[Samba] disabled mashine account without password

[Patrick Flohr]

Hello,
my probs are still the same (i tried with and without requiresignoreseal 
and signsecurechanel patch).
i use two different admin accounts, both are within smbpasswd and can be 
used with swat.
in details:
1.
conf:
admin users = root
domain admin group = root @root

try joining the domain without existing mashine accout:
xp error: unknow user or invalid password
samba log:
 rpc_server/srv_netlog_nt.c:get_md4pw(176)
 get_md4pw: Workstation fraggle$: no account in domain

try joining the domain with existing mashine accout for fraggle$:
xp error: unknown user or invalid password
samba log (syslog level 10): nothing

2.
conf:
admin users = administrator
domain admin group = administrator @administrator

xp error: access denied
samba box: mashine accout for fraggle$ created
fraggle$:1008:NO PASSWORDXXXXXXXXXXXXXXXXXXXXX:NO 
PASSWORDXXXXXXXXXXXXXXXXXXXXX:
[NDW        ]:LCT-3F210B9C:
samba.log:
[2003/07/25 12:51:07, 0] smbd/service.c:make_connection(381)
  make_connection: administrator logged in as admin user (root privileges)
[2003/07/25 12:51:07, 0] rpc_server/srv_netlog_nt.c:get_md4pw(176)
  get_md4pw: Workstation fraggle$: no account in domain
[2003/07/25 12:51:08, 0] smbd/service.c:make_connection(381)
  make_connection: administrator logged in as admin user (root privileges)
[2003/07/25 12:51:08, 0] libsmb/smbencrypt.c:decode_pw_buffer(260)
  decode_pw_buffer: incorrect password length (-1821683352).
[2003/07/25 12:51:08, 0] 
rpc_server/srv_samr_nt.c:_samr_delete_dom_user(2686)
  _samr_delete_dom_user: Not yet implemented.

maybe it's a prob for the tecnical list???
I really tried everything written in any available manual please help.
thx
Patrick Flohr

Marian Mlcoch, Ing wrote:

>Try revert to domain admin root and aply next XP patch as described on
>http://hr.uoregon.edu/davidrl/samba/samba-pdc.html
>
>5.3.3. Windows 2000/XP Professional
>To allow Windows XP Professional (not W2K) to join a Samba Domain, you will
>need to first make the following changes to your registry and reboot:
>
>[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
>"requiresignorseal"=dword:00000000
>"signsecurechannel"=dword:00000000
>
>
>The second setting is a bit of an unknown; many can join a Samba domain
>without setting it; others claim it doesn't work for their system until they
>do set it. In short, your mileage may vary ;-)
>
>
>----- Original Message ----- 
>From: "Patrick Flohr" <Flohr.P at t-online.de>
>To: <samba at lists.samba.org>
>Sent: Friday, July 25, 2003 11:22 AM
>Subject: [Samba] disabled mashine account without password
>
>
>  
>
>>Hi,
>>
>>when i try to join a winxp pro client to my samba domain i get an access
>>denied error.
>>Checking /etc/passwd and smbpasswd shows an new created mashine account,
>>but the account
>>is disabled and without a password.
>>
>>I'm using a debian 3.0 Linux with Samba 2.2.8a-1.0 and the following add
>>user script:
>>/usr/sbin/useradd -d /dev/null -g workstations -s /bin/false -M %u
>>
>>Is there something wrong with the script?
>>
>>Some informatio about the xp-client:
>>-- signorseal patch applied
>>-- accessing shares without probs possible
>>
>>additional information:
>>-- some probs with root accout see thread from 23.7
>>
>>Thank you in advance for all help
>>Patrick Flohr
>>
>>
>>
>>-- 
>>To unsubscribe from this list go to the following URL and read the
>>instructions:  http://lists.samba.org/mailman/listinfo/samba
>>    
>>
>
>  
>