[Samba] 2.2.8 fails to join Win2K domain

[Chris Hoogendyk]

stuck on this in spite of finding a few items in the archive that seemed 
pertinent.

just configuring a new installation of 2.2.8 from SunFreeware on a 
Solaris 8 system.

installation done, swat running, did simple basic configuration. then 
went to terminal window and got

    /usr/local/samba/bin# ./smbpasswd -j provost -r umapvstads1 -U libadmin
    Password:
    Error connecting to UMAPVSTADS1 - NT_STATUS_ACCESS_DENIED
    Unable to join domain PROVOST.
    /usr/local/samba/bin# ./smbpasswd -j provost -r umapvstads1
    cli_net_req_chal: Error NT_STATUS_INVALID_COMPUTER_NAME
    cli_nt_setup_creds: request challenge failed
    modify_trust_password: unable to setup the PDC credentials to 
machine UMAPVSTADS1. Error was :  
    NT_STATUS_UNSUCCESSFUL.
    2003/12/03 10:21:57 : change_trust_account_password: Failed to 
change password for domain PROVOST.
    Unable to join domain PROVOST.
    /usr/local/samba/bin#

I've tried both adding and removing the machine from the ADS before 
joining. The following was with the machine added already.

    /usr/local/samba/bin# ./smbpasswd -j provost -r umapvstads1
    cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
    cli_nt_setup_creds: auth2 challenge failed
    modify_trust_password: unable to setup the PDC credentials to 
machine UMAPVSTADS1. Error was :   
    NT_STATUS_ACCESS_DENIED.
    2003/12/02 15:01:25 : change_trust_account_password: Failed to 
change password for domain PROVOST.
    Unable to join domain PROVOST.
   
    /usr/local/samba/bin#

I've tried connecting with IP address and with fully qualified ADS name.

The Windows admin says he's seeing an authentication failure at his end. 
However, I've double and triple checked the username and password. It is 
the account used by all the techies here for doing client maintenance 
work. The account is not locked out. It works in other situations and 
can add a client to the domain.

    /usr/local/samba/bin# ./testparm

works.

The conf file looks like

    /usr/local/samba/lib# more smb.conf
    # Samba config file created using SWAT
    # from silver.library.umass.edu (128.119.168.7)
    # Date: 2003/12/02 15:22:06
   
    # Global parameters
    [global]
            workgroup = PROVOST
            netbios name = POLLUX
            security = DOMAIN
            password server = *
            encrypt passwords = Yes
            preferred master = No
            local master = No
            domain master = No
            wins server = 128.119.166.43 128.119.166.173
            hosts allow = 128.119.168.0/255.255.252.0 
128.119.166.0/255.255.255.0
            hosts deny = ALL
   
    [refsvc]
            path = /usr/local/apache/refsvc
            read only = No
   
    [wwwx]
            path = /usr/local/apache/wwwx
            read only = No
   
    /usr/local/samba/lib#

where I added the line "password server = *" for a final shot at getting 
it to work.

no dice.

where to from here?

TIA




---------------

Chris Hoogendyk

-
   O__  ---- Network Specialist & Unix Systems Administrator
  c/ /'_ --- Library Information Systems & Technology Services
 (*) \(*) -- W.E.B. Du Bois Library
~~~~~~~~~~ - University of Massachusetts, Amherst 

<choogend at library.umass.edu>

---------------