[Samba] Samba PDC and Win2k Client

[John H Terpstra]

On Tue, 17 Feb 2004, L.R.Rodriguez wrote:

> I'll ask again, since its been a few days.
>
> Quick Summary:
> I am trying to join some Win2k (Service Pack 4) machines to a NT4 style
> domain with a Samba PDC. One machine successfully joins the Samba
> domain. One fails.

Have you also disabled schannel support on both machines?

- John T.

>
> Current configuration:
>  SambaPDC:
>    - FreeBSD 4.9-RELEASE
>    - Samba 2.2.8a (from binary package)
>  Host1 (Silv):
>    - Windows 2000 SP4 (5.00.2195)
>  Host2 (Plaid):
>    - Windows 2000 SP4 (5.00.2195)
>  All machines are on the same network switch.
>  There are no other machines on the switch.
>  All connections are 100/Full Duplex..
>  All machines are in the 192.168.x.y subnet
>  SambaPDC is is running bind9 with a fake zone (.error) for all machines
> and forwards all other DNS queries.
>  All machines use SambaPDC for DNS resolution.
>  Digital Sign'n'Seal is disabled on both client machines.
>
>  smb.conf:
>    [global]
>       workgroup = SAMBAPDC
>       hosts allow = 192.168.
>       log file = /var/log/log.%m
>       log level = 2
>       max log size = 50000
>       security = user
>       encrypt passwords = yes
>       smb passwd file = /usr/local/private/smbpasswd
>       domain master = yes
>       preferred master = yes
>       domain logons = yes
>
> Each machine has a user account (silv$, plaid$) in the
> passwd/master.passwd files. Each machine has an account in the smbpasswd
> file, created with 'smbpasswd -a -m [machine name]'. When I add 'silv'
> to the domain and reboot, I can log in to the domain. When I add 'plaid'
> to the domain and reboot, I cannot log in to the domain. I get the
> following error: "The system cannot log you on to the domain because the
> system's computer accout in the domain is missing or the password is
> incorrect." I should stress that at no point during the process of
> adding 'plaid' to the domain did the I get an error on 'plaid'. On
> SambaPDC, in the logfile for plaid, 'log.plaid', I see these two errors:
>
>  >[2004/02/14 17:39:11, 2]
> rpc_parse/parse_samr.c:samr_io_userinfo_ctr(6285)
>  >  samr_io_userinfo_ctr: unknown switch level 0x1a
>  >[2004/02/14 17:39:11, 0] rpc_server/srv_samr.c:api_samr_set_userinfo(670)
>  >  api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO.
>
> I am at a loss. 'Silv' and 'plaid' should not be acting differently
> here. Can anyone suggest any courses of further investigation?
>
> Also, sometimes when I try to log in to 'Silv', it seems to have
> developed the same error as 'Plaid'. When I remove and add it back to
> the domain, however, it functions properly for while, before screwing up
> again.
>
> Thanks,
>
> L.R.Rodriguez
>
>

-- 
John H Terpstra
Email: jht at samba.org