[Samba] Domain login Problem.

[Roberto Salvatierra]

Hi i setted up a samba server on debian sarge using samba version 3.0.14.

my configuration file is as follows:

-------------------------------- BOF -----------------------------------

[global]
guest account = smbguest
security = user
workgroup = SMSERVER
socket options = IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=4096 SO_RCVBUF=4096

max log size = 1000
log level = 1
log file = /var/log/samba/000log.%m

encrypt passwords = yes
wins support = yes

os level = 99
domain master = yes
local master = yes
preferred master = yes
domain logons = yes


add user script = /usr/sbin/useradd -m '%u'
delete user script = /usr/sbin/userdel -r '%u'

add group script = /usr/sbin/groupadd '%g'
delete group script = /usr/sbin/groupdel '%g'
add user to group script = /usr/sbin/usermod -G '%g' '%u'
set primary group script = /usr/sbin/usermod -g '%g' '%u'
add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null '%u'

logon path = \\SMSERVER\samba\profiles\%U<file://SMSERVER/samba/profiles/%25U>
logon drive = z:
logon home = \\SMSERVER\home\samba\%U <file://SMSERVER/home/samba/%25U>
#logon script = logon.bat

name resolve order = lmhosts host wins bcast
dns proxy = no

[netlogon]
        path = /home/netlogon
        writeable = no
        guest ok = no

[profiles]
        create mask = 0600
        browseable = no
        directory mask = 0700
        comment = Profile Share
        writable = yes
        path = /home/samba/profiles
        profile acls = yes


[homes]
#       path = /home/U%
       read only = no
       browseable = yes

---------------------------------------------------------------- EOF
-------------------------------

now almost everything works fine. I can add workstations to the Domain =
SMSERVER, they work fine, I can see the shares ( I had shares before ), and
mout them as any user, root, user1,user2 etc.

now when i try to log as a user other than root, to a XP client, it does not
allows me, it recognizes the user, but I'm not allowed to log on.

i can only login as root, even on the linux machine. how can I allow the
other non root users to log in ?

here is the problem:

-------------------- Login in as root: -------------------

smserver:/etc/samba# net join -U root
root's password:
[2006/05/15 19:00:26, 0] utils/net_ads.c:ads_startup(191)
  ads_connect: No results returned
Joined domain SMSERVER.
---------------------------------------------------------------



--------------- Login in as another user:------------

smserver:/etc/samba# net join -U chuby
chuby's password:
[2006/05/15 19:01:19, 0] utils/net_ads.c:ads_startup(191)
  ads_connect: No results returned
[2006/05/15 19:01:19, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(279)
  error setting trust account password: NT_STATUS_ACCESS_DENIED
Unable to join domain SMSERVER.
----------------------------------------------------------------

that unable to join domain, has given me headaches for 2 days now !,  Thanks
for any help !



R. Salvatierra