[Samba] Samba 3.0.14 and w2k3 terminal server / strange logon problem / is this in general possible

Jonathan Johnson jon at sutinen.com
Wed Aug 2 17:07:32 GMT 2006


On 8/2/2006 3:52 AM, Josef Schauer wrote:
> I try to logon to the DOMAIN ISARLBERG like this:
>
> username: josef
> password: XXXXX
> Domain: ISARLBERG
>
> After getting the error, I can see this in the eventlog:
>
> Tried credentials:  ISARLBERG/josef
>
> Effective used credentials OBELIX/josef
>
> OBELIX is the NETBIOS name of the samba server.
>   
What does 'pdbedit -L -v josef' reveal on the Samba server? It sounds
almost like the user account for josef might have been created before
the Samba server was converted to a domain controller; in this case,
that account will be considered a local account on the Samba server
instead of a domain account. If this is the case, then you may find it
easiest to remove the user account and recreate it.

This of course poses issues with user profiles -- josef's user profile
will likely be associated with OBELIX/josef instead of ISARLBERG/josef,
and once you successfully log in to the domain, a new user profile will
be created for ISARLBERG/josef. There are ways of overcoming this; if
you experience this issue feel free to write me back and I'll explain
how to fix it. It's not that difficult -- it involves replacing ACLs on
the profile, user registry hive (NTUSER.DAT), and modifying a registry
entry in the HKLM hive.

-Jonathan Johnson
Sutinen Consulting, Inc.
www.sutinen.com
jon at sutinen.com



More information about the samba mailing list