Quick Summary:
I am trying to join some Win2k (Service Pack 4) machines to a NT4 style
domain with a Samba PDC. One machine successfully joins the Samba
domain. One fails.
Current configuration:
SambaPDC:
- FreeBSD 4.9-RELEASE
- Samba 2.2.8a (from binary package)
Host1 (Silv):
- Windows 2000 SP4 (5.00.2195)
Host2 (Plaid):
- Windows 2000 SP4 (5.00.2195)
All machines are on the same network switch.
There are no other machines on the switch.
All connections are 100/Full Duplex..
All machines are in the 192.168.x.y subnet
SambaPDC is is running bind9 with a fake zone (.error) for all
machines and forwards all other DNS queries.
All machines use SambaPDC for DNS resolution.
smb.conf:
[global]
workgroup = SAMBAPDC
hosts allow = 192.168.
log file = /var/log/log.%m
log level = 2
max log size = 50000
security = user
encrypt passwords = yes
smb passwd file = /usr/local/private/smbpasswd
domain master = yes
preferred master = yes
domain logons = yes
Each machine has a user account (silv$, plaid$) in the
passwd/master.passwd files. Each machine has an account in the smbpasswd
file, created with 'smbpasswd -a -m [machine name]'. When I add
'silv'
to the domain and reboot, I can log in to the domain. When I add 'plaid'
to the domain and reboot, I cannot log in to the domain. I get the
following error: "The system cannot log you on to the domain because the
system's computer accout in the domain is missing or the password is
incorrect." I should stress that at no point during the process of
adding 'plaid' to the domain did the I get an error on 'plaid'.
On
SambaPDC, in the logfile for plaid, 'log.plaid', I see these two errors:
>[2004/02/14 17:39:11, 2] rpc_parse/parse_samr.c:samr_io_userinfo_ctr(6285)
> samr_io_userinfo_ctr: unknown switch level 0x1a
>[2004/02/14 17:39:11, 0] rpc_server/srv_samr.c:api_samr_set_userinfo(670)
> api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO.
I am at a loss. 'Silv' and 'plaid' should not be acting
differently
here. Can anyone suggest any courses of further investigation?
Thanks,
L.R.Rodriguez
Rod, It sounds to me as if the machine that can not logon has DigitalSign'n'Seal enabled. You must turn this off with Samba-2.x. - John T. On Sat, 14 Feb 2004, L.R.Rodriguez wrote:> Quick Summary: > I am trying to join some Win2k (Service Pack 4) machines to a NT4 style > domain with a Samba PDC. One machine successfully joins the Samba > domain. One fails. > > Current configuration: > SambaPDC: > - FreeBSD 4.9-RELEASE > - Samba 2.2.8a (from binary package) > Host1 (Silv): > - Windows 2000 SP4 (5.00.2195) > Host2 (Plaid): > - Windows 2000 SP4 (5.00.2195) > All machines are on the same network switch. > There are no other machines on the switch. > All connections are 100/Full Duplex.. > All machines are in the 192.168.x.y subnet > SambaPDC is is running bind9 with a fake zone (.error) for all > machines and forwards all other DNS queries. > All machines use SambaPDC for DNS resolution. > > smb.conf: > [global] > workgroup = SAMBAPDC > hosts allow = 192.168. > log file = /var/log/log.%m > log level = 2 > max log size = 50000 > security = user > encrypt passwords = yes > smb passwd file = /usr/local/private/smbpasswd > domain master = yes > preferred master = yes > domain logons = yes > > Each machine has a user account (silv$, plaid$) in the > passwd/master.passwd files. Each machine has an account in the smbpasswd > file, created with 'smbpasswd -a -m [machine name]'. When I add 'silv' > to the domain and reboot, I can log in to the domain. When I add 'plaid' > to the domain and reboot, I cannot log in to the domain. I get the > following error: "The system cannot log you on to the domain because the > system's computer accout in the domain is missing or the password is > incorrect." I should stress that at no point during the process of > adding 'plaid' to the domain did the I get an error on 'plaid'. On > SambaPDC, in the logfile for plaid, 'log.plaid', I see these two errors: > > >[2004/02/14 17:39:11, 2] rpc_parse/parse_samr.c:samr_io_userinfo_ctr(6285) > > samr_io_userinfo_ctr: unknown switch level 0x1a > >[2004/02/14 17:39:11, 0] rpc_server/srv_samr.c:api_samr_set_userinfo(670) > > api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO. > > I am at a loss. 'Silv' and 'plaid' should not be acting differently > here. Can anyone suggest any courses of further investigation? > > > > Thanks, > > L.R.Rodriguez > >-- John H Terpstra Email: jht@samba.org
I'll ask again, since its been a few days.
Quick Summary:
I am trying to join some Win2k (Service Pack 4) machines to a NT4 style
domain with a Samba PDC. One machine successfully joins the Samba
domain. One fails.
Current configuration:
SambaPDC:
- FreeBSD 4.9-RELEASE
- Samba 2.2.8a (from binary package)
Host1 (Silv):
- Windows 2000 SP4 (5.00.2195)
Host2 (Plaid):
- Windows 2000 SP4 (5.00.2195)
All machines are on the same network switch.
There are no other machines on the switch.
All connections are 100/Full Duplex..
All machines are in the 192.168.x.y subnet
SambaPDC is is running bind9 with a fake zone (.error) for all machines
and forwards all other DNS queries.
All machines use SambaPDC for DNS resolution.
Digital Sign'n'Seal is disabled on both client machines.
smb.conf:
[global]
workgroup = SAMBAPDC
hosts allow = 192.168.
log file = /var/log/log.%m
log level = 2
max log size = 50000
security = user
encrypt passwords = yes
smb passwd file = /usr/local/private/smbpasswd
domain master = yes
preferred master = yes
domain logons = yes
Each machine has a user account (silv$, plaid$) in the
passwd/master.passwd files. Each machine has an account in the smbpasswd
file, created with 'smbpasswd -a -m [machine name]'. When I add
'silv'
to the domain and reboot, I can log in to the domain. When I add 'plaid'
to the domain and reboot, I cannot log in to the domain. I get the
following error: "The system cannot log you on to the domain because the
system's computer accout in the domain is missing or the password is
incorrect." I should stress that at no point during the process of
adding 'plaid' to the domain did the I get an error on 'plaid'.
On
SambaPDC, in the logfile for plaid, 'log.plaid', I see these two errors:
>[2004/02/14 17:39:11, 2]
rpc_parse/parse_samr.c:samr_io_userinfo_ctr(6285)
> samr_io_userinfo_ctr: unknown switch level 0x1a
>[2004/02/14 17:39:11, 0] rpc_server/srv_samr.c:api_samr_set_userinfo(670)
> api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO.
I am at a loss. 'Silv' and 'plaid' should not be acting
differently
here. Can anyone suggest any courses of further investigation?
Also, sometimes when I try to log in to 'Silv', it seems to have
developed the same error as 'Plaid'. When I remove and add it back to
the domain, however, it functions properly for while, before screwing up
again.
Thanks,
L.R.Rodriguez