[Samba] Using samba as a PDC with win2k clients

[rruegner]

hi,
for sure you must have the users on the samba server
in passwd and smbpasswd...
for admin root must be in smbpasswd too...
this is the way which it was in older samba and it works like charme with
3.rc4 too....in your conf a few
more entries will give you more functions...,study
this list with google many smb.conf were posted and with
3 rc4 there are more possible setups with ldap server i.e
Regards
----- Original Message ----- 
From: "Sandro Lex" <sandro at wnb.com.br>
To: <samba at lists.samba.org>
Sent: Wednesday, September 17, 2003 9:53 PM
Subject: [Samba] Using samba as a PDC with win2k clients


> Hello Samba users,
>
> I'm trying to configure my samba server as a PDC for some Win2k
> machines.
> I'm running Red Hat 8.0 and samba-3.0.0rc4.
> Everything seems to be ok, when using workgroup configuration, all the
> shares works fine. But I cant get the Win2k clients to log in the
> Domain.
> It says I have a unknown user or an incorrect password. But at least it
> prompted me for a user/password, so I know it is finding the Domain in
> the Server. Moreover, if I browse the network neighborhood I can see the
> Domain and the machines / shares.
> So I just cant log in.
>
> I have users and trust accounts configured at the server.
> I switched log level to 2 and if I use a correct combination of
> user/pass the log says :
>
> [2003/09/17 16:45:46, 2] auth/auth.c:check_ntlm_password(302)
>   check_ntlm_password:  authentication for user [sandro] -> [sandro] ->
> [sandro] succeeded
>
> If I use an incorrect combination the output would be:
>
> [2003/09/17 16:46:42, 2] auth/auth.c:check_ntlm_password(309)
>   check_ntlm_password:  Authentication for user [sandro] -> [sandro]
> FAILED with error NT_STATUS_WRONG_PASSWORD
>
> So, I presume the problem aint authentication.
>
>
> Anyone Can tell me what else it could be??
>
>
> my smb.conf:
>
> [global]
>         workgroup = SAMBA
>         encrypt passwords = yes
>
>         domain master = Yes
>         local master = yes
>         preferred master = Yes
>         os level = 65
>
>         domain logons = Yes
>         security = user
>
>         log level = 2
>
>
> [netlogon]
>         path = /home/netlogon
>         guest ok = Yes
>         browseable = No
>
> [homes]
>         comment = "Diretorio Home de : %u "
>         writeable = yes
>         create mask = 0644
>         browseable = No
>
> [public]
>         path = /tmp
>         writeable = yes
>         guest ok = yes
>
>
>
> and the complete output of the log with a correct combination of
> user/pass :
>
>
> [2003/09/17 16:52:05, 2] smbd/reply.c:reply_special(93)
>   netbios connect: name1=SIGMA           name2=PDV
> [2003/09/17 16:52:05, 2] smbd/reply.c:reply_special(100)
>   netbios connect: local=sigma remote=pdv, name type = 0
> [2003/09/17 16:52:05, 2] smbd/server.c:exit_server(558)
>   Closing connections
> [2003/09/17 16:52:05, 2] smbd/sesssetup.c:setup_new_vc_session(535)
>   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
> all old resources.
> [2003/09/17 16:52:05, 2] smbd/sesssetup.c:setup_new_vc_session(535)
>   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
> all old resources.
> [2003/09/17 16:52:05, 2] auth/auth.c:check_ntlm_password(302)
>   check_ntlm_password:  authentication for user [sandro] -> [sandro] ->
> [sandro] succeeded
> [2003/09/17 16:52:06, 2]
> rpc_server/srv_samr_nt.c:_samr_lookup_domain(2540)
>   Returning domain sid for domain SAMBA ->
> S-1-5-21-331481452-486475617-929701000
> [2003/09/17 16:52:06, 2]
> rpc_server/srv_samr_nt.c:access_check_samr_object(93)
>   _samr_open_domain: ACCESS DENIED  (requested: 0x00000211)
> [2003/09/17 16:52:06, 2]
> rpc_server/srv_samr_nt.c:_samr_lookup_domain(2540)
>   Returning domain sid for domain SAMBA ->
> S-1-5-21-331481452-486475617-929701000
> [2003/09/17 16:52:06, 2]
> rpc_server/srv_samr_nt.c:access_check_samr_function(115)
>   _samr_create_user: ACCESS DENIED (granted: 0x00000201;  required:
> 0x00000010)
> [2003/09/17 16:52:06, 2] smbd/server.c:exit_server(558)
>   Closing connections
> [2003/09/17 16:52:07, 2] smbd/reply.c:reply_special(93)
>   netbios connect: name1=SIGMA           name2=PDV
> [2003/09/17 16:52:07, 2] smbd/reply.c:reply_special(100)
>   netbios connect: local=sigma remote=pdv, name type = 0
> [2003/09/17 16:52:07, 2] smbd/sesssetup.c:setup_new_vc_session(535)
>   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
> all old resources.
> [2003/09/17 16:52:07, 2] smbd/server.c:exit_server(558)
>   Closing connections
> [2003/09/17 16:52:07, 2] smbd/sesssetup.c:setup_new_vc_session(535)
>   setup_new_vc_session: New VC == 0, if NT4.x compatible we would close
> all old resources.
> [2003/09/17 16:52:07, 2] auth/auth.c:check_ntlm_password(302)
>   check_ntlm_password:  authentication for user [sandro] -> [sandro] ->
> [sandro] succeeded
> [2003/09/17 16:52:09, 2] smbd/server.c:exit_server(558)
>   Closing connections
>
>
>
>
>
>
>
>
>
>
>
>
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>