Yes
>         wins proxy = Yes
>         wins support = Yes
>         lock dir = /var/spool/locks/samba
>         hosts allow = 129.21.
>         security = user
>         encrypt passwords = yes
> 
> [homes]
>         comment = Home Directories
>         read only = No
>         create mask = 0600
>         directory mask = 0700
>         browseable = No
> 
> [netlogon]
>         path = /home/netlogon
> 
> 
> 
> Here are some of the errors I'm getting from the log.nmbd (they repeat,
> frequently):
> 
> [2003/08/27 11:40:16, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69)
>   process_logon_packet: Logon from 129.21.36.1: code = 0x12
> [2003/08/27 11:40:16, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69)
>   process_logon_packet: Logon from 129.21.36.1: code = 0x12
> [2003/08/27 11:40:35, 0]
> nmbd/nmbd_responserecordsdb.c:find_response_record(235)
>   find_response_record: response packet id 36001 received with no matching
> record.
> [2003/08/27 11:40:37, 0]
> nmbd/nmbd_responserecordsdb.c:find_response_record(235)
>   find_response_record: response packet id 33097 received with no matching
> record.
> 
> 
> 
> Thanks in advance for any help or suggestions
> 
> 
> Sam Waters
> 
> _______________________________________________________________________________
> 
> Samuel R. Waters					srw at cs.rit.edu
> System Administrator
> Department of Computer Science				(585)475-4934
> Rochester Institute of Technology
> 
> _______________________________________________________________________________
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba