AW: AW: [Samba] Can't join my domain

[Fran Fabrizio]

Thanks John that did it!  I'm a little frustrated with the O'Reilly
Using Samba 2nd Ed book - it advertises that it covers 3.0 but has 
omissions such as this.  Now that I reread the book I think some of the
times they refer to "add user script" they meant "add machine script". 
Lucky for me this list is so helpful! :-)

-Fran

On Sun, 2003-11-23 at 13:40, John H Terpstra wrote:
> Fran,
> 
> You will need an "add machine script".
> 
> - John T.
> 
> On Sun, 23 Nov 2003, Fran Fabrizio wrote:
> 
> > On Sun, 2003-11-23 at 11:40, Hendrik wrote:
> > > Please send your smb.conf for examine.
> >
> > Pretty much all the same settings as the version I posted in the
> > original message but here it is again
> >
> > [global]
> >   netbios name = ds119b
> >   workgroup = CISSAMBADOMAIN
> >   wins support = yes
> >   encrypt passwords = yes
> >   domain master = yes
> >   local master = yes
> >   preferred master = ye
> >   os level = 65
> >   security = user
> >   domain logons = yes
> >
> >   ; roaming profile support
> >   logon path = \\%L\profiles\%u\%m
> >   logon script = logon.bat
> >
> >   logon drive = H:
> >   logon home = \\%L\%u\.win_profile\%m
> >
> >   time server = yes
> >
> >   ; list of admins on the XP box?
> >   ;domain admin group = root fran ;from book but Samba3 doesn't like it
> >
> >   ; script for adding users
> >   add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false
> > -M %u
> >
> > [netlogon]
> >   path = /usr/local/samba/lib/netlogon
> >   writable = no
> >   browsable = no
> >   write list = root fran
> >
> > [profiles]
> >   path = /home/samba-ntprof
> >   browsable = no
> >   writable = yes
> >   create mask = 0600
> >   directory mask = 0700
> >
> > [homes]
> >   read only = no
> >   browsable = no
> >   guest ok = no
> >   map archive = yes
> >
> > [test]
> >   comment = For testing only, please
> >   path = /usr/local/samba/tmp
> >   read only = no
> >   guest ok = yes
> >
> >
> > >
> > > -----Ursprüngliche Nachricht-----
> > > Von: Fran Fabrizio [mailto:fran at cis.uab.edu]
> > > Gesendet: Sonntag, 23. November 2003 15:51
> > > An: Hendrik; samba at lists.samba.org
> > > Betreff: Re: AW: [Samba] Can't join my domain
> > >
> > >
> > >
> > > >I have had the same Problem with Samba 2.2.8 but I solved it. I created
> > >
> > > >an user "root" on my W2k Client with Administrator Privileges and the
> > > >same password as on my Samba Server. In Samba 2.2.8 you only can join
> > > >the Samba PDC as "root".
> > > >
> > > >Perhaps this could also work on Samba3.
> > >
> > > Not a bad idea, but it didn't work in my case. :-(
> > >
> > > My XP box has two administrator accounts now, 'root' and 'fran'.  My
> > > linux
> > > Samba server also has those two accounts, root of course, and fran as my
> > >
> > > regular user account.  I've added root to smbpasswd with a password
> > > specifically for samba.  I've also added fran to smbpasswd.
> > >
> > > The odd thing is that if I try to join the domain as root, I get "user
> > > not
> > > found", if I try to join the domain as fran, I get "Access Denied".
> > > You'd
> > > think it would be the same since they're both in smbpasswd.
> > >
> > > I was watching log.nmbd, log.smbd, and /var/log/messages while
> > > attempting
> > > to join the domain, and I see a bunch of process_logon_packet messages
> > > from
> > > the XP client's IP, but no error messages.  Just some hex values like
> > > 0x12
> > > and 0x07 associated with the process_logon messages, do they mean
> > > anything?
> > >
> > > -Fran
> > >
> >
> >