[Samba] NET JOIN ERROR WITH SOL 10 and W2K3

[Felipe Augusto van de Wiel]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/30/2006 11:58 AM, Slack, Leon escreveu:
> We are currently working on a new systems design which is changing out
> our hardware, OSs and applications all at the same.  This is our first
> crack at trying to get SOL 10 (1/06) and W2K3 server to play nice
> together and we can't get the Windows domain controller to pass the SID
> to our UNIX server.  Any help would be greatly appreciated.  We are
> currently required to use Samba 3.0.2.0b but we may be able to move to
> 3.0.2.3b if upgrading fixes our problem.  Below is our smb,conf file:

	'net getsid' is not working? It should grab the domain SID
and store it in your secrets.tdb.


	Using the latest version of Samba is always a good idea,
specially with regards to recent versions of Microsoft Windows.


> # Global parameters 
[...]

> Here is our net join command and output: 
> sysadmin-n1svr (8) ./net join -U administrator -S diegogcsdc01 -l -d 10 
[...]

> [2006/08/25 13:58:39, 5] lib/debug.c:(368) 
[...]
> [2006/08/25 13:58:39, 4] libsmb/namequery.c:(548) 
>   startlmhosts: Can't open lmhosts file
> /h/COTS/CIFS/bin/Samba/lib/lmhosts. Error was Permission denied 
> [2006/08/25 13:58:39, 3] libsmb/namequery.c:(752) 
>   resolve_wins: Attempting wins lookup for name diegogcsdc01<0x20> 
> [2006/08/25 13:58:39, 3] libsmb/namequery.c:(755) 
>   resolve_wins: WINS server resolution selected and no WINS servers
> listed. 

	You should tell your samba about the WINS server in the network.


[...]
> [2006/08/25 13:58:39, 0] rpc_client/cli_pipe.c:(1473) 
>   cli_nt_session_open: cli_nt_create failed on pipe \lsarpc to machine
> diegogcsdc01.  Error was NT_STATUS_ACCESS_DENIED 
> could not initialise lsa pipe 
> could not obtain sid for domain 

	If you are using AD, you could try to:

		./net ads join <ADS-realm>


> Thanks, 

	Kind regards,

- --
Felipe Augusto van de Wiel <felipe at paranacidade.org.br>
Coordenadoria de Tecnologia da Informação (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/           Phone: (+55 41 3350 3300)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFE9vn9Cj65ZxU4gPQRAvZVAJ9NFFepVEYG5SV7Fs9DN8Q7dz6JewCfQgaU
n6TIyfvRjJFCQ+O/oza66W4=
=zxQ1
-----END PGP SIGNATURE-----