[Samba] Samba PDC and Win2k Client

[Jason C. Waters]

Set your log level to 10 and then try to rejoin the domain from the 
failing machine.  Then post your log file

L.R.Rodriguez wrote:

> I'll ask again, since its been a few days.
>
> Quick Summary:
> I am trying to join some Win2k (Service Pack 4) machines to a NT4 
> style domain with a Samba PDC. One machine successfully joins the 
> Samba domain. One fails.
>
> Current configuration:
> SambaPDC:
>   - FreeBSD 4.9-RELEASE
>   - Samba 2.2.8a (from binary package)
> Host1 (Silv):
>   - Windows 2000 SP4 (5.00.2195)
> Host2 (Plaid):
>   - Windows 2000 SP4 (5.00.2195)
> All machines are on the same network switch.
> There are no other machines on the switch.
> All connections are 100/Full Duplex..
> All machines are in the 192.168.x.y subnet
> SambaPDC is is running bind9 with a fake zone (.error) for all 
> machines and forwards all other DNS queries.
> All machines use SambaPDC for DNS resolution.
> Digital Sign'n'Seal is disabled on both client machines.
>
> smb.conf:
>   [global]
>      workgroup = SAMBAPDC
>      hosts allow = 192.168.
>      log file = /var/log/log.%m
>      log level = 2
>      max log size = 50000
>      security = user
>      encrypt passwords = yes
>      smb passwd file = /usr/local/private/smbpasswd
>      domain master = yes
>      preferred master = yes
>      domain logons = yes
>
> Each machine has a user account (silv$, plaid$) in the 
> passwd/master.passwd files. Each machine has an account in the 
> smbpasswd file, created with 'smbpasswd -a -m [machine name]'. When I 
> add 'silv' to the domain and reboot, I can log in to the domain. When 
> I add 'plaid' to the domain and reboot, I cannot log in to the domain. 
> I get the following error: "The system cannot log you on to the domain 
> because the system's computer accout in the domain is missing or the 
> password is incorrect." I should stress that at no point during the 
> process of adding 'plaid' to the domain did the I get an error on 
> 'plaid'. On SambaPDC, in the logfile for plaid, 'log.plaid', I see 
> these two errors:
>
> >[2004/02/14 17:39:11, 2] 
> rpc_parse/parse_samr.c:samr_io_userinfo_ctr(6285)
> >  samr_io_userinfo_ctr: unknown switch level 0x1a
> >[2004/02/14 17:39:11, 0] 
> rpc_server/srv_samr.c:api_samr_set_userinfo(670)
> >  api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO.
>
> I am at a loss. 'Silv' and 'plaid' should not be acting differently 
> here. Can anyone suggest any courses of further investigation?
>
> Also, sometimes when I try to log in to 'Silv', it seems to have 
> developed the same error as 'Plaid'. When I remove and add it back to 
> the domain, however, it functions properly for while, before screwing 
> up again.
>
> Thanks,
>
> L.R.Rodriguez
>