[Samba] A domain controller for the domain could not be contacted (2.2.3a-12.3 for Debian)

[Eduard Witteveen]

Patrick Shoaf wrote:

> I am running on RedHat, but everything should be same on server side.  
> Try adding the following lines into the smb.conf file:
>
> password level = 8
> username level = 8
> encrypt passwords = yes
> smb passwd file = /etc/samba/smbpasswd
> unix password sync = yes
> pam password change = yes
> obey pam restrictions = yes

I added your parameters to the config file and also created an 
additional shared called [unsafe] from which i can easier get the config 
file when i want to email it.

When i want to join the domain with an Windows XP Version 2002 
Professional Service Pack 1 i still get the following error:
    "A domain controller for the domain HAWAR3 could not be contacted.
    Ensure that the domain name is typed correctly.
    If the name is correct click Details for troubleshooting"

When i click on details:
    "Note: This information is intended for a network administrator.  If 
you are not your network's administrator, notify the administrator that 
you received this information, which has been recorded in the file 
C:\WINDOWS\debug\dcdiag.txt.
    The domain name HAWAR3 might be a NetBIOS domain name.  If this is 
the case, verify that the domain name is properly registered with WINS.
    If you are certain that the name is not a NetBIOS domain name, then 
the following information can help you troubleshoot your DNS configuration.
    The following error occurred when DNS was queried for the service 
location (SRV) resource record used to locate a domain controller for 
domain HAWAR3:
    The error was: "DNS name does not exist."
    (error code 0x0000232B RCODE_NAME_ERROR)
    The query was for the SRV record for _ldap._tcp.dc._msdcs.HAWAR3
    Common causes of this error include the following:
    - The DNS SRV record is not registered in DNS.
    - One or more of the following zones do not include delegation to 
its child zone:
    HAWAR3
    . (the root zone)
    For information about correcting this problem, click Help."

Screenshots:
- http://www.nergens.org/samba/ComputerNameChanges.PNG
- http://www.nergens.org/samba/ComputerProperties.PNG

Attached is my smb.conf


Eduard Witteveen  
-------------- next part --------------
[global]
;changes after comments of  Patrick Shoaf
password level = 8
username level = 8
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
unix password sync = yes
pam password change = yes
obey pam restrictions = yes

;basic server settings
workgroup = HAWAR3
netbios name = nemo
server string = Samba %h PDC running %v
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192

;PDC and master browser settings
os level = 64
preferred master = yes
local master = yes
domain master = yes

;security and logging settings
security = user
# encrypt passwords = yes
log file = /var/log/samba/log.%m
log level = 2
# max log size = 50
# hosts allow = 127.0.0.1 192.168.1.0/255.255.255.0

;user profiles and home directory
logon home = \\%L\%U\
logon drive = H:
logon path = \\%L\profiles\%U
logon script = netlogon.bat

;sync passwords
unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n\n *Retype*new*UNIX*password* %n\n 	*Enter*new*UNIX*password* %n\n *Retype*new*UNIX*password* %n\n *passwd: 	*all*authentication*tokens*updated*successfully*

; new machines
add user script = /usr/sbin/useradd -d /dev/null -g machines -s /bin/false -M %u

# ==== shares ====
[unsafe]
path = /etc/samba
comment = Unsafe Config Share, has to be removed
browseable = yes
writeable = yes

[homes]
comment = Home Directories 
browseable = no
writeable = yes

[profiles]
path = /home/samba/profiles
writeable = yes
browseable = no
create mask = 0600