[Samba] Joining XP SP2 to a Samba PDC
DSanchez
myjunkacct at gmail.com
Wed Aug 10 16:51:28 GMT 2005
Hello and Thanks in advance.
I have a CentOS 4.1 Server and i have samba Version 3.0.10-1.4E
I have 2 users on this server right now: Root, Dsanchez.
I have also issued this command to set up these 2 users on the Samba
Server as well.
smbpasswd -a root
smbpasswd -a dsanchez
and i set up the password to match the linux account.
Here is my SMB.conf file:
# Global parameters
[global]
workgroup = ETNET
server string = Samba PDC Server
passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n\n
*ReType*new*UNIX*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
unix password sync = Yes
log file = /var/log/samba/%m.log
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
printcap name = /etc/printcap
add user script = /usr/sbin/useradd -d /dev/null -g 100 -s
/bin/false -M %u
add machine script = /usr/sbin/useradd -c Machine -d /dev/null
-s /bin/false machine_name$
domain logons = Yes
os level = 65
preferred master = Yes
domain master = Yes
dns proxy = No
idmap uid = 16777216-33554431
idmap gid = 16777216-33554431
hosts allow = 10.78., 127.
cups options = raw
[homes]
comment = Home Directories
read only = No
browseable = No
[netlogon]
comment = Network Logon Service
path = /home/netlogon
guest ok = Yes
share modes = No
[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No
I have also made the following changes to the XP box.
Registry changes:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetLogon\Parameters\Requiresignorseal
Which i set to '0' from '1'
I have made sure the following in Local Security Policy is set:
I edited or checked the following entries:
"Domain member: Digitally encrypt or sign secure channel(Disabled)"
"Domain member: Disable machine account password changes(Disabled)."
"Domain member: Require strong (Windows 2000 or later) session key(Disabled)"
Then i go to the Systems Properties/computer name change/
I change from workgroup: workgroup to Domain:ETINET
Then i click the 'ok' button, and a login window pops up.
I then use the following usernames to 'Join'
root
admin
administrator
dsanchez
etinet\root
etinet\admin
etinet\administrator
etinet\dsanchez
I get the following error when i try to join as:
administrator
admin
etinet\admin
etinet\administrator
The following error occurred attempting to join the domain "ETINET":
Logon Failure: Unknown Username or bad password.
When i try using the following this is what i get:
root
etinet\root
The following error occurred attempting to join the domain "ETINET":
The username could not be found.
Then, if i try and use my account, whcih i added to the root group.
Dsanchez
etinet\Dsanchez
The following error occurred attempting to join the domain "ETINET":
Access is Denied.
Note, this is an XP SP2 Machine and i only have 1 user on this machine
(Dsanchez)
Also,
I did find that this script
add machine script = /usr/sbin/useradd -d /dev/null -g 102 -s /bin/false
has a group of 102
and the machine log file that was in /var/log/samba/<machinename>.log
had this error in it.
useradd: unknown group 102
however i do have this script in the smb.conf file.
add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u
So do i need both of these lines?
do i need to make a group with the Gid of 102?
Thanks.
More information about the samba
mailing list