Dominic Iadicicco
2003-Jul-23 12:28 UTC
Fwd: Re: [Samba] Probs joining Samba PDC with WinXP
If you go here, this doc will tell you how to join a winXP Pro machine to a samba domain. http://hr.uoregon.edu/davidrl/samba/samba-pdc.html#JOINDOMAIN Hope that helps.... Dominic Iadicicco --- Patrick Flohr <Flohr.P@t-online.de> wrote:> Date: Wed, 23 Jul 2003 13:43:48 +0200 > From: Flohr.P@t-online.de (Patrick Flohr) > To: samba@lists.samba.org > Subject: Re: [Samba] Probs joining Samba PDC with > WinXP > > some little success :-), > > using the administrator accout generates a machine > accout in smbpasswd > (without a password) > and xp returned access denied (i think because of > the missing pw). > > I won't bother you, but maybe you got one more hint? > thx > > > Marian Mlcoch, Ing wrote: > > >Try last create another admin user for samba no > root. > >useradd administrator (this create user and > group administrator i mean) > >smbpasswd -a administrator > > > >in conf change > >domain admin group = administrator @administrator > > > >This try first: > >remove admin users = root from global section this > is service parameter! > > > >Go... > > > >----- Original Message ----- > >From: "Patrick Flohr" <Flohr.P@t-online.de> > >To: <samba@lists.samba.org> > >Sent: Wednesday, July 23, 2003 12:22 PM > >Subject: Re: [Samba] Probs joining Samba PDC with > WinXP > > > > > > > > > >>Hi, > >>i added the line to my conf, but still unable to > login as root (except > >>swat). > >>Had a look at the docs but found nothing new. > >>i also tried the following add user script: > >>/usr/sbin/useradd -d /dev/null -g workstations -s > /bin/false -M %u > >> > >>cu > >>Patrick > >> > >> > >>Marian Mlcoch, Ing wrote: > >> > >> > >> > >>>Add to your conf > >>>domain admin group = root > >>> > >>>if u use swat try read this and check add user > script: > >>>http://ipofsamba:901/swat/help/Samba-PDC-HOWTO.html > >>> > >>>Bye. > >>> > >>>----- Original Message ----- > >>>From: "Patrick Flohr" <Flohr.P@t-online.de> > >>>To: <samba@lists.samba.org> > >>>Sent: Wednesday, July 23, 2003 11:21 AM > >>>Subject: Re: [Samba] Probs joining Samba PDC with > WinXP > >>> > >>> > >>> > >>> > >>> > >>> > >>>>Marian Mlcoch, Ing wrote: > >>>> > >>>> > >>>> > >>>> > >>>> > >>>>>Try add user root to smbpasswd and remove > manual created machine > >>>>> > >>>>> > >acounts. > > > > > >>>>>When join to domain dialog XP apear you use > root and root smbpass to > >>>>> > >>>>> > >join > > > > > >>>>>machine or any admin user listed in admin user > smb.conf. > >>>>>Machine acc will be createxd automatic.Bye. > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>I tried and faild, XP give me the error "unknown > user or invalid > >>>>password" (as before, try to join the domain); > >>>>logs on the samba box ==> no workstation account > in the domain. > >>>>It seems like a problem with the root accout > because i can login to the > >>>>shares with every normal user account. > >>>>Since updating the smb.conf it takes a few > minutes to log out from xp. > >>>> > >>>>bye > >>>> > >>>> > >>>> > >>>> > >>>> > >>>>>----- Original Message ----- > >>>>>From: "Patrick Flohr" <Flohr.P@t-online.de> > >>>>>To: <samba@lists.samba.org> > >>>>>Sent: Wednesday, July 23, 2003 10:12 AM > >>>>>Subject: Re: [Samba] Probs joining Samba PDC > with WinXP > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>>>Thx for checking the conf, i made the > following changes: > >>>>>>update encrypted = no > >>>>>>security = user > >>>>>> > >>>>>>after restarting samba i tried again to join > the domain with the same > >>>>>>result as describben below. > >>>>>>Browsing the domain and accessing the shares > is and was allwasy > >>>>>> > >>>>>> > >possible > > > > > >>>>>>by giving user/pw except root. > >>>>>>any clues? > >>>>>> > >>>>>>Marian Mlcoch, Ing wrote: > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>>>In your conf is error by doc is writed update > encrypted (G) > >>>>>>>This boolean parameter allows a user logging > on with a plaintext > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>password > >>> > >>> > >>> > >>> > >>>>>>> > >>>>>>> > >>>>>to > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>>>>have their encrypted (hashed) password in the > smbpasswd file to be > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>updated > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>>>>automatically as they log on. This option > allows a site to migrate > >>>>>>> > >>>>>>> > >from > > > > > >>>>>>>plaintext password authentication (users > authenticate with plaintext > >>>>>>>password over the wire, and are checked > against a UNIX account > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>database) > >>> > >>> > >>> > >>> > >>>>>>> > >>>>>>> > >>>>>to > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>>>>encrypted password authentication (the SMB > challenge/response > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>authentication > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>>>>mechanism) without forcing all users to > re-enter their passwords via > >>>>>>>smbpasswd at the time the change is made. > This is a convenience > >>>>>>> > >>>>>>> > >option > > > > > >>>>>>> > >>>>>>> > >>>to > >>> > >>> > >>> > >>> > >>>>>>>allow the change over to encrypted passwords > to be made over a longer > >>>>>>>period. Once all users have encrypted > representations of their > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>passwords > >>> > >>> > >>> > >>> > >>>>>>> > >>>>>>> > >>>>>in > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>>>>the smbpasswd file this parameter should be > set to no. > >>>>>>> > >>>>>>>!!!! In order for this parameter to work > correctly the encrypt > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>passwords > >>> > >>> > >>> > >>> > >>>>>>>parameter must be set to no !!!! when this > parameter is set to yes. > >>>>>>> > >>>>>>>Note that even when this parameter is set a > user authenticating to > >>>>>>> > >>>>>>> > >smbd > > > > > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>must > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>>>>still enter a valid password in order to > connect correctly, and to > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>update > >>> > >>> > >>> > >>> > >>>>>>>their hashed (smbpasswd) passwords. > >>>>>>> > >>>>>>>Default: update encrypted = no > >>>>>>> > >>>>>>>Second in your conf not explicit set security > mode to user best is > >>>>>>> > >>>>>>> > >set > > > > > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>it. > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>>>>Try on xp not join domain and only test as > clasic client first. Login > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>as > >>> > >>> > >>> > >>> > >>>>>>>user exist on samba with identic pass and try > view and use shares on > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>it. > >>> > >>> > >>> > >>> > >>>>>>>Bye. > >>>>>>> > >>>>>>>----- Original Message ----- > >>>>>>>From: "Patrick Flohr" <Flohr.P@t-online.de> > >>>>>>>To: <samba@lists.samba.org> > >>>>>>>Sent: Wednesday, July 23, 2003 9:17 AM > >>>>>>>Subject: Re: [Samba] Probs joining Samba PDC > with WinXP > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>>>Marian Mlcoch, Ing wrote: > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>>>Have you normal user in smbpasswd file? > >>>>>>>>> > >>>>>>>>>This two commands must be executed for each > user... > >>>>>>>>>useradd user > >>>>>>>>>smbpasswd -a user > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>I have normal users in smbpasswd, some with > the same user/pw like on > >>>>>>>> > >>>>>>>> > > > > > > > >>>>>>>> > >>>>>>>> > >>>the > >>> > >>> > >>> > >>> > >>>>>>>>xp-client. > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>>>What is your smb.conf? > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>snip > >>>>>>>>-------------------------------------- > >>>>>>>># Global parameters > >>>>>>>>[global] > >>>>>>>> workgroup = MEINS > >>>>>>>> server string = %h server (Samba %v) > >>>>>>>> encrypt passwords = Yes > >>>>>>>> update encrypted = Yes > >>>>>>>> passwd program = /usr/bin/passwd %u > >>>>>>>> passwd chat > *Enter\snew\sUNIX\spassword:* %n\n > >>>>>>>>*Retype\snew\sUNIX\spassword:* %n\n . > >>>>>>>> syslog = 0 > >>>>>>>> log file = /var/log/samba/log.