[Samba] Domain login Problem.

[Gary Dale]

Your problem is that you are trying to join a domain. net join is used 
to add machines, not people, to a domain. Presumably, only your root 
user has authority to do that, which is why the other net join fails.

If you already have your users added to the domain, you just need to 
give the users access to your local XP workstations. You can do that 
from XP.


Roberto Salvatierra wrote:

> Hi i setted up a samba server on debian sarge using samba version 3.0.14.
>
> my configuration file is as follows:
>
> -------------------------------- BOF -----------------------------------
>
> [global]
> guest account = smbguest
> security = user
> workgroup = SMSERVER
> socket options = IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=4096 SO_RCVBUF=4096
>
> max log size = 1000
> log level = 1
> log file = /var/log/samba/000log.%m
>
> encrypt passwords = yes
> wins support = yes
>
> os level = 99
> domain master = yes
> local master = yes
> preferred master = yes
> domain logons = yes
>
>
> add user script = /usr/sbin/useradd -m '%u'
> delete user script = /usr/sbin/userdel -r '%u'
>
> add group script = /usr/sbin/groupadd '%g'
> delete group script = /usr/sbin/groupdel '%g'
> add user to group script = /usr/sbin/usermod -G '%g' '%u'
> set primary group script = /usr/sbin/usermod -g '%g' '%u'
> add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null '%u'
>
> logon path = 
> \\SMSERVER\samba\profiles\%U<file://SMSERVER/samba/profiles/%25U>
> logon drive = z:
> logon home = \\SMSERVER\home\samba\%U <file://SMSERVER/home/samba/%25U>
> #logon script = logon.bat
>
> name resolve order = lmhosts host wins bcast
> dns proxy = no
>
> [netlogon]
>        path = /home/netlogon
>        writeable = no
>        guest ok = no
>
> [profiles]
>        create mask = 0600
>        browseable = no
>        directory mask = 0700
>        comment = Profile Share
>        writable = yes
>        path = /home/samba/profiles
>        profile acls = yes
>
>
> [homes]
> #       path = /home/U%
>       read only = no
>       browseable = yes
>
> ---------------------------------------------------------------- EOF
> -------------------------------
>
> now almost everything works fine. I can add workstations to the Domain =
> SMSERVER, they work fine, I can see the shares ( I had shares before 
> ), and
> mout them as any user, root, user1,user2 etc.
>
> now when i try to log as a user other than root, to a XP client, it 
> does not
> allows me, it recognizes the user, but I'm not allowed to log on.
>
> i can only login as root, even on the linux machine. how can I allow the
> other non root users to log in ?
>
> here is the problem:
>
> -------------------- Login in as root: -------------------
>
> smserver:/etc/samba# net join -U root
> root's password:
> [2006/05/15 19:00:26, 0] utils/net_ads.c:ads_startup(191)
>  ads_connect: No results returned
> Joined domain SMSERVER.
> ---------------------------------------------------------------
>
>
>
> --------------- Login in as another user:------------
>
> smserver:/etc/samba# net join -U chuby
> chuby's password:
> [2006/05/15 19:01:19, 0] utils/net_ads.c:ads_startup(191)
>  ads_connect: No results returned
> [2006/05/15 19:01:19, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(279)
>  error setting trust account password: NT_STATUS_ACCESS_DENIED
> Unable to join domain SMSERVER.
> ----------------------------------------------------------------
>
> that unable to join domain, has given me headaches for 2 days now !,  
> Thanks
> for any help !
>
>
>
> R. Salvatierra