[Samba] Access Denied when trying to login to samba PDC

[Don Zajic]

Have you created both a linux user account and samba user account for
the username you are attempting with?

On your linux system prompt type:  adduser -u nnn username	
Where nnn is the userid number that you want to assign to this user and
of course username is a valid domain user name
This will create the entry in the /etc/passwd file
Then on your linux system type:  smbadduser -a username
Again where user name is the user name you just created in the passwd
file.

Now attempt to login to the domain from a Windows system with that user
name.

The short of it is the user must exist in both the linux passwd file and
the samba smbpasswd file with the same UID value.

Don

-----Original Message-----
From: Thomas Graham [mailto:thomas at tgraham.org.uk] 
Sent: Sunday, February 16, 2003 9:25 AM
To: samba at lists.samba.org
Subject: [Samba] Access Denied when trying to login to samba PDC


Having managed to join my system to the domain using the root user, when
I try to logon from the WinNT login screen, I get the response "Windows
cannot connect to the domain, either because the domain controller is
down or otherwise unavailable, or because your computer account was not
found."

nmbd.log:
[2003/02/16 14:25:58, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
  process_logon_packet: Logon from 192.168.0.2: code = 0x12

---

On 16th Feb Don Zaijic said:
>
>One of the main things you need to remember when joining a system to 
>the domain is, when prompted
for a username and password, always use "root" as the
>user.

---

While trying to set up samba as a PDC, I followed O'Reillys Using Samba.
This resulted in the following smb.conf:

[global]
workgroup = GRAHAM
encrypt passwords = true
log level = 1
max log size = 1000
hosts allow = 192.168.0/24 192.168.1/24
hosts deny = 1.1.1.1/0.0.0.0
domain logons = yes

security = user
os level = 34
local master = yes
preferred master = yes
domain master = yes

[temp]
comment = shared temporary directory
path = /usr/tmp
readonly = no
guest ok = yes

[homes]
comment = Home Directories
browseable = no
writable = yes
valid users = %S
create mode = 0664
directory mode = 0775
map to guest = bad user