[Samba] Trouble adding to domain

Daniel Davidson danield at igb.uiuc.edu
Mon Jun 4 19:03:19 GMT 2007

I am having trouble adding machines to domains.  I enter a proper
username and password on the windows end, the ldap server executes the
proper script, the script executes properly, resulting in the right
entry into ldap as shown below:

# lancelot1$, computer, igb.uiuc.edu
dn: uid=lancelot1$,ou=computer,dc=igb,dc=uiuc,dc=edu
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: posixAccount
cn: lancelot1$
sn: lancelot1$
uid: lancelot1$
uidNumber: 1002
gidNumber: 515
homeDirectory: /dev/null
loginShell: /bin/false
description: Computer
gecos: Computer

However, the windows system does not have it join the domain, and give
an error saying "the user name could not be found."  Below is my config,
does anyone know what would cause this?

	netbios name = arthur
	workgroup = igbtest
	server string = igb test domain
	security = user
	encrypt passwords = yes
	local master = yes
	os level = 65
	domain master = yes
	preferred master = yes
	null passwords = no
	hide unreadable = yes
	hide dot files = yes
	domain logons = yes
	log file = /var/log/samba/log.%m
	max log size = 50

	add user script
= /usr/share/doc/samba-3.0.24/LDAP/smbldap-tools-0.9.2/smbldap-useradd
-m "%u"
	add machine script
= /usr/share/doc/samba-3.0.24/LDAP/smbldap-tools-0.9.2/smbldap-useradd
-w "%u"
	add group script
= /usr/share/doc/samba-3.0.24/LDAP/smbldap-tools-0.9.2/smbldap-groupadd
-p "%g"
	passdb backend = ldapsam:ldap://
	ldap delete dn = Yes
	ldap ssl = no
	ldap suffix = dc=igb,dc=uiuc,dc=edu
	ldap admin dn = cn=ldapadmin,dc=igb,dc=uiuc,dc=edu
	ldap group suffix = ou=group
	ldap user suffix = ou=People
	ldap machine suffix = ou=computer
	ldap idmap suffix = ou=idmap

	 path = /var/lib/samba/netlogon
#	 guest ok = Yes
	 browseable = no
	 write list = root

	 path = /home/%U
	 browseable = no
	 valid users = %S
	 read only = no
	 create mask = 0664
	 directory mask = 0775

More information about the samba mailing list