samba - Mar 2003 - Windows 2000 Pro can't join the Samba PDC

Hi all

At first i'm using wizard in swat page to create samba
as a pdc for my win 2000 pro client, and i follow the
instruction in howto-collection.pdf. The doc file say
that there are 2 ways of client join the domain.
1. "manually" add the trust machine account in the pdc
2. "on the fly" with adding command 'useradd' in the
global parameter 'add user scripts'

The first technique works fine, but i feel 'on the
fly' technique is more efficient because we dont have
to add machine account every time a client want to
join a domain. The value for add user scripts would be
like this according to the doc book :

/usr/sbin/useradd -g 100 -d /dev/null -s /bin/false -M
%u

When i try this i notice that %u, which is the
variabel for user name account will just add the user
account that i fill in win 2000 dialog box into my
linux box and still the client can't join to domain. 
So i change the script with the variabel %m which is
netbios name/machine name of the client, and i also
add  some command that used in 'manual' technique, the
script look like this :

/usr/sbin/useradd -g 100 -d /dev/null -s /bin/false -M
%m && passwd -l %m && smbpasswd -a -m %m

but still the client can't join to domain, I look at
my linux box and i find that the smbpasswd command
can't take the value of machine name without "$"
string in the last character. I guess that will be the
smbpasswd bug or somethings else, i can't find the
reason why we must create the account machine with the
"$" string in the last character, I see that win 2000
client didn't send the value of their name with that
strings.

Is there any other way for a client (especially Win
2000 pro) to join automatically to samba pdc?
TIA

-ardi-


__________________________________________________
Do you Yahoo!?
Yahoo! Web Hosting - establish your business online
http://webhosting.yahoo.com

>> 2. "on the fly" 
Hi,

1) Make a back up of your smb.conf.
2) add the line somewhere up top after your domain
def;

add user script = /usr/sbin/useradd -n -d /dev/null -g
100 -c %m -p %m -s /bin/false -M %u

** The 100 is your GIU # and can be anything ypou
choose as long as you are consistant in /etc/passwd
and /etc/group.

This should solve your probs.
> why we must create the account machine with the "$"
The machine must establish a trust with a PDC so this
method allows you to do so.

In general, there is a certain degree of security
implied when you establish a trust within some
directory shceme relating to networked machines.  
As for XP clinets, you must modify the registry (do a
search for XP reg hacks in google).

Bri-

__________________________________________________
Do you Yahoo!?
Yahoo! Web Hosting - establish your business online
http://webhosting.yahoo.com