[Samba] Samba PDC and NIS

[Samuel R. Waters]

Thanks Jeroen-

I check my smbpasswd file, and the names had the $ after them.  To be
sure, I removed and readded them, using smbpasswd -a -m machinename$, but
still no luck....

Sam


> Hi Sam,
>
> Have you added the machine account to smbpasswd using a $ sign at the end of its name in the foolowing fashion computername$, I think this might cause your problem.
>
> Jeroen
>
> On Wed, 27 Aug 2003 12:00:29 -0400 (EDT)
> "Samuel R. Waters" <srw at cs.rit.edu> wrote:
>
> >
> > Hi Folks-
> >
> > I've been trying to set up a Samba PDC, and sync it with our NIS passwd
> > file.  The goal is to allow a brand new lab of PCs running W2k SP4 to
> > login using our existing NIS setup, and be able to access their home
> > directories as network drives. I think I've figured out how to do this,
> > but I wanted to check and make sure it'd work, in theory at least.  I'm
> > also having an odd problem with the PDC that I'm hoping someone here might
> > have an answer for...
> >
> > My setup:
> > NIS master running Solaris 2.9 and Samba 2.2.8a
> > NIS client/file server running Solaris 2.9 and Samba 2.2.8a
> > W2k SP4 PC (single machine at the moment, will be a lab full soon)
> >
> > First, the passwd sync:
> > My plan is to grab all the accounts currently in the NIS passwd file, and
> > add them to the smbpasswd file on the NIS master, then turn unix password
> > syncing on.  I'll then set up the NIS master to copy the smbpasswd file to
> > the NIS client every time it's updated.
> >
> > First...will this work?
> > Second....does it matter that the NIS passwd file isn't in /etc/passwd?
> >
> >
> > Next, the PDC:
> > This is the one that's driving me crazy currently.  I've set up the PDC on
> > the NIS client, and am just trying to use a temporary smbpasswd file with
> > a few test and machine accounts on it.  The samba server appears to be set
> > up correctly-testparm and smbclient seem happy.  From the Windows box in
> > question, I can connect to the samba server, map shares, and join the
> > Windows box to the domain.  However, when I try to log into the domain, I
> > get the error message "The system cannot log you on to the domain because
> > the system's computer account is missing of the password on that account
> > is incorrect".  I added the account to the smbpasswd file using "smbpasswd
> > -a -m machinename", and didn't get an error.  I've also tried changing the
> > HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netlogon\parameters\RequireSignorSeal
> > and the
> > HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation\parameters\EnablePlainTextPassword
> > registry entries, but to no avail.
> >
> >
> > Here's my smb.conf file:
> > [global]
> >
> >         domain logons = yes
> >         guest account = smbguest
> >         logon drive = u:
> >         logon home = \\frazi.cs.rit.edu\%U
> >         socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192
> > SO_SNDBUF=8192
> >         workgroup = TESTCS
> >         netbios name = FRAZI
> >         server string = %L-Samba %v
> >         interfaces = 129.21.36.157/255.255.255.0
> >         syslog = 3
> >         log file = /var/adm/samba/log.%U
> >         max log size = 50
> >         log level = 3
> >         announce version = 4.2
> >         name resolve order = lmhosts bcast wins
> >         debug level = 1
> >         time server = Yes
> >         deadtime = 15
> >         os level = 99
> >         preferred master = Yes
> >         domain master = Yes
> >         wins proxy = Yes
> >         wins support = Yes
> >         lock dir = /var/spool/locks/samba
> >         hosts allow = 129.21.
> >         security = user
> >         encrypt passwords = yes
> >
> > [homes]
> >         comment = Home Directories
> >         read only = No
> >         create mask = 0600
> >         directory mask = 0700
> >         browseable = No
> >
> > [netlogon]
> >         path = /home/netlogon
> >
> >
> >
> > Here are some of the errors I'm getting from the log.nmbd (they repeat,
> > frequently):
> >
> > [2003/08/27 11:40:16, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69)
> >   process_logon_packet: Logon from 129.21.36.1: code = 0x12
> > [2003/08/27 11:40:16, 1] nmbd/nmbd_processlogon.c:process_logon_packet(69)
> >   process_logon_packet: Logon from 129.21.36.1: code = 0x12
> > [2003/08/27 11:40:35, 0]
> > nmbd/nmbd_responserecordsdb.c:find_response_record(235)
> >   find_response_record: response packet id 36001 received with no matching
> > record.
> > [2003/08/27 11:40:37, 0]
> > nmbd/nmbd_responserecordsdb.c:find_response_record(235)
> >   find_response_record: response packet id 33097 received with no matching
> > record.
> >
> >
> >
> > Thanks in advance for any help or suggestions
> >
> >
> > Sam Waters
> >
> > _______________________________________________________________________________
> >
> > Samuel R. Waters					srw at cs.rit.edu
> > System Administrator
> > Department of Computer Science				(585)475-4934
> > Rochester Institute of Technology
> >
> > _______________________________________________________________________________
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>

_______________________________________________________________________________

Samuel R. Waters					srw at cs.rit.edu
System Administrator
Department of Computer Science				(585)475-4934
Rochester Institute of Technology

_______________________________________________________________________________