samba - Dec 2004 - Re: Your computer account was not found or the password was incorrect

Hey guys,

I'm trying to migrate my NT4 Domain and am having some problems. 
Ignoring my other post related to this, I can't get any of my machines 
to be able to login. Alls I ever get is

"Your computer account was not found or the password is incorrect"

I even tried rejoining the domain which works. I leave the domain and 
then rejoin it, it takes a LONG time (might just be cause I'm testing 
this on my old laptop), and it says I've joined, and I reboot and I get 
that error.

These are Windows 2000, Windows XP, and Windows 2003 Clients (No Active 
Directory At all).

The log.smbd doesn't really show anything, except what I assume is my 
machine trying to authenticate, and for whatever reason the username is 
blanked out for trust account.

I think these are the appropriate entries

[2004/12/04 02:12:31, 1] auth/auth_util.c:make_server_info_sam(822)
  User Guest in passdb, but getpwnam() fails!
[2004/12/04 02:12:31, 2] smbd/server.c:exit_server(571)
  Closing connections
[2004/12/04 02:12:31, 1] auth/auth_util.c:make_server_info_sam(822)
  User Guest in passdb, but getpwnam() fails!
[2004/12/04 02:12:31, 2] auth/auth.c:check_ntlm_password(312)
  check_ntlm_password:  Authentication for user [] -> [] FAILED with 
error NT_STATUS_NO_SUCH_USER
[2004/12/04 02:12:31, 1] auth/auth_util.c:make_server_info_sam(822)
  User Guest in passdb, but getpwnam() fails!
[2004/12/04 02:12:42, 2] smbd/server.c:exit_server(571)
  Closing connections


The following is my smb.conf file
-----


##################################################
# Samba Configuration File -- Version 0.90b      #
# by Steve R                                     #
# Date: 03-Dec-04                                #
# System: Fermat                                 #
# Samba Version: 3.0.1                           #
#                                                #
#                                                #
##################################################

########
# General Options
########

########
# Network Options
########
socket options = TCP_NODELAY IPTOS_LOWDELAY
bind interfaces only = yes
interfaces = eth1, lo

wins support = yes
unix extensions = no

os level = 33
local master = yes
preferred master = yes
domain master = yes

announce as = WinNT
announce version = 4.1

domain logons = yes
#password server = *

########
# Domain Options
########
workgroup = SJrX.NET


########
# System Options
########

netbios name = fermat
server string = Debian 3.0r1, Running Samba: %v

time server = yes
log level = 2


########
# Security Options
########
passdb backend = tdbsam

sjrx:mysql user = samba
sjrx:mysql password = password
sjrx:mysql database = samba

sjrx:domain column='SJrX.NET':
sjrx:fullname column = CONCAT(firstname,' ',surname):

sjrx:lanman pass column = lm_pass:
sjrx:nt pass column = nt_pass:

sjrx:unknown 3 column = NULL

#hide local users = yes


unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n 
*Retype\snew\sUNIX\spassword:* %n\n .

add user script = /usr/sbin/adduser %u
add user to group script = /usr/sbin/adduser %u %g
#del user script = /usr/sbin/deluser %u



#asswd program = /bin/echo hello %u
#asswd chat = *hello* %n

guest ok = no
read only = yes
encrypt passwords = yes

security = user

map to guest = Bad Password
invalid users = russ
########
# Shares Options
########
follow symlinks = yes

hide dot files = yes
delete veto files = yes
follow symlinks = yes
wide links = yes

#map archive = yes
#map system = yes
#map hidden = yes
delete readonly = yes

browsable = no

# veto files = /*:DATA*/



########
# Shares
########
[home]
comment = %u's home directory
path = /home/%U/
writeable = yes
browsable = yes

[data]
path = /data/
force directory mode = 775
force create mode = 774
directory mode = 510
create mode = 400
comment = Public Folder:
public = yes
browsable = yes
write list = sjr
force group = pub
writeable = no

