[Samba] Using samba as a PDC with win2k clients

[Sandro Lex]

Hello Samba users,

I'm trying to configure my samba server as a PDC for some Win2k
machines.
I'm running Red Hat 8.0 and samba-3.0.0rc4.
Everything seems to be ok, when using workgroup configuration, all the
shares works fine. But I cant get the Win2k clients to log in the
Domain.
It says I have a unknown user or an incorrect password. But at least it
prompted me for a user/password, so I know it is finding the Domain in
the Server. Moreover, if I browse the network neighborhood I can see the
Domain and the machines / shares.
So I just cant log in.

I have users and trust accounts configured at the server.
I switched log level to 2 and if I use a correct combination of
user/pass the log says :

[2003/09/17 16:45:46, 2] auth/auth.c:check_ntlm_password(302)
  check_ntlm_password:  authentication for user [sandro] -> [sandro] ->
[sandro] succeeded

If I use an incorrect combination the output would be:

[2003/09/17 16:46:42, 2] auth/auth.c:check_ntlm_password(309)
  check_ntlm_password:  Authentication for user [sandro] -> [sandro]
FAILED with error NT_STATUS_WRONG_PASSWORD

So, I presume the problem aint authentication. 


Anyone Can tell me what else it could be??


my smb.conf:

[global]
        workgroup = SAMBA
        encrypt passwords = yes
 
        domain master = Yes
        local master = yes
        preferred master = Yes
        os level = 65
 
        domain logons = Yes
        security = user
 
        log level = 2
 
 
[netlogon]
        path = /home/netlogon
        guest ok = Yes
        browseable = No
 
[homes]
        comment = "Diretorio Home de : %u "
        writeable = yes
        create mask = 0644
        browseable = No
 
[public]
        path = /tmp
        writeable = yes
        guest ok = yes



and the complete output of the log with a correct combination of
user/pass :

 
[2003/09/17 16:52:05, 2] smbd/reply.c:reply_special(93)
  netbios connect: name1=SIGMA           name2=PDV
[2003/09/17 16:52:05, 2] smbd/reply.c:reply_special(100)
  netbios connect: local=sigma remote=pdv, name type = 0
[2003/09/17 16:52:05, 2] smbd/server.c:exit_server(558)
  Closing connections
[2003/09/17 16:52:05, 2] smbd/sesssetup.c:setup_new_vc_session(535)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
[2003/09/17 16:52:05, 2] smbd/sesssetup.c:setup_new_vc_session(535)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
[2003/09/17 16:52:05, 2] auth/auth.c:check_ntlm_password(302)
  check_ntlm_password:  authentication for user [sandro] -> [sandro] ->
[sandro] succeeded
[2003/09/17 16:52:06, 2]
rpc_server/srv_samr_nt.c:_samr_lookup_domain(2540)
  Returning domain sid for domain SAMBA ->
S-1-5-21-331481452-486475617-929701000
[2003/09/17 16:52:06, 2]
rpc_server/srv_samr_nt.c:access_check_samr_object(93)
  _samr_open_domain: ACCESS DENIED  (requested: 0x00000211)
[2003/09/17 16:52:06, 2]
rpc_server/srv_samr_nt.c:_samr_lookup_domain(2540)
  Returning domain sid for domain SAMBA ->
S-1-5-21-331481452-486475617-929701000
[2003/09/17 16:52:06, 2]
rpc_server/srv_samr_nt.c:access_check_samr_function(115)
  _samr_create_user: ACCESS DENIED (granted: 0x00000201;  required:
0x00000010)
[2003/09/17 16:52:06, 2] smbd/server.c:exit_server(558)
  Closing connections
[2003/09/17 16:52:07, 2] smbd/reply.c:reply_special(93)
  netbios connect: name1=SIGMA           name2=PDV
[2003/09/17 16:52:07, 2] smbd/reply.c:reply_special(100)
  netbios connect: local=sigma remote=pdv, name type = 0
[2003/09/17 16:52:07, 2] smbd/sesssetup.c:setup_new_vc_session(535)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
[2003/09/17 16:52:07, 2] smbd/server.c:exit_server(558)
  Closing connections
[2003/09/17 16:52:07, 2] smbd/sesssetup.c:setup_new_vc_session(535)
  setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
all old resources.
[2003/09/17 16:52:07, 2] auth/auth.c:check_ntlm_password(302)
  check_ntlm_password:  authentication for user [sandro] -> [sandro] ->
[sandro] succeeded
[2003/09/17 16:52:09, 2] smbd/server.c:exit_server(558)
  Closing connections