%m > >>>>>>>> max log size = 1000 > >>>>>>>> add user script = /usr/sbin/adduser > --force-badname --firstuid > >>>>>>>>1005 --gid 900 --disabled-login > --no-create-home --quie > >>>>>>>>t --gecos GECOS -M %u > >>>>>>>> logon path = \\%L\profiles\%U > >>>>>>>> logon drive = f: > >>>>>>>> logon home = \\%L\%U\.profile > >>>>>>>> domain logons = Yes > >>>>>>>> os level = 64 > >>>>>>>> preferred master = True > >>>>>>>> domain master = True > >>>>>>>> dns proxy = No > >>>>>>>> wins support = Yes > >>>>>>>> admin users = root > >>>>>>>> hosts allow = 192.168.10., 127.0.0.1 > >>>>>>>>---------------------------------------- > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>>>Bye. > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>>----- Original Message ----- > >>>>>>>>>From: "Patrick Flohr" <Flohr.P@t-online.de> > >>>>>>>>>To: <samba@lists.samba.org> > >>>>>>>>>Sent: Wednesday, July 23, 2003 8:43 AM > >>>>>>>>>Subject: [Samba] Probs joining Samba PDC > with WinXP > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>>>Hello, > >>>>>>>>>> > >>>>>>>>>>I'm using Debian 3.0 with Samba 2.2.8a-1.0 > when i try to join my > >>>>>>>>>>xp-mashine (xp-pro with sighnorseal patch) > to the domain using the > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>root > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>>>>>>>accout > >>>>>>>>>>i get the error: "unknown user or invalid > password", but when i > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>connect > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>>>>>>>via swat everything works fine. > >>>>>>>>>> > >>>>>>>>>>i added a mashineaccount to passwd and > smbpasswd, trying to join > >>>>>>>>>> > >>>>>>>>>> > >the > > > > > >>>>>>>>>>xp-mashine via a normal user accout fails > with > >>>>>>>>>>"access denied", the following lines are > taken from the log file: > >>>>>>>>>> > >>>>>>>>>>[2003/07/23 03:22:22, 0] > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>rpc_server/srv_samr.c:api_samr_set_userinfo(670) > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>>>>>api_samr_set_userinfo: Unable to > unmarshall SAMR_Q_SET_USERINFO. > >>>>>>>>>>[2003/07/23 03:22:22, 0] > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>passdb/pdb_smbpasswd.c:pdb_getsampwrid(1418) > >>> > >>> > >>> > >>> > >>>>>>>>>>unable to open passdb database. > >>>>>>>>>> > >>>>>>>>>>using the root accout, nothing is loged. > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>>I hope somebody can help, i try for days. > >>>>>>>>>>Thanks in advance > >>>>>>>>>> > >>>>>>>>>>Patrick Flohr > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>>-- > >>>>>>>>>>To unsubscribe from this list go to the > following URL and read the > >>>>>>>>>>instructions: > http://lists.samba.org/mailman/listinfo/samba > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>> > >>>>>>>>-- > >>>>>>>>To unsubscribe from this list go to the > following URL and read the > >>>>>>>>instructions: > http://lists.samba.org/mailman/listinfo/samba > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>>> > >>>>>>> > >>>>>>> > >>>>>>> > >>>>>>-- > >>>>>>To unsubscribe from this list go to the > following URL and read the > >>>>>>instructions: > http://lists.samba.org/mailman/listinfo/samba > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>>> > >>>>> > >>>>> > >>>>> > >>>>> > >>>>-- > >>>>To unsubscribe from this list go to the > following URL and read the > >>>>instructions: > http://lists.samba.org/mailman/listinfo/samba > >>>> > >>>> > >>>> > >>>> > >>> > >>> > >>> > >>> > >> > >>-- > >>To unsubscribe from this list go to the following > URL and read the > >>instructions: > http://lists.samba.org/mailman/listinfo/samba > >> > >> > > > > > > > > > -- > To unsubscribe from this list go to the following > URL and read the > instructions:http://lists.samba.org/mailman/listinfo/samba __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com