[Samba] Re: Problem with Authnication from NT

[Kang Sun]

OK, I just figured out how to do it.

My NT4 workstation is called "king".
Use 'smbldap-useradd -w king' to add the posixAccount: king$.
Then use 'smbpasswd -a -m king' to add the samba account. You will have
# smbldap-usershow king$
dn: uid=king$,ou=Computers,dc=sunix,dc=com
objectClass: top,inetOrgPerson,posixAccount,sambaSamAccount
cn: king$
sn: king$
uid: king$
uidNumber: 1025
gidNumber: 515
homeDirectory: /dev/null
loginShell: /bin/false
description: Computer
sambaSID: S-1-5-21-1242048156-3479289135-3828126537-3050
sambaPrimaryGroupSID: S-1-5-21-1242048156-3479289135-3828126537-2031
displayName: king$
sambaPwdCanChange: 1090385089
sambaPwdMustChange: 2147483647
sambaLMPassword: FE250117FB90641FAAD3B435B51404EE
sambaNTPassword: 0FBD58B776542B3CB589E0D8F686A3A7
sambaPwdLastSet: 1090385089
sambaAcctFlags: [W          ]

Then loginto  NT4  and change its identification from workgroup to domain,
without creating new account.

Hope this works for you guys, too!
--- Kang


"Kang Sun" <sun_kang at hotmail.com> wrote in message
news:cdkj9d$bbp$1 at sea.gmane.org...
> I have the same problem.
>
> The log file said:
> # [2004/07/20 21:46:47, 0]
> passdb/pdb_ldap.c:ldapsam_update_sam_account(1512)
>
> # ldapsam_update_sam_account: failed to modify user with uid = king$,
error:
> modify/delete: sambaPrimaryGroupSID: no such value (Success)
>
> # [2004/07/20 21:46:49, 0] passdb/pdb_ldap.c:ldapsam_delete_entry(271)
>
> # ldapsam_delete_entry: Entry must exist exactly once!
>
> I tried  'smbldap-useradd -w King$'.  It does not seem to add Add the
> SambaSID.
>
> # smbldap-useradd -w king$
> # smbldap-usershow king$
> dn: uid=king$,ou=Computers,dc=sunix,dc=com
> objectClass: top,inetOrgPerson,posixAccount
> cn: king$
> sn: king$
> uid: king$
> uidNumber: 1023
> gidNumber: 515
> homeDirectory: /dev/null
> loginShell: /bin/false
> description: Computer
>
> Forcing creating a Samba account with option -a give me an error:
> # smbldap-useradd -a -w king$
> Can't call method "get_value" on an undefined value at
> /usr/sbin/smbldap-useradd line 152, <DATA> line 283.
>
> Using pdbedit also has problems:
> # pdbedit -a -m  -u king
> ldapsam_add_sam_account: failed to modify/add user with uid = king$ (dn =
> uid=king$,ou=Computers,dc=sunix,dc=com)
> Unable to add machine! (does it already exist?)
>
> I started to think the add machine script must be wrong or something.
>
> Please help somebody.
>
> -- Kang
> ================================
> Hi Samba Guru's...
>
>   I have a problem connecting from a windows NT workstation to Samba
server.
> It is working fine for Windows XP and Windows 2000. Samba not logging any
> information about that Windows NT m/c. Here i am giving the smb.conf file.
> Please try to help me to work it for Win NT also.
>
> Here is my Configuration file.
>
> Thanks in advance for any help.
> # Global Parameters
>
> [global]
>
> netbios name = avengr03
>
> workgroup = avengr03
>
> map to guest = Bad User
>
> passwd program = /usr/bin/passwd %u
>
> passwd chat = *New*password* %n\n *Retype*new*password %n\n
> *passwd:*all*authentication*tokens*updated*sucessfully*
>
> # Debug Logging Information
>
>
> Log Level = 2
>
> max log size = 1000
>
> # log file = /var/log/samba/samba.log.%m
>
> socket options = TCP_NODELAY IPTOS_LOWDELAY
>
> wins support = yes
>
> # Networking configuration Options
>
> Hosts Allow = *.*.*.*
>
> [Proj1]
>
> comment = Proj1 directory
>
> path = /engr/proj1
>
> read only = No
>
> valid users = @tec,pvasireddy,pbuenros,dan,dsteffen,scollins
>
> [Proj2]
>
> comment = Proj2 directory
>
> path = /engr/proj2
>
> read only = No
>
> valid users = @tec,pvasireddy,pbuenros,dan,dsteffen,scollins
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>