[Samba] Accessing member server prompts for credentials

[Leon Stringer]

I'm still struggling with this if anyone can help.

I'm back tracking through the HOWTO and realised that I hadn't created
a machine trust account.

So I've done:
 # groupadd machines
 # /usr/sbin/useradd -g machines -d /var/lib/nobody -c "Test Server" -s /bin/false server1
 # passwd -l server1
 Locking password for user server1.
 # smbpasswd -a -m server1
 Failed to modify password entry for user server1$

Please can anyone tell me why this last step fails?
 
> 
> From: Leon Stringer <leon.stringer at ntlworld.com>
> Date: 2008/06/17 Tue AM 11:13:14 GMT
> To: <samba at lists.samba.org>
> Subject: [Samba] Accessing member server prompts for credentials
> 
> Hi,
> 
> I'm trying to join a server as an AD member but it isn't working.
> 
> I do:
> 
>  kinit ADMINISTRATOR at DOMAIN1.CO.UK
> 
> which prompts for the password and displays nothing else. Then I do:
> 
>  net ads join -U Administrator%XXXXX
> 
> which returns:
> 
>  Using short domain name -- DOMAIN1
>  Joined 'SERVER1' to realm 'DOMAIN1.CO.UK'
> 
> So all looks OK, but when I try to browse the shares on \\server1
> from another domain member I'm prompted for a username and password. Any valid domain credentials are rejected.
> 
> The log file for the IP address for the computer I'm trying to connect
> from says:
> 
>  [2008/06/17 11:54:54, 1] smbd/sesssetup.c:reply_spnego_kerberos(316)
>    Failed to verify incoming ticket with error NT_STATUS_LOGON_FAILURE!
> 
> log.smbd says:
>  [2008/06/17 11:55:47, 0] auth/auth_util.c:create_builtin_administrators(792)
>    create_builtin_administrators: Failed to create Administrators
>  [2008/06/17 11:55:47, 0] auth/auth_util.c:create_builtin_users(758)
>    create_builtin_users: Failed to create Users
> 
> smb.conf says:
>  [global]
>         workgroup = DOMAIN1
>         realm = DOMAIN1.CO.UK
>         security = ADS
> 
> Samba 3.0.30 on Fedora 8.
> 
> Can anyone tell me where I'm going wrong?
> 

-----------------------------------------
Email sent from www.virginmedia.com/email
Virus-checked using McAfee(R) Software and scanned for spam