samba - Oct 2002 - Samba PDC and XP Pro Problem. (Not signorseal - fixed that one some time ago)

Hi,

This is a simple query and may well have been answered in the mailing
list archives but my searching can't find an answer to my specific
problem.

My PDC is Samba 2.2.3 on Redhat 7.3, clients are a mix of Win 2k and XP
Pro laptops.

The Win 2k laptops work fine (all service packs applied) and allow any
domain user to log on to any of the 2k laptops. However the XP laptops
if I try logging on as a user other than the normal user for that laptop
then no dice - I get a can not find domain controller error. All the XP
laptops have had the signorseal fix applied, and I'm not using roaming
profiles so that's not the issue (or might be on hindsight... does XP
allow a domain user to log on without a server side profile?)

The PDC configuration is shown below:-
# Samba config file created using SWAT
# from 10.0.0.26 (10.0.0.26)
# Date: 2002/10/09 08:27:32

# Global parameters
[global]
	workgroup = ENGINEERING
	server string = KECRYPT INTERNAL SERVER
	interfaces = eth0 127.0.0.1
	bind interfaces only = Yes
	encrypt passwords = Yes
	passwd program = /usr/bin/passwd %u
	passwd chat = *password* %n\n *password* %n\n *successful*
	username level = 5
	unix password sync = No
	log level = 2
	syslog = 2
	log file = /var/log/samba/log.smbd
	printcap name = lpstat
	domain admin group = @smbadm
	add user script = /usr/sbin/useradd -d /dev/null -g machines -c
'%u machine account' -s /bin/false -M %u
	logon script = scripts\startup.cmd
	logon drive = h:
	logon home = \\%N\%u\xphome
	domain logons = Yes
	os level = 65
	preferred master = True
	domain master = True
	wins support = Yes
	admin users = @smbadm
	printer admin = @smbadm

[homes]
	read only = No
	create mask = 0700
	directory mask = 0700
	browseable = No
	locking = No

[common]
	path = /home/common
	force group = smbusers
	read only = No
	create mask = 0760
	directory mask = 0770

[installer]
	path = /home/install
	force group = smbusers
	read only = No
	create mask = 0760
	directory mask = 0770

[netlogon]
	path = /usr/local/samba/netlogon
	force group = smbusers
	browseable = No

[laserjet]
	comment = HP Laserjet 4050TN
	path = /tmp
	printable = Yes

 --
Richard Horton
KeCrypt Limited (http://www.kecrypt.com),
Tel: +44 (0) 1438 791026
Fax: +44 (0) 1438 791086
Mob: +44 (0) 7789 007785
---
Avast: Outbound message checked to be virus-free
Date and time of the test: 24/10/2002 09:42:46
Virus database (VPS) date: 10/10/2002
Avast! antivirus by Alwil Software

On Thu, 2002-10-24 at 04:42, Richard Horton wrote:
 
> My PDC is Samba 2.2.3 on Redhat 7.3, clients are a mix of Win 2k and XP
> Pro laptops.
there are some bugs in 2.2.3 that were fixed in subsequent releases
2.2.6 looks to be very good  - maybe worth upgrading (probably won't fix
your problem though)
 
> However the XP laptops
> if I try logging on as a user other than the normal user for that laptop
> then no dice - I get a can not find domain controller error. All the XP
> laptops have had the signorseal fix applied, and I'm not using roaming
> profiles so that's not the issue (or might be on hindsight... does XP
> allow a domain user to log on without a server side profile?)
yes it does
does the other user actually have an account on the domain?
are you sure that the "normal user" is actually logging into the
domain?
(ie that user is not in the local password database)

that's the only thing i can think of that might be your problem.
> 	log file = /var/log/samba/log.smbd
try making this 
log file = /var/log/samba/log.smbd.%m
and show what happens when the machine in question fails to log in.
> 	logon home = \\%N\%u\xphome
this share seems to be missing - probably not a problem since you're not
using roaming profiles...
 
> [netlogon]
> 	path = /usr/local/samba/netlogon
> 	force group = smbusers
> 	browseable = No
this looks a little suspicious to me...
are you sure that your new user has permission on this share?