samba - Jun 2005 - Unable to join Windows2003 machine to Samba domain

I have a Samba PDC running on RHEL3U4 with the following smb.conf:

 # Samba config file created using SWAT
# from 127.0.0.1 (127.0.0.1)
# Date: 2005/06/01 15:50:07

# Global parameters
[global]
        workgroup = TESTDOMAIN
        server string = Samba Server
        passdb backend = ldapsam:ldap://localhost, smbpasswd
        log file = /var/log/samba/%m.log
        max log size = 50
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        printcap name = /etc/printcap
        add user script = /usr/local/sbin/smbldap-useradd -m "%u"
        delete user script = /usr/local/sbin/smbldap-userdel "%u"
        add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
        add user to group script = /usr/local/sbin/smbldap-groupmod -m
"%u" "%g"
        delete user from group script = /usr/local/sbin/smbldap-groupmod
-x "%u"
 "%g"
        set primary group script = /usr/local/sbin/smbldap-usermod -g
"%g" "%u"
        add machine script = /usr/local/sbin/smbldap-useradd "%u"
        domain logons = Yes       wins proxy = Yes
        wins support = Yes
        ldap admin dn = cn=Administrator,dc=example,dc=com
        ldap group suffix = ou=groups
        ldap idmap suffix = ou=idmap
        ldap machine suffix = ou=computers
        ldap suffix = dc=example,dc=com
        ldap user suffix = ou=users
        admin users = Administrator
        cups options = raw
        bind interfaces only = Yes
        interfaces = 127.0.0.1 eth1

[homes]
        comment = Home Directories
        read only = No
        browseable = No

[printers]
        comment = All Printers
        path = /var/spool/samba
        printable = Yes
        browseable = No

        domain master = Yes
        dns proxy = No


I want to join my Windows2003 machine to TESTDOMAIN.  On the Windows
machine, following the instructions in Appendix A of the Samba Guide:

1. On the System Properties "Computer Name" tab, I select Change.
2. I enter TESTDOMAIN in the field below the Domain radio button and hit
OK.
3. I enter "root" and its password in the Computer Name Changes
dialogue
and hit OK.

 The result is I get the message "Logon failure: unknown user name or
bad password."

I have set the root password with smbpasswd on the PDC machine.  I have
many users in the ldap backend but root is in passwd.  Have I forgotten
something?

Thanks in advance for any help.

	Don

>The result is I get the message "Logon failure: unknown user name or
>bad password."
>
>I have set the root password with smbpasswd on the PDC machine.  I have
>many users in the ldap backend but root is in passwd.  Have I forgotten
>something?
Ah, Don, sorry, I quite didn't understand this earlier today.  First lets
check to make sure you have root really in smbpasswd.  Try "pdbedit -v
root" to see if samba even knows about it...

Also, since you have ldapsam as your first passdb backend, it's going to
want to use that backend...if you want it in smbpasswd, you need to list
that first.

You could also try using Administrator, if you have that in your
directory...

----------------------------
Jim McDonough
IBM Linux Technology Center
Samba Team
6 Minuteman Drive
Scarborough, ME 04074
USA

jmcd at us dot ibm dot com
jmcd at samba dot org

Phone: 1-877-228-1846
IBM tie-line: 349-5335

Hi all,

Attempting to join Windows2003 machine to Samba domain results in "The 
specified domain either does not exist or could not be contacted".  No 
messages show up in log.smbd on the PDC server following the attempt (I have 
log level set to 5).

I can however ping the PDC machine, and can see it by entering its hostname in 
"Start->Run".  This causes messages to show up in log.smbd on the
PDC server.

I recently installed a series of linux security fixes; I do not know the 
details since I installed automatically using online_update.  Thinking this 
might be the source of the problem I have turned off the firewall, but still 
have the problem.

I see lots of this problem in Google, but none of the suggestions have helped.

Thanks for any suggestions anyone can provide.

-- 
Don Watson

Thanks, Tomasz.

Deleting the wins.dat file and restarting the smbd/nmbd daemons solved the 
problem.  Now I'm back to my "username could not be found"
problem, but at
least I have error messages in log.smbd to work with.
-- 
Don Watson