samba - Mar 2002 - join 2000 box to domain - troubles

Hello,
I am trying to join a 2000 box to my domain.  I go through the steps and
it tells me "Logon Failure:".  I am guessing that if it got to this
point, that a machine account exists and everything is good there....

I am using 'administrator' as the user.  This user is part of the group
'Domain Admins'.  In my smb.conf I have this set:
domain admin group = @"Domain Admins"

I am guessing that either the password for 'administrator' is somehow
goofed in my ldap server or samba can't tell if administrator is part of
the right group(s).  I turned on some debugging and didnt get out any
useful information.

After looking at the logs I think that the auth piece is working
correctly because:
[2002/03/11 17:08:09, 4] smbd/password.c:smb_password_ok(467)
  smb_password_ok: Checking SMB password for user administrator
[2002/03/11 17:08:09, 5] smbd/password.c:smb_password_ok(481)
  smb_password_ok: challenge received
[2002/03/11 17:08:09, 4] smbd/password.c:smb_password_ok(491)
  smb_password_ok: Checking NT MD4 password
[2002/03/11 17:08:09, 4] smbd/password.c:smb_password_ok(493)
  smb_password_ok: NT MD4 password check succeeded

The one thing that I find different but don't know what it means is:

[2002/03/11 17:08:09, 7] param/loadparm.c:lp_servicenumber(3509)
  lp_servicenumber: couldn't find administrator

I am going to hit the source and see what that means.  Can someone clue
me into what else to check here?

Thank you!

-- 
Terry Davis
http://approbation.org/

> Message: 4
> From: Terry Davis <tdavis@approbation.org>
> To: samba@lists.samba.org
> Date: 11 Mar 2002 17:33:51 -0600
> Subject: [Samba] join 2000 box to domain - troubles
> 
> Hello,
> I am trying to join a 2000 box to my domain.  I go through the steps and
> it tells me "Logon Failure:".  I am guessing that if it got to
this
> point, that a machine account exists and everything is good there....
Where does it fail and give you the "Logon Failure message? Better than 
guessing would be to do an ldapsearch for the machine account, and see 
whether it has uid, rid and {lm,nt}password or whatever the attributes 
are. I suspect it hasn't got that far, because ...
> 
> I am using 'administrator' as the user.  This user is part of the
group
> 'Domain Admins'.  In my smb.conf I have this set:
> domain admin group = @"Domain Admins"
> 
You have to use "root", you cannot use any other user (until 3.0.0 I 
believe). That of course means root needs an smbpasswd.
> I am guessing that either the password for 'administrator' is
somehow
> goofed in my ldap server or samba can't tell if administrator is part
of
> the right group(s).  I turned on some debugging and didnt get out any
> useful information.
> 
> 

-- 
|----------------Registered Linux User #182071-----------------|
Buchan Milne                Mechanical Engineer, Network Manager
Cellphone * Work            +27 82 472 2231 * +27 21 8828820x202
Stellenbosch Automotive Engineering         http://www.cae.co.za
GPG Key                       http://ranger.dnsalias.com/gpg.key