samba - Dec 1997 - Samba18alpha12 not working as Login for NT-4 workstation

On 13 Dec 1997, Domenic Wollina wrote:
> Hio
> 
> I have a problem to get samba18alpha12 to work as an nt domain login server
for
> nt-4 workstations
there are bugs in it.  you'd be better off using the BRANCH_NTDOM version.
see the public cvs instructions in http://samba.anu.edu.au/cvs.html and
use a tag of BRANCH_NTDOM.

if you do this, the workstation trust account smbpasswd entries must be of
the format: 

saturn1$:65534:lm_hash:nt_hash:0080:

the 0080 is important: see ntdomain.h ACB_xxxx #defines for the reason.

 
> First here ist what I did:
> 
> 1) Compiled Samba with -DNTDOMAIN
ok.
>    (Win 95 clients can login)
(-DNTDOMAIN doesn't have anything to do with Win95)
> 
> 2) Here is my smb conf file
>
--------------------------------------------------------------------------------
> ;======================= Global Settings
====================================> [global]
> 
> ; workgroup = NT-Domain-Name or Workgroup-Name, eg: REDHAT4
>    workgroup = hello
>    domain sid = S-1-5-21-123-456-789-123
>    encrypt passwords = yes
looks fine.
 
> ; Domain Master specifies Samba to be the Domain Master Browser
> ;       Only ever set this if there is NO Windows NT Domain Controller on
the
> ;       network
>    domain master = yes
yep.
> ; Domain logon control can be a good thing! See [netlogon] share section
below!
> ;       Do NOT set this to yes if there is an Windows NT domain controller
> ;       on the network
>    domain logons = yes
yep.
> ;============================ Share Definitions
=============================> [homes]
>    comment = Home Directories
>    browseable = no
>    writable = yes
cool.
> ; Un-comment the following and create the netlogon directory for Domain
Logons
>  [netlogon]
>    comment = Samba Network Logon Service
>    path = /usr/local/samba/lib/netlogon
>    writeable = no
>    guest ok = yes
general important rule here for the netlogon share - do this:

guest ok = no
locking = no
> 3)
> I had a problem to create the smbpasswd entry because i dont know how this
has
> to be so I added for the NT-Workstation called "saturn1" to
smbpasswdfile:
> 
> saturn1:0:saturn1:
> I hope this was ok !!
almost right: it needs to be saturn1$ not saturn1 (it's a trust account).

so, see the format above.  i'll update docs/NTDOMAIN.txt in BRANCH_NTDOM.

 
> 4)
> On the Nt maschine (no service pack installed) 
> I tried to change the setting from workgroup to domain and i recieved the 
> error: Can't find Domain controller for Domain "hello"
hm.  this isn't right: you should at least be able to find it (but not
join it, because of the bugs in the 1.9.18alpha version :-).

can you browse a share on saturn (don't do Start | File | Run | \\saturn1,
do Start | File | Run | \\saturn1\homes)? 

if you can't, fix this first (standard procedure that has nothing to do
with -DNTDOMAIN).
> Can someone help me !!
what with? :-)

best regards,

luke (samba team member)


<a href="mailto:lkcl@samba.anu.edu.au" > Luke Kenneth Casson
Leighton  </a>
<a href="http://mailhost.cb1.com/~lkcl"> Samba Consultancy and
Support </a>