Hi I'm trying to use samba 2.2.2 under RH 7.0 as a PDC. It's no problem joining the domain but when I reboot my w2k (sp2) station and trying to logon to the domain I get this message: "The system cannot log you on to this domain because the systems computer account in it's primary domain is missing or the password on that account is incorrect" Entry in /etc/passwd: w2kws1$:x:556:556:Machine:/dev/null:/bin/false Entry in /etc/samba/smbpasswd: w2kws1$:542:BBCA0958D1A52181AAD3B435B51404EE:7AD455162B4AD989BDE4D7188C0823AC:[U ]:LCT-3C61A7CA: My global section in smb.conf below. Any suggestions? Regards // Tomas Spangberg #======================= Global Settings ============================== [global] netbios name = JML2 workgroup = JALLE server string = Jarl Magnussons Linux Server hosts allow = 192.168.1. 127. printcap name = /etc/printcap load printers = yes guest account = pcguest log file = /var/log/samba/log.%m max log size = 0 security = user encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd unix password sync = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n *passwd:*all*authentication*tokens*updated*successfully* socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 remote announce = 192.168.1.255 local master = yes os level = 64 domain master = yes domain admin group = tomas preferred master = yes domain logons = yes name resolve order = wins lmhosts bcast wins support = yes dns proxy = no printer admin = tomas add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u #============================ Share Definitions ======================= -------------- next part -------------- HTML attachment scrubbed and removed
Hi, It seems I had the same problem as you. I try to authenticate my users using an external PAM module, so I get to set EncryptPassword = no to activate it. When I try to login from Linux console using smbclient it works, when I try to map a drive from windows workstation (using net use ... ... /user:xxx) it works, when I join the domain it works, but when I try to login into the domain I'm not allowed and it seems that samba doesn't try to use PAM to authenticate. Is there any special cas with High Encryption Pack (128bits), SP1 on w2k and domain logon? I'm still looking for an explaination. I'm using samba 2.2.3 on RH 7.1, w2k SP1 (with High Encryption Pack 128bits). cu
--On Monday, February 11, 2002 09:58 +0100 Tomas Sp?ngberg <tomas.spangberg@jarlmagnussonab.se> wrote:> "The system cannot log you on to this domain because the systems computer > account in it's primary domain is missing or the password on that account > is incorrect" > > Entry in /etc/samba/smbpasswd: > > w2kws1$:542:BBCA0958D1A52181AAD3B435B51404EE:7AD455162B4AD989BDE4D7188C08 > 23AC:[U ]:LCT-3C61A7CA:When you added the machine account, what _exact_ command line did you execute? You should have done this: smbpasswd -a -m w2kws1 NOT this: smbpasswd -a w2kws1$ The -m switch tells Samba this is a _machine_ account, and automagically adds the "$" character for you. Is that it? - John