[Samba] Windows 2003 Joins SambaPDC but cant login

Peter Ulrich Kruppa kruppa at pukruppa.net
Thu Oct 30 19:11:25 GMT 2003



On Thu, 30 Oct 2003, Ariel Molina Rueda wrote:

>
> I have a Samba as Primary Domain Controller, and a Windows 2003 Server
> machine that joins to the Domain, but when i reboot i cant log in. I
> receive a message like: Cant login, the Doiman Controller is not avaiable
> or unreachable. Thus i cant login to the domain.
I had exactly the same problem with some Win2k workstations:
I set up new machine accounts with new names and changed (as local
Administrator) the workstations's names to the new ones.
"Somehow it worked" (registered trademark :-)  )

Uli.


>
> I know the win2003 machine can see the Samba Machine 'cause i can use the
> shares, it is not a problem of the users, i have added and enabled some
> users. I have the Machine Account, everything seems to be ok.
>
> I has been very difficult to me to search the web as windows 2003 has many
> different typos: win2k3, windows 2003, win2003, windows2k3, bla, blah...
>
> Can anybody point me to some docs, i have read all the sambaPDC FAQ and
> everything on samba.org. I would really aprecciate if you point me to docs
> about Windows 2003 as a member of a Samba as Primary Domain Controller
>
>
> [global]
>     ; Basic server settings
>     netbios name = COCOLISO
>     workgroup = POPEYE
>
>     ; we should act as the domain and local master browser
>     os level = 64
>     preferred master = yes
>     domain master = yes
>     local master = yes
>
>     ; security settings (must user security = user)
>     security = user
>
>     ; encrypted passwords are a requirement for a PDC
>     encrypt passwords = yes
>
>     ; support domain logons
>     domain logons = yes
>
>     ; where to store user profiles?
>     logon path = \\%N\profiles\%u
>
>     ; where is a user's home directory and where should it
>     ; be mounted at?
>     logon drive = H:
>     logon home = \\COCOLISO\%u
>
>     ; specify a generic logon script for all users
>     ; this is a relative **DOS** path to the [netlogon] share
>     logon script = logon.cmd
>
>     add user script = /usr/sbin/useradd -d /dev/null -s /bin/false -M %u
>
> ; necessary share for domain controller
> [netlogon]
>     path = /usr/local/samba/lib/netlogon
>     read only = yes
>     write list = ntadmin
>
> ; share for storing user profiles
> [profiles]
>     path = /export/smb/ntprofile
>     read only = no
>     create mask = 0600
>     directory mask = 0700
>
>
>
>
> --
>
>  | Ariel Molina Rueda
>  |
>  |   ariel at ml.com.mx
>  |   www.artesann.com
>    ___________________
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>



More information about the samba mailing list