[Samba] Machine account

Ashley Evans hoshy at hoshy.co.uk
Mon Jun 13 12:57:46 GMT 2005


Hi,

I'm running samba Version 3.0.14a-Debian, this is on Sarge with an 
openldap backend.  I lost the ldap db and have recreated all bar two 
machine accounts by rejoing the machines to the samba domain.  
Unfortunately two machine I have no local account for and they obviously 
can't log into the domain with out a machine account.

I've added the machine account using:

smbldap-useradd -i <netbios name>
smbpasswd -a -m <netbios name>

This has added the machine account to ldap (which for all other 17odd 
machines works fine) I've appended at the bottom of the mail the ldif 
for this entry.

After all of this the machine can't browse to the machine due trust 
relationship failure.  I also can't login to the machine itself.

I'm guessing this is sid or NTpassword related.  I've google for info on 
this and will continue to do so but as yet I've not found anything that 
gets me any further that where I am now.

other info:

net getlocalsid
SID for domain SLARTY is: S-1-5-21-2025931060-2576866358-1020295239

smbldap.conf sid == above sid

I've seen reference to 'rid' but none of my machine accounts have this, 
working or otherwise.

Clients are all XP.

Any info or solutions that you have would be appreciated.

Regards,
Ashley Evans

----
ldif

# Receptionist01$, People, jogroup.co.uk
dn: uid=Receptionist01$,ou=People,dc=jogroup,dc=co,dc=uk
cn: Receptionist01$
description: Computer
displayName: Computer
gecos: Computer
gidNumber: 515
homeDirectory: /dev/null
loginShell: /bin/false
objectClass: posixAccount
objectClass: inetOrgPerson
objectClass: top
objectClass: sambaSamAccount
sambaAcctFlags: [W          ]
sambaNTPassword: B868D6B873FC70971781BA22C23985DD
sambaPrimaryGroupSID: S-1-5-21-2025931060-2576866358-1020295239-515
sambaPwdCanChange: 1118665937
sambaPwdLastSet: 1118665937
sambaPwdMustChange: 2147483647
sambaSID: S-1-5-21-2025931060-2576866358-1020295239-3102
sn: Receptionist01$
uid: Receptionist01$
uidNumber: 1051

----





More information about the samba mailing list