[dump]
path = /data/dump
public = yes
force user = root
writeable = yes
guest ok = yes

[tm2]
path = /data/tm2/
public = yes
browsable = yes
writeable = no
comment = "MP3's"

[www]
writeable = yes
path = /var/www/
create mode = 510
directory mode = 400
force directory mode = 775
force create mode = 774
force user = www-data
force group = pub
valid users = sjr
write list = sjr
map archive = no
map system = no
map hidden = no

[ftp]
writeable = yes
path = /home/ftp/
create mode = 510
directory mode = 400
force directory mode = 775
force create mode = 774
force user = www-data
force group = ftp
valid users = sjr
write list = sjr
map archive = no
map system = no
map hidden = no

[admin]
writeable = yes
path = /home/admintools/
create mode = 600
directory mode = 700
guest ok = no
valid users = sjr
write list = sjr

[backups]
writeable = no
path = /data2/backups/
read only = yes
guest ok = no
valid users = sjr
read list = sjr
force user = root

[netlogon]
path = /var/samba/netlogon/
write list = sjr , ntadmin, root

[profile]
path = /var/samba/profiles/

-----

Finally one other thing, the password from the NT Domain controller for 
the trust account matches whats in tdbsam.

(Oh yeah anyone know why mysql isn't recognized by pdbedit or samba as a 
valid backend, and I can't find mysql.so)



-- 
---------------
Steve Ramage
SJrX Networks
http://www.sjrx.net.
Vancouver, BC

Just out of curiosity.. I had a similar problem but only with W2K for
some reason I did not have to create a root smb account but for W2K I
did. Until I figured that out (from this list, thanks all) I got that
same error.
Are you using a root smb account to join the workstations to the network?


