[Samba] unable to join domain hosted by 3.0 PDC

[Craig White]

On Wed, 2004-07-21 at 05:30, Jeff Layton wrote:
> On Wed, Jul 21, 2004 at 01:54:52PM +0200, Nikola Vanevski wrote:
> > Hi!
> > 
> > I experienced the same problem a couple of days ago. It is a 
> > misconfiguration in global parameters, but I don't exactly know where. I 
> > copied the smb.conf [Globals] options from a working server and it fixed 
> > the problem. Because I was in a great hurry, I did not check where did I 
> > go wrong. Here are the parameters that worked on _my_ server : 
> > (smbpasswd backend)
> > 
> > [global]
> >    workgroup = MBPR2
> >    server string = Samba Server
> >    interfaces = 127.0.0.1, eth0
> >    bind interfaces only = Yes
> >    map to guest = Bad User
> >    username map = /etc/samba/smbusers
> >    add machine script = /usr/sbin/useradd  -c Machine -d 
> > /var/lib/nobody -s /bin/false %m$
> >    logon path =
> >    logon home =
> >    domain logons = Yes
> >    os level = 65
> >    preferred master = Yes
> >    domain master = Yes
> >    ldap suffix = dc=example,dc=com
> >    ldap ssl = no
> >    printer admin = @ntadmin, root, administrator
> > 
> > Hope this helps. If you find what's going on (like the difference 
> > between your settings and these), Id like to know.
> > 
> > Greetings
> > 
> > Nino
> 
> Thanks for the info. I eventually found another way to solve it. I had:
> 
>   invalid users = root
> 
> so I commented that out, and was then able to use the root account to
> join the domain. I'd like to be able to figure out how to do it using a
> non-root account, though. Apparently it should be possible to do so if
> the account is a member of the Domain Admins, but that didn't seem to
> work for me.
> 
> It would be nice to know what privileges are required to add machines to
> the domain, so you could delegate out that privilege without having to
> use the root account. Any samba experts care to comment?
----
You don't give details on your configuration but generally...

A member of 'Domain Admins' (RID 512)
/etc/smb/smbusers
root = Administrator administrator etc.
user with uidnumber of 0

Craig