I'm already searching a whole week for a solution to this problem.
I want Samba and LDAP and then win2k has to join on the domain. This is
going ok. The entry is made in LDAP:
# nbmatthijs$, Computers, cacholong.nl
dn: uid=nbmatthijs$,ou=Computers,dc=cacholong,dc=nl
objectClass: top
objectClass: inetOrgPerson
objectClass: posixAccount
objectClass: sambaSamAccount
cn: nbmatthijs$
sn: nbmatthijs$
uid: nbmatthijs$
uidNumber: 1021
gidNumber: 553
homeDirectory: /dev/null
loginShell: /bin/false
description: Computer
sambaSID: S-1-5-21-...-3042
sambaPrimaryGroupSID: S-1-5-21-...-553
displayName: nbmatthijs$
sambaPwdCanChange: 1077297685
sambaPwdMustChange: 2147483647
sambaLMPassword: A Very long string
sambaNTPassword: A Very long string
sambaPwdLastSet: 1077297685
sambaAcctFlags: [W ]
When i then try to login i get the failure:
(Win2k SP4)
The system could not log you on. Make sure your User name and domain are
correct, then type your password again. Letters in passwords must be
typed using the correct case. Make sure that Caps Lock is not accidently
on.
And no my Caps Lock isn't on!!
(Samba)
check_ntlm_password: authentication for user [matthijs] -> [matthijs]
-> [matthijs] succeeded
This is my smb.conf:
[global]
workgroup = CACHOLONG
server string = %h server (Samba %v)
interfaces = eth0
passdb backend = ldapsam:ldap://server.cacholong.nl
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n .
log level = 10
syslog = 0
log file = /var/log/samba/log.%m
max log size = 1000
client signing = No
add user script /root/cacholong/smbldap-tools/smbldap-useradd.pl -a %u
add machine script /root/cacholong/smbldap-tools/smbldap-useradd.pl -w
%u
domain logons = Yes
os level = 255
preferred master = Yes
domain master = Yes
wins support = Yes
ldap suffix = dc=cacholong,dc=nl
ldap machine suffix = ou=Users
ldap user suffix = cn=Users
ldap group suffix = ou=Groups
ldap admin dn = uid=ldapadm,dc=cacholong,dc=nl
ldap ssl = no
panic action = /usr/share/samba/panic-action %d
admin users = ldapadm
printer admin = ldapadm
create mask = 0644
printing = lprng
[homes]
comment = Home Directories
create mask = 0700
directory mask = 0700
browseable = No
[netlogon]
comment = Network Logon Service
path = /etc/samba/netlogon
write list = ntadmin
guest ok = Yes
browseable = No
share modes = No
[profiles]
path = /home/nt-profiles
read only = No
create mask = 0600
directory mask = 0700
If someone of you know how to solve this problem i'm very appreciated.
