samba - Nov 2003 - problem authenticating win xp machine

Hi folks :-)

I'm just installing a fresh new samba server, and trying to authenticate
some win xp machines. The config is more or less like this :

* Windows XP SP1 with all security upgrades
* Samba 3.0.0final-1 running on debian testing

I'm more or less following this howto :
http://hr.uoregon.edu/davidrl/samba.html#winxp

I'm using this smb.conf file :

--8<-------
[global]
        log level = 2
        workgroup = DOMAULA
        netbios name = SERVIDOR
        server string = Samba Server %v
        security = USER
        log file = /var/log/samba/log.%m
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        printcap name = lpstat
        dns proxy = No

        wins support = yes
        domain logons = yes
        encrypt passwords = yes
        logon script = scripts\%U.bat

        domain admin group = @adm
        guest account = ftp
        share modes = no

        os level = 64
        preferred master = yes
        domain master = yes
        local master = yes

        logon home = \\%L\%U\winprofile

[homes]
        comment = Home Directories
        writeable = Yes
        browseable = No
        guest ok = No
        read only = no
        create mask = 0600
        directory mask = 0700
        oplocks = false
        locking = no

[netlogon]
path = /home/netlogon
writeable = no
read only = yes
guest ok = no
--8<-------

When I try to join the domain (using the "root" account), Windows
shows the
welcome message. But when I actually try to logon I get this error:
(inaccurate translation, I get this in spanish ;-) )


"Windows cannot login to the domain because domain controler is blocked or
unavailable, or because the account could not be found. Please retry later.
If this message keeps poping, please contact your system administrator"

and this in my log files :

[2003/11/12 12:41:25, 1] auth/auth_util.c:make_server_info_sam(818)
  User ftp in passdb, but getpwnam() fails!
[2003/11/12 12:41:25, 2] auth/auth.c:check_ntlm_password(309)
  check_ntlm_password:  Authentication for user [] -> [] FAILED with error
NT_STATUS_NO_SUCH_USER
[2003/11/12 12:41:25, 2] smbd/server.c:exit_server(558)
  Closing connections

Which seems rather strange, since I'm using a login name ("alumno"
- pupil)
that both exists as a linux user and samba user. the user previously existed
as winxp user, and only allows login when doing local login, not domain
login.

Any clues on this? :-))

tnx!



-- 
Window$ Macht Frei!

On Wed, 12 Nov 2003 15:08:07 +0200
Bart Bekker wrote:
> Sounds like a typical misstake; did you apply the signorseal patch in 
> the windows xp registry?
> 
> from the how-to I quote:
> 
> To join a Samba Domain, you will need to first make the following 
> changes to your registry and reboot:
> 
>     [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parame
>     ters]
> 
>     "requiresignorseal"=dword:00000000
>     "signsecurechannel"=dword:00000000
yep, already did this... :-)

I am successfully welcome on the domain when I change form workgroup
(previous setting) to the domain Domaula (using the root account).

The odd thing is I get this error :

[2003/11/12 12:41:25, 2] auth/auth.c:check_ntlm_password(309)
  check_ntlm_password:  Authentication for user [] -> [] FAILED with error
NT_STATUS_NO_SUCH_USER

there should be an user name on "Authentication for user [FOO]",
shouldn't
it? :-)



(Bart, watch out that you answered me directly, and did not include the
samba list :-) tnx! )



-- 
Window$ Macht Frei!