[Samba] Can't join domain

TRAPPE trappe.vincent at laposte.net
Mon Oct 4 11:51:30 GMT 2004

    I've install samba 3.0.7, Openldap, nss_ldap,pam_ldap, smbldap-tools
on sarge. I've got a issue for join the domain on local or with windows
I'm trying to made a PDC for windows workstations, i've follow
instructions from the Happy guide, smbldap howto, ..... Everything seems
to works except, join the domain and authentificate users with ldap.
 This is what i've done : 
smbpasswd -w smbpass
-> Setting stored password for "cn=Manager,dc=bic,dc=pf" in secrets.tdb
net rpc info
net getlocalsid.
put the sid in smbldap_conf.pm
do a smbldap-populate ( everythin works after with gq i can see my
smbldap-passwd Administrator for set Administrator password.
net groupmap list
	Domain Admins (S-1-5-21-1052293064-3474105952-3995511642-512) ->
	Domain Admins
	Domain Users (S-1-5-21-1052293064-3474105952-3995511642-513) -> 	Domain
	Domain Guests (S-1-5-21-1052293064-3474105952-3995511642-514) ->
	Domain Guests
	Administrators (S-1-5-21-1052293064-3474105952-3995511642-544) 	->
	users (S-1-5-21-1052293064-3474105952-3995511642-545) -> Users
	Guests (S-1-5-21-1052293064-3474105952-3995511642-546) -> Guests
	Power Users (S-1-5-21-1052293064-3474105952-3995511642-547) ->	 	Power
	Account Operators 	(S-1-5-21-1052293064-3474105952-3995511642-548) ->
Account 	Operators
	Server Operators (S-1-5-21-1052293064-3474105952-3995511642-549) 	->
Server Operators
	Print Operators (S-1-5-21-1052293064-3474105952-3995511642-550) 	->
Print Operators
	Backup Operators (S-1-5-21-1052293064-3474105952-3995511642-551) 	->
Backup Operators
	Replicator (S-1-5-21-1052293064-3474105952-3995511642-552) ->
	Domain Computers (S-1-5-21-1052293064-3474105952-3995511642-553) 	
	-> Domain Computers

net rpc user
I can bind Anonymously

smbclient3 -L localhost -U%
Domain=[BIC] OS=[Unix] Server=[Samba 3.0.2a]
        Sharename      Type      Comment
        ---------      ----      -------
        netlogon       Disk      Network Logon Service
        print$         Disk
        pdf-generator  Printer   PDF Generator (only valid users)
        tmp            Disk      Temporary file space
        public         Disk      Public Stuff
        IPC$           IPC       IPC Service (Samba Server 3.0.2a)
        ADMIN$         IPC       IPC Service (Samba Server 3.0.2a)
Domain=[BIC] OS=[Unix] Server=[Samba 3.0.2a]
        Server               Comment
        ---------            -------
        BORA                 BIC master computer
        CARANGUE             Samba Server 3.0.2a
        Workgroup            Master
        ---------            -------
        BIC                  CARANGUE

 smbldap-usermod -u 0 Administrator
 apply on windows xp, the seal modification with regedit
 Made machine dn the same than People in smb.conf, regarding the problem
i've read on all documenation ( i made also search my nss ldap to all
the base dn). i've tried also to authentificate with ssh in local and
it's work.
But i can't manage to join the domain or authentificate Administrator
When i do on my pdc server :
net rpc join Administrator
	Create of workstation account failed
	User specified does not have administrator privileges
	Unable to join domain BIC.

Any help would be very and very appreciate, is made one weeks on this
PS: Sorry for my bad english


More information about the samba mailing list