thr3ads.net - samba - [Samba] Joining XP SP2 to a Samba PDC [Aug 2005]

If this information is useful, please help other people find it:
Share via:

DSanchez

2005-Aug-10 16:51 UTC

[Samba] Joining XP SP2 to a Samba PDC

Hello and Thanks in advance.
  
I have a CentOS 4.1 Server and i have samba Version 3.0.10-1.4E
I have 2 users on this server right now: Root, Dsanchez.

I have also issued this command to set up these 2 users on the Samba
Server as well.
smbpasswd -a root
smbpasswd -a dsanchez
and i set up the password to match the linux account.

Here is my SMB.conf file:

# Global parameters
[global]
        workgroup = ETNET
        server string = Samba PDC Server
        passwd program = /usr/bin/passwd %u
        passwd chat = *New*UNIX*password* %n\n
*ReType*new*UNIX*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
        unix password sync = Yes
        log file = /var/log/samba/%m.log
        max log size = 50
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        printcap name = /etc/printcap
        add user script = /usr/sbin/useradd -d /dev/null -g 100 -s
/bin/false -M %u
        add machine script = /usr/sbin/useradd -c Machine -d /dev/null
-s /bin/false machine_name$
        domain logons = Yes
        os level = 65
        preferred master = Yes
        domain master = Yes
        dns proxy = No
        idmap uid = 16777216-33554431
        idmap gid = 16777216-33554431
        hosts allow = 10.78., 127.
        cups options = raw

[homes]
        comment = Home Directories
        read only = No
        browseable = No

[netlogon]
        comment = Network Logon Service
        path = /home/netlogon
        guest ok = Yes
        share modes = No

[printers]
        comment = All Printers
        path = /var/spool/samba
        printable = Yes
        browseable = No


I have also made the following changes to the XP box.

Registry changes:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetLogon\Parameters\Requiresignorseal

Which i set to '0' from '1'

I have made sure the following in Local Security Policy is set:
I edited or checked the following entries:
"Domain member: Digitally encrypt or sign secure channel(Disabled)"
"Domain member: Disable machine account password changes(Disabled)."
"Domain member: Require strong (Windows 2000 or later) session
key(Disabled)"


Then i go to the Systems Properties/computer name change/

I change from workgroup: workgroup to Domain:ETINET

Then i click the 'ok' button, and a login window pops up.

I then use the following usernames to 'Join'

root
admin
administrator
dsanchez
etinet\root
etinet\admin
etinet\administrator
etinet\dsanchez

I get the following error when i try to join as:
administrator
admin
etinet\admin
etinet\administrator

The following error occurred attempting to join the domain "ETINET":
Logon Failure: Unknown Username or bad password.

When i try using the following this is what i get:
root
etinet\root

The following error occurred attempting to join the domain "ETINET":
The username could not be found.

Then, if i try and use my account, whcih i added to the root group.
Dsanchez
etinet\Dsanchez

The following error occurred attempting to join the domain "ETINET":
Access is Denied.


Note, this is an XP SP2 Machine and i only have 1 user on this machine
(Dsanchez)


Also,

I did find that this script
add machine script = /usr/sbin/useradd -d /dev/null -g 102 -s /bin/false

has a group of 102

and the machine log file that was in /var/log/samba/<machinename>.log
had this error in it.

useradd: unknown group 102

however i do have this script in the smb.conf file.

add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u


So do i need both of these lines?
do i need to make a group with the Gid of 102?

Thanks.

Lee Ball

2005-Aug-10 17:28 UTC

head link

[Samba] Joining XP SP2 to a Samba PDC

Have you added the machine name to the linux box using the command

adduser {machine name}$ (if it doesn't allow the $ then add it to the 
end of the machine name in /etc/passwd

then do:

smbpasswd -m {machine name}$

Then try joining the domain by using the administrator username and the 
root password for the Linux box.

DSanchez wrote:> Hello and Thanks in advance.
>   
> I have a CentOS 4