Talwar, Puneet (NIH/NIAID)
2005-May-09 14:54 UTC
[Samba] can join the W2K domain controller
I am having a hard time joining to the w2k domain controller. here are few
steps that
i am trying to do to join w2k domain controller.
SMB.CONF file
# Global parameters
[global]
workgroup = Examples
realm = EXAMPLES.COM
server string = Comment of the server
security = DOMAIN
password server = PDC server address
log file = /var/log/samba/smbd.log
max log size = 200
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
wins server = xxx.xxx.xxx.xxx
#net join -I <PDC IP ADDRESS> -U admin@xxx.xxx
[2005/05/09 10:45:37, 0] rpc_client/cli_netlogon.c:cli_nt_setup_creds(256)
cli_nt_setup_creds: request challenge failed
[2005/05/09 10:45:37, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(279)
error setting trust account password: NT_STATUS_INTERNAL_ERROR
when i try to connect to the Samba server from WIN XP client, i get the
following error
message on the Samba server.
[2005/05/09 10:23:55, 0] auth/auth_domain.c:domain_client_validate(170)
domain_client_validate: Domain password server not available.
Two possibilities that I can think of: (1) The password server you've specified isn't the right one. If it's a w2k Active Directory server, it may not be in NT emulation mode, and thus won't acknowledge NT-style join requests. If it's a w2k Domain Controller (pre-AD), .. hmm, not sure about that one. Might still need to be in NT emulation mode? (2) Your password might be wrong. Try doing -U admin, leave off the password. It'll prompt you for it with "Password:" (and hide it from the screen). Note: you don't need a "realm" if you're not using AD, which it looks like is your case, as you're using "server = domain". --Dragon Talwar, Puneet (NIH/NIAID) wrote:>I am having a hard time joining to the w2k domain controller. here are few >steps that >i am trying to do to join w2k domain controller. > >SMB.CONF file ># Global parameters >[global] > workgroup = Examples > realm = EXAMPLES.COM > server string = Comment of the server > security = DOMAIN > password server = PDC server address > log file = /var/log/samba/smbd.log > max log size = 200 > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 > wins server = xxx.xxx.xxx.xxx > >#net join -I <PDC IP ADDRESS> -U admin@xxx.xxx > [2005/05/09 10:45:37, 0] rpc_client/cli_netlogon.c:cli_nt_setup_creds(256) > cli_nt_setup_creds: request challenge failed > [2005/05/09 10:45:37, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(279) > error setting trust account password: NT_STATUS_INTERNAL_ERROR > >when i try to connect to the Samba server from WIN XP client, i get the >following error >message on the Samba server. > > [2005/05/09 10:23:55, 0] auth/auth_domain.c:domain_client_validate(170) > domain_client_validate: Domain password server not available. > > > > >
Talwar, Puneet (NIH/NIAID)
2005-May-09 17:11 UTC
[Samba] can join the W2K domain controller
Well a strange thing is going on here, I am able connect to the Samba server from my WIN XP client box which on the same subnet as the samba server and PDC. But when I go to a different subnet I get permission denied message when connecting to the samba server. I check the logs on the samba server and it say unable to connect to the PDC server. I explained the problem to the network engineer guys and they said there is no firewall blocking the PDC server. So I am kind a lost here as what is going on? __________________________ Puneet Talwar -----Original Message----- From: David Michaels [mailto:dragon@raytheon.com] Sent: Monday, May 09, 2005 12:04 PM To: Talwar, Puneet (NIH/NIAID) Cc: 'samba@lists.samba.org' Subject: Re: [Samba] can join the W2K domain controller Two possibilities that I can think of: (1) The password server you've specified isn't the right one. If it's a w2k Active Directory server, it may not be in NT emulation mode, and thus won't acknowledge NT-style join requests. If it's a w2k Domain Controller (pre-AD), .. hmm, not sure about that one. Might still need to be in NT emulation mode? (2) Your password might be wrong. Try doing -U admin, leave off the password. It'll prompt you for it with "Password:" (and hide it from the screen). Note: you don't need a "realm" if you're not using AD, which it looks like is your case, as you're using "server = domain". --Dragon Talwar, Puneet (NIH/NIAID) wrote:>I am having a hard time joining to the w2k domain controller. here are few >steps that >i am trying to do to join w2k domain controller. > >SMB.CONF file ># Global parameters >[global] > workgroup = Examples > realm = EXAMPLES.COM > server string = Comment of the server > security = DOMAIN > password server = PDC server address > log file = /var/log/samba/smbd.log > max log size = 200 > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 > wins server = xxx.xxx.xxx.xxx > >#net join -I <PDC IP ADDRESS> -U admin@xxx.xxx > [2005/05/09 10:45:37, 0] rpc_client/cli_netlogon.c:cli_nt_setup_creds(256) > cli_nt_setup_creds: request challenge failed > [2005/05/09 10:45:37, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(279) > error setting trust account password: NT_STATUS_INTERNAL_ERROR > >when i try to connect to the Samba server from WIN XP client, i get the >following error >message on the Samba server. > > [2005/05/09 10:23:55, 0] auth/auth_domain.c:domain_client_validate(170) > domain_client_validate: Domain password server not available. > > > > >