[Samba] Win XP Pro / Linux PDC

Art Powell art at adalante.net
Tue Jan 13 16:52:35 GMT 2004

In XP, you have to make some changes to the security policy. On the XP
client, go to the "Control Panel" and then "Administrative Tools" and
then open the "Local Security Settings" and the open the "Local Options"
and then the "Security Options" folder. The following should be

Domain Member: Digitally encrypt or sign secure channel data
Domain Member: Digitally encrypt secure data channel
Domain Member: Digitally sign secure data channel.

Reboot your machine, and it should now be able to join the domain.

This was a problem in SAMBA 2.x. Let me know if it works, I am
interested to see if it is still a problem in SAMBA 3.x (my guess is
yes, due to difference in the way XP authenticates.).

Art Powell
Adalante Network Solutions Inc.
9410-C Anderson Mill Road
Austin, TX 78729
Off: 1-512-918-2672
Cel: 1-512-633-7577

-----Original Message-----
From: Antony Gelberg [mailto:antony at antgel.co.uk] 
Sent: Monday, January 12, 2004 10:47 AM
To: samba at lists.samba.org
Subject: [Samba] Win XP Pro / Linux PDC

Hi all,

I'm trying to configure Samba as a PDC.  I'm running Debian Woody, hence
Samba version 3.0.0final-1.  We have no Windows servers anywhere on the
network (yay!).

I have done an smbpasswd for root, and add machine script is setup (see
attached smb.conf).  From the XP Pro workstation, when I fill in the
name, log in as root, and click ok, I eventually get: "The following
occurred when attempting to join the domain CHHAUSMANN: access denied".

I know that something is working, because if I type in the wrong root
password, I get a different error - "unknown username or bad password".

In /var/log/samba/log.nmbd, I get things like:
[2004/01/13 00:27:24, 1]
  process_logon_packet: Logon from code = 0x12
[2004/01/13 00:27:24, 1]
  process_logon_packet: Logon from code = 0x7

I'm about to use the source, but can anyone give me any pointers?  I
looked at
and followed the instructions there, but trying to join the domain as
machineadmin just returns "The user name could not be found.".


More information about the samba mailing list