Hello Everyone,
Situation:
I have been testing Samba-3.07 for its NT4 domain functionality so that
I can migrate from Samba-2.2. I had setup the Samba domain and
everything was working quite well. I had initially been working with a
domain called "TEST". Now that I am finished with my initial testing,
I
wanted to rename the domain to something I would be able to keep. After
changing "workgroup = test" to "workgroup = interact", many
problems
followed.
Obviously doing this causes problems with the SID, and any machine
accounts that are attached to this domain. I have since removed all
system accounts, but I can not log in to the domain. When trying to add
a machine to the domain, everything seems to be working. The machine
account gets added to the passwd file and the smbpasswd file, and the
workstation reports that it joined the domain successfully. After a
reboot, when trying to log in, I get the error "The system cannot log
you on to this domain because the system's computer account in its
primary domain is missing or the password on that account is correct".
I have monitored what happens when the workstation adds itself to the
domain, and the machine account is getting added at that time.
Do I have a problem with my SID? I don't have an existing SID that i
care about, so if I want to reset the SID to something else ... what
should I set it to?
System Info:
FreeBSD-4.9 using NIS
Samba-3.0.7 (from source, not ports)
smb.conf
[global]
# Main Server Options
netbios name = zeus
workgroup = interact
domain master = yes
local master = yes
preferred master = yes
os level = 240
dns proxy = no
security = user
passdb backend = smbpasswd root = administrator restrict
anonymous = 2
domain logons = yes
logon path = \\%L\profiles\%U
logon script = %U.bat
logon drive = U:
root preexec = /usr/local/scripts/genlogon.pl %U %G %L
# Script Options
passwd program = /usr/bin/passwd %u
passwd chat = *New*password*%n\n*Retype*New*Password*%n\n
add user script = /usr/sbin/pw useradd %u -c %u -d /u1/%u -g 200 -m -w
no -s /bin/date -Y add group script = /usr/sbin/pw groupadd %g -Y
add machine script = /usr/sbin/pw useradd %u -c workstation -d
/dev/null -g 150 -s /bin/false -Y
delete group script = /usr/sbin/pw groupdel %g -Y
# TODO add wrapper to remove nis & samba passwd
; delete user script = /usr/sbin/pw userdel %u -Y
; delete user script = /usr/local/samba/sbin/smbpasswd -x %u
; add user to group script?
; delete user from group script?
server string = Zeus - PDC
interfaces = 10.10.8.28
hosts allow = 127. 10.10.8.
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
log file = /var/log/samba/log.%m
max log size = 50
time server = yes
load printers = no
; printcap name = /etc/printcap
; printing = cups
#============================ Share Definitions
=============================
[netlogon]
path = /STORAGE/netlogon
writable = no
browsable = no
write list = @domainadmin @wheel
[profiles]
path = /STORAGE/ntprofiles
read only = no
browseable = no
create mask = 0600
directory mask = 0700
Any help would be greatly appreciated.
--
Zack Lawson
Network Administrator @ Inter@ctivate, Inc.
www.interactivate.com
