[Samba] Probs joining Samba PDC with WinXP

[Marian Mlcoch, Ing]

In your conf is error by doc is writed update encrypted (G)
This boolean parameter allows a user logging on with a plaintext password to
have their encrypted (hashed) password in the smbpasswd file to be updated
automatically as they log on. This option allows a site to migrate from
plaintext password authentication (users authenticate with plaintext
password over the wire, and are checked against a UNIX account database) to
encrypted password authentication (the SMB challenge/response authentication
mechanism) without forcing all users to re-enter their passwords via
smbpasswd at the time the change is made. This is a convenience option to
allow the change over to encrypted passwords to be made over a longer
period. Once all users have encrypted representations of their passwords in
the smbpasswd file this parameter should be set to no.

!!!! In order for this parameter to work correctly the encrypt passwords
parameter must be set to no !!!! when this parameter is set to yes.

Note that even when this parameter is set a user authenticating to smbd must
still enter a valid password in order to connect correctly, and to update
their hashed (smbpasswd) passwords.

Default: update encrypted = no

Second in your conf not explicit set security mode to user best is set it.

Try on xp not join domain and only test as clasic client first. Login as
user exist on samba with identic pass and try view and use shares on it.

Bye.

----- Original Message ----- 
From: "Patrick Flohr" <Flohr.P at t-online.de>
To: <samba at lists.samba.org>
Sent: Wednesday, July 23, 2003 9:17 AM
Subject: Re: [Samba] Probs joining Samba PDC with WinXP


> Marian Mlcoch, Ing wrote:
>
> >Have you normal user in smbpasswd file?
> >
> >This two commands must be executed for each user...
> >useradd user
> >smbpasswd -a user
> >
> I have normal users in smbpasswd, some with the same user/pw like on the
> xp-client.
>
> >What is your smb.conf?
> >
> snip
> --------------------------------------
> # Global parameters
> [global]
>         workgroup = MEINS
>         server string = %h server (Samba %v)
>         encrypt passwords = Yes
>         update encrypted = Yes
>         passwd program = /usr/bin/passwd %u
>         passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
> *Retype\snew\sUNIX\spassword:* %n\n .
>         syslog = 0
>         log file = /var/log/samba/log.%m
>         max log size = 1000
>         add user script = /usr/sbin/adduser --force-badname --firstuid
> 1005 --gid 900 --disabled-login --no-create-home --quie
> t --gecos GECOS -M %u
>         logon path = \\%L\profiles\%U
>         logon drive = f:
>         logon home = \\%L\%U\.profile
>         domain logons = Yes
>         os level = 64
>         preferred master = True
>         domain master = True
>         dns proxy = No
>         wins support = Yes
>         admin users = root
>         hosts allow = 192.168.10., 127.0.0.1
> ----------------------------------------
>
> >Bye.
> >
> >
> >
> >----- Original Message ----- 
> >From: "Patrick Flohr" <Flohr.P at t-online.de>
> >To: <samba at lists.samba.org>
> >Sent: Wednesday, July 23, 2003 8:43 AM
> >Subject: [Samba] Probs joining Samba PDC with WinXP
> >
> >
> >
> >
> >>Hello,
> >>
> >>I'm using Debian 3.0 with Samba 2.2.8a-1.0 when i try to join my
> >>xp-mashine (xp-pro with sighnorseal patch) to the domain using the root
> >>accout
> >>i get the error: "unknown user or invalid password",  but when i connect
> >>via swat everything works fine.
> >>
> >>i added a mashineaccount to passwd and smbpasswd, trying to join the
> >>xp-mashine via a normal user accout fails with
> >>"access denied",  the following lines are taken from the log file:
> >>
> >>[2003/07/23 03:22:22, 0]
rpc_server/srv_samr.c:api_samr_set_userinfo(670)
> >>  api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO.
> >>[2003/07/23 03:22:22, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1418)
> >>  unable to open passdb database.
> >>
> >>using the root accout, nothing is loged.
> >>
> >>
> >>I hope somebody can help, i try for days.
> >>Thanks in advance
> >>
> >>Patrick Flohr
> >>
> >>
> >>-- 
> >>To unsubscribe from this list go to the following URL and read the
> >>instructions:  http://lists.samba.org/mailman/listinfo/samba
> >>
> >>
> >
> >
> >
>
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba