mearl@1earth.net
2003-Nov-24 00:12 UTC
[Samba] Samba as domain member - cannot fetch trust account password
I had a machine account created in the NT domain and successfully joined the domain by running "net join MEMBER -S <PDC>". The timestamp of the secrets.tdb changed. I got the "Joined domain MYDOMAIN" response. I think there may have been some conversion to active directory but still running NT domains. When I attempt to run from Solaris "./smbclient //myhost/tmp" or from Windows 2000 "net view \\myhost" I get an error "NT_STATUS_LOGON_FAILURE" and the debug indicates: [2003/11/24 10:08:19, 0] smbd/password.c:(1558) domain_client_validate: could not fetch trust account password for domain MYDOMAIN When I add myself to "smbpasswd" both commands are successful but of course the debug still indicates a problem with the shared secret. I previously saw this exact same behaviour and thought it may have been a problem in joining the domain as I had an old PDC in my smb.conf when I joined the domain. So I asked for the machine account to be deleted and re-created. I upgraded from 2.2.8a to 3.0.0 too just in case. I can find nothing in the documentation to explain what has happened here and I've checked and double-checked my configuration. I would really appreciate if someone could give me a clue as to what conditions could cause this behaviour.
Reasonably Related Threads
- security=domain problem: "could not fetch trust account password for domain"
- joined domain but error fetching trust account password
- samba could not fetch trust account password for domain
- Odd Samba 4 ("4.2.0pre1-GIT-b505111"; actually only using client) behaviour #1 - "Could not fetch trust account password for domain ...".
- users cannot change their passwords in domain