[Samba] Help! Unable to join domain :(

Misty Stanley-Jones misty at borkholder.com
Mon Apr 4 23:52:59 GMT 2005


More info:  Here is my smb.conf on my PDC:

[global]
workgroup = CORP
netbios name = CORPSRV
server string = Corp File Server
security = user
password server = *
domain logons = yes
username map = /usr/local/samba/lib/smbusers
log file = /data/samba/log/%m.log
log level = 5
#max log size = 50
debug timestamp = yes
logon script = logon.bat
logon path = \\%L\profiles\%U\%a
logon drive = H:
logon home = \\%L\%U
time server = yes
printing = cups
printcap = cups
printcap cache time = 60
load printers = yes
show add printer wizard = no
force printername = yes
wins support = yes
os level = 100
preferred master = yes
domain master = yes
local master = yes
remote announce = 192.168.2.255/CORP
remote browse sync = 192.168.2.255
name resolve order = wins bcast lmhosts host
wins proxy = yes
dns proxy = yes
passdb backend = ldapsam:ldap://127.0.0.1/
#ldapsam:trusted = yes
ldap suffix = dc=borkholder,dc=com
ldap admin dn = cn=Manager,dc=borkholder,dc=com
ldap group suffix = ou=Groups
ldap user suffix = ou=People
ldap machine suffix = ou=Computers
ldap idmap suffix = ou=People
ldap ssl = no
ldap passwd sync = yes
add user script = /usr/local/sbin/smbldap-useradd -m "%u"
ldap delete dn = no
#delete user script = /usr/local/sbin/smbldap-userdel "%u"
add machine script = /usr/local/sbin/smbldap-useradd -t 5 -w "
%u"
add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
#delete group script = /opt/IDEALX/sbin/smbldap-groupdel "%g"
add user to group script = /usr/local/sbin/smbldap-groupmod -m
 "%u" "%g"
delete user from group script = /usr/local/sbin/smbldap-groupm
od -x "%u" "%g"
set primary group script = /usr/local/sbin/smbldap-usermod -g "%g" "%u"
admin users = root @"Domain Admins"
printer admin = root @"Domain Admins"
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
deadtime = 60
encrypt passwords = yes
#use spnego = no

Here is the smb.conf of a member server:
[global]
        workgroup = CORP
        netbios name = FURNSRV
        server string = Furniture File Server
        security = domain
        password server = 192.168.1.101
        wins server = 192.168.1.101
        wins support = no
        wins proxy = yes
        dns proxy = yes
        os level = 99
        local master = yes
        domain master = no
        preferred master = yes
        log file = /usr/local/samba/var/userlog/%m.log
        log level = 2
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 
SO_BROADCAST
        printing = cups
        printcap = cups
        remote browse sync = 192.168.1.255
        interfaces = 127.0.0.1 192.168.2.3
        bind interfaces only = yes
        name resolve order = wins bcast lmhosts host
        hide dot files = Yes
        inherit permissions = Yes
        inherit acls = Yes

Here is the error I get when I try to use smbclient on the PDC itself:

SPNEGO login failed: Logon failure
session setup failed: NT_STATUS_LOGON_FAILURE

Here is the same thing on the member server:
furnsrv:~ # smbclient -L CORPSRV -W CORP -U CORP/root
added interface ip=127.0.0.1 bcast=127.255.255.255 nmask=255.0.0.0
added interface ip=192.168.2.3 bcast=192.168.2.255 nmask=255.255.255.0
Got a positive name query response from 192.168.1.101 ( 192.168.1.101 )
Password:
Domain=[CORP] OS=[Unix] Server=[Samba 3.0.12]

        Sharename       Type      Comment
        ---------       ----      -------
        acct_hp8500     Printer   Accounting Color Laser Printer
        plotter         Printer   Engineering Plotter
        netlogon        Disk      Network logon service
        software        Disk      Software for Samba computers
        public          Disk      Public Files
        PDF             Disk      Location of documents printed to PDFCreator 
printer
        EVERYTHING      Disk      All shares
        APPS            Disk
        ACCT            Disk
        HR_PR           Disk
        ENGR            Disk
        DATA            Disk
        X               Disk
        NETWORK         Disk
        UTILS           Disk
        CDROM           Disk      CD-ROM on CORPSRV
        IPC$            IPC       IPC Service (Corp File Server)
        ADMIN$          IPC       IPC Service (Corp File Server)
        truss_hp5n      Printer   HP Laserjet 5n
        truss_hp4050    Printer   HP Laserjet 4050
        truss_hp4       Printer   HP Laserjet 4
        PDFcreator      Printer   Create PDF files
        furnlaser       Printer
        FAX             Printer   Create FAX Files
        engr_hp1300     Printer
        root            Disk      Home Directories
Domain=[CORP] OS=[Unix] Server=[Samba 3.0.12]

        Server               Comment
        ---------            -------
        CORPSRV              Corp File Server
        FURNSRV              Furniture File Server
        LNXMISTY             Samba 3.0.13
        NTENGRECEPT
        NTFURNOFFICE
        NTJEREMY
        NTJOHNK
        NTLISA
        NTMIKE
        NTRECEPTIONIST
        NTTIM
        NTTRUSS
        SQW
        TRUSSRV              Samba Server
        W2KGENE
        W2KGREG
        W2KHANK
        W2KTOMMY
        XPDWAYNE2            Dwayne's New Laptop
        XPJONATHAN
        XPKRIS
        XPNORTON
        XPPAT
        XPSCOTT

        Workgroup            Master
        ---------            -------
        BORKHOLDER           IFSS
        CORP                 CORPSRV


Maybe someone can spot my stupid mistake.

Misty


More information about the samba mailing list