Steve Ramage wrote:
> Hey guys,
>
> I'm trying to migrate my NT4 Domain and am having some problems. 
> Ignoring my other post related to this, I can't get any of my machines 
> to be able to login. Alls I ever get is
>
> "Your computer account was not found or the password is
incorrect"
>
> I even tried rejoining the domain which works. I leave the domain and 
> then rejoin it, it takes a LONG time (might just be cause I'm testing 
> this on my old laptop), and it says I've joined, and I reboot and I 
> get that error.
>
> These are Windows 2000, Windows XP, and Windows 2003 Clients (No 
> Active Directory At all).
>
> The log.smbd doesn't really show anything, except what I assume is my 
> machine trying to authenticate, and for whatever reason the username 
> is blanked out for trust account.
>
> I think these are the appropriate entries
>
> [2004/12/04 02:12:31, 1] auth/auth_util.c:make_server_info_sam(822)
>  User Guest in passdb, but getpwnam() fails!
> [2004/12/04 02:12:31, 2] smbd/server.c:exit_server(571)
>  Closing connections
> [2004/12/04 02:12:31, 1] auth/auth_util.c:make_server_info_sam(822)
>  User Guest in passdb, but getpwnam() fails!
> [2004/12/04 02:12:31, 2] auth/auth.c:check_ntlm_password(312)
>  check_ntlm_password:  Authentication for user [] -> [] FAILED with 
> error NT_STATUS_NO_SUCH_USER
> [2004/12/04 02:12:31, 1] auth/auth_util.c:make_server_info_sam(822)
>  User Guest in passdb, but getpwnam() fails!
> [2004/12/04 02:12:42, 2] smbd/server.c:exit_server(571)
>  Closing connections
>
>
> The following is my smb.conf file
> -----
>
>
> ##################################################
> # Samba Configuration File -- Version 0.90b      #
> # by Steve R                                     #
> # Date: 03-Dec-04                                #
> # System: Fermat                                 #
> # Samba Version: 3.0.1                           #
> #                                                #
> #                                                #
> ##################################################
>
> ########
> # General Options
> ########
>
> ########
> # Network Options
> ########
> socket options = TCP_NODELAY IPTOS_LOWDELAY
> bind interfaces only = yes
> interfaces = eth1, lo
>
> wins support = yes
> unix extensions = no
>
> os level = 33
> local master = yes
> preferred master = yes
> domain master = yes
>
> announce as = WinNT
> announce version = 4.1
>
> domain logons = yes
> #password server = *
>
> ########
> # Domain Options
> ########
> workgroup = SJrX.NET
>
>
> ########
> # System Options
> ########
>
> netbios name = fermat
> server string = Debian 3.0r1, Running Samba: %v
>
> time server = yes
> log level = 2
>
>
> ########
> # Security Options
> ########
> passdb backend = tdbsam
>
> sjrx:mysql user = samba
> sjrx:mysql password = password
> sjrx:mysql database = samba
>
> sjrx:domain column='SJrX.NET':
> sjrx:fullname column = CONCAT(firstname,' ',surname):
>
> sjrx:lanman pass column = lm_pass:
> sjrx:nt pass column = nt_pass:
>
> sjrx:unknown 3 column = NULL
>
> #hide local users = yes
>
>
> unix password sync = yes
> passwd program = /usr/bin/passwd %u
> passwd chat = *Enter\snew\sUNIX\spassword:* %n\n 
> *Retype\snew\sUNIX\spassword:* %n\n .
>
> add user script = /usr/sbin/adduser %u
> add user to group script = /usr/sbin/adduser %u %g
> #del user script = /usr/sbin/deluser %u
>
>
>
> #asswd program = /bin/echo hello %u
> #asswd chat = *hello* %n
>
> guest ok = no
> read only = yes
> encrypt passwords = yes
>
> security = user
>
> map to guest = Bad Password
> invalid users = russ
> ########
> # Shares Options
> ########
> follow symlinks = yes
>
> hide dot files = yes
> delete veto files = yes
> follow symlinks = yes
> wide links = yes
>
> #map archive = yes
> #map system = yes
> #map hidden = yes
> delete readonly = yes
>
> browsable = no
>
> # veto files = /*:DATA*/
>
>
>
> ########
> # Shares
> ########
> [home]
> comment = %u's home directory
> path = /home/%U/
> writeable = yes
> browsable = yes
>
> [data]
> path = /data/
> force directory mode = 775
> force create mode = 774
> directory mode = 510
> create mode = 400
> comment = Public Folder:
> public = yes
> browsable = yes
> write list = sjr
> force group = pub
> writeable = no
>
> [dump]
> path = /data/dump
> public = yes
> force user = root
> writeable = yes
> guest ok = yes
>
> [tm2]
> path = /data/tm2/
> public = yes
> browsable = yes
> writeable = no
> comment = "MP3's"
>
> [www]
> writeable = yes
> path = /var/www/
> create mode = 510
> directory mode = 400
> force directory mode = 775
> force create mode = 774
> force user = www-data
> force group = pub
> valid users = sjr
> write list = sjr
> map archive = no
> map system = no
> map hidden = no
>
> [ftp]
> writeable = yes
> path = /home/ftp/
> create mode = 510
> directory mode = 400
> force directory mode = 775
> force create mode = 774
> force user = www-data
> force group = ftp
> valid users = sjr
> write list = sjr
> map archive = no
> map system = no
> map hidden = no
>
> [admin]
> writeable = yes
> path = /home/admintools/
> create mode = 600
> directory mode = 700
> guest ok = no
> valid users = sjr
> write list = sjr
>
> [backups]
> writeable = no
> path = /data2/backups/
> read only = yes
> guest ok = no
> valid users = sjr
> read list = sjr
> force user = root
>
> [netlogon]
> path = /var/samba/netlogon/
> write list = sjr , ntadmin, root
>
> [profile]
> path = /var/samba/profiles/
>
> -----
>
> Finally one other thing, the password from the NT Domain controller 
> for the trust account matches whats in tdbsam.
>
> (Oh yeah anyone know why mysql isn't recognized by pdbedit or samba as 
> a valid backend, and I can't find mysql.so)
>
>
>