Hi All, I have a setup using tdbsam as a backend, I can add accounts using pdbedit -a <username> but I have only been able to add one machine account. I can't figure out why. # pdbedit -a -m test tdb_update_sam: SAM_ACCOUNT (test$) with no RID! Unable to add machine! (does it already exist?) I have verified that there is no entry in /etc/passwd or /etc/shadow for the machine name I am trying to add. I have completely removed passdb.tdb and secrets.tdb and started over but still have the same issue. Here is the global section of my smb.conf, of which I based upon the examples found at http://us3.samba.org/samba/docs/man/Samba-Guide/secure.html#id2520426 [global] netbios name = styler workgroup = TESTDOMAIN interfaces = eth0 bind interfaces only = yes passdb backend = tdbsam pam password change = yes passwd chat = *New*Password* %n\n *Re-enter*new*password* %n\n *Password*changed* username map = /etc/samba/smbusers unix password sync = yes encrypt passwords = yes log level = 1 syslog = 0 log file = /var/log/samba/%m max log size = 50 smb ports = 139 445 name resolve order = wins bcast hosts time server = yes printcap name = CUPS show add printer wizard = No add user script = /usr/sbin/useradd -m %u delete user script = /usr/sbin/userdel -r %u add group script = /usr/sbin/groupadd %g delete group script = /usr/sbin/groupdel %g add user to group script = /usr/sbin/usermod -G %g %u add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null %u logon path = \\%L\profiles\%U logon drive = H: logon home = \\%L\%U\winprofile logon script = scripts/logon.bat os level = 35 domain master = yes local master = yes security = user domain logons = yes preferred master = yes wins support = yes utmp = yes map acl inherit = yes printing = cups veto files = /*.eml/*.nws/*.{*}/ veto oplock files = /*.doc/*.xls/*.mdb/
On Thu, 2004-08-12 at 02:13, Andreas Ntaflos wrote:> On Wed, Aug 11, 2004 at 03:43:47PM -0500, Steve Tyler wrote: > > > > I have a setup using tdbsam as a backend, I can add accounts using > > pdbedit -a <username> but I have only been able to add one machine > > account. I can't figure out why....> Shouldn't the machine name DO exist in /etc/passwd? I usually do the > following (taken from the official howto collection): > > # useradd -g machines -d /dev/null -c "machine nickname" -s /bin/false machine_name$ > # passwd -l machine_name$ > # pdbedit -a -m machine_name (no `$' this time) > > (the group machines is created beforehand) and if pdbedit doesn't do it > then you could still use smbpasswd, it seems to work with tdbsam as well. > > # smbpasswd -a -m machine_name > > HTHThanks for the suggestion, I did already try this. I tried again: Unable to modify TDB passwd ! Error: Record exists occured while storing the RID index (RID_00000bbe) Unable to add machine! (does it already exist?)