samba - May 2005 - Cannot get machines to logon to domain

The problem is whenever I try to load a computer onto the domain (WinXP Prof
or Win2000) I enter in root and the root password and I receive an error that
states "The user name cannot be found."  However if I try using a
different
account then it gives me an access denied.  And if I purposefully get the
password or user name wrong it gives me an error that I have entered in a wrong
username and password.
  Now the latter two errors are logcial and it seems that the server is
communicating because I can see the shares on the windows box.
  So again the problem is that I cannot get the machines to join the domain.  I
created the group and each computer manually.  Then I added the users and
machines  using smbpasswd manually.

Here is my smb.conf
[global]

  workgroup = MIDDLE_EARTH
  netbios name = ISENGARD
  server string = Isengard

  browseable = yes

  printcap name = /etc/printcap
  load printers = yes
  printing = cups
  cups options = raw

  log file = /var/log/samba/%m.log
  max log size = 200

  security = user
  encrypt passwords = yes
  passdb backend = tdbsam
  smb passwd file = /etc/samba/passdb.tdb
  username map = /etc/smbusers

  unix password sync = Yes
  passwd program = /usr/bin/passwd %u
  passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*

  socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

  os level = 35
  domain master = yes 
  preferred master = yes
  local master = yes
  domain logons = yes
  
  logon path = \\%L\Profiles\%U
  logon drive = H:
  logon home = \\%L\%U

  dns proxy = no 

#============================ Share Definitions =============================  
idmap uid = 15000-20000
   idmap gid = 15000-20000
   template shell = /bin/false
   winbind use default domain = no
[homes]
   comment = Home Directories
   browseable = no
   valid users = %S
   writable = yes

[netlogon]
   comment = Network Logon Service
   path = /helios
   guest ok = No
   writable = yes
   browseable = No
   admin users = root

[Profiles]
    path = /helios
    browseable = No
    guest ok = No
    profile acls = Yes
    read only = No

[printers]
   comment = All Printers
   path = /var/spool/samba
   browseable = No
   guest ok = Yes
   writable = No
   printable = yes

[temp]
   comment = Temporary file space
   path = /helios/temp
   read only = no
   public = yes

[public]
   comment = Public Stuff
   path = /helios/public
   public = yes
   read only = No

[oldserv]
  path = /helios/oldserv
  public = yes
  read only = no

Cheers,
KGE

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.

Hello,

<SNIP>
>   So again the problem is that I cannot get the machines to join the
domain.  I
> created the group and each computer manually.  Then I added the users and
> machines  using smbpasswd manually.
try the following line in your global section of smb.conf
add machine script = /usr/sbin/useradd -g 1001 -d /var/lib/nobody -s /bin/false
%u

make sure you have a unix group machines or whatever you like with a unique id
that fits in your environment.
on some systems you can try a home directory -d /dev/null

hope this helps
cheers
F.W.
> 
> Here is my smb.conf
> [global]
> 
>   workgroup = MIDDLE_EARTH
>   netbios name = ISENGARD
>   server string = Isengard
> 
>   browseable = yes
> 
>   printcap name = /etc/printcap
>   load printers = yes
>   printing = cups
>   cups options = raw
> 
>   log file = /var/log/samba/%m.log
>   max log size = 200
> 
>   security = user
>   encrypt passwords = yes
>   passdb backend = tdbsam
>   smb passwd file = /etc/samba/passdb.tdb
>   username map = /etc/smbusers
> 
>   unix password sync = Yes
>   passwd program = /usr/bin/passwd %u
>   passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n
> *passwd:*all*authentication*tokens*updated*successfully*
> 
>   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> 
>   os level = 35
>   domain master = yes 
>   preferred master = yes
>   local master = yes
>   domain logons = yes
>   
>   logon path = \\%L\Profiles\%U
>   logon drive = H:
>   logon home = \\%L\%U
> 
>   dns proxy = no 
> 
> #============================ Share Definitions
=============================>    idmap uid = 15000-20000
>    idmap gid = 15000-20000
>    template shell = /bin/false
>    winbind use default domain = no
> [homes]
>    comment = Home Directories
>    browseable = no
>    valid users = %S
>    writable = yes
> 
> [netlogon]
>    comment = Network Logon Service
>    path = /helios
>    guest ok = No
>    writable = yes
>    browseable = No
>    admin users = root
> 
> [Profiles]
>     path = /helios
>     browseable = No
>     guest ok = No
>     profile acls = Yes
>     read only = No
> 
> [printers]
>    comment = All Printers
>    path = /var/spool/samba
>    browseable = No
>    guest ok = Yes
>    writable = No
>    printable = yes
> 
> [temp]
>    comment = Temporary file space
>    path = /helios/temp
>    read only = no
>    public = yes
> 
> [public]
>    comment = Public Stuff
>    path = /helios/public
>    public = yes
>    read only = No
> 
> [oldserv]
>   path = /helios/oldserv
>   public = yes
>   read only = no
> 
> Cheers,
> KGE
> 
> ----------------------------------------------------------------
> This message was sent using IMP, the Internet Messaging Program.
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/listinfo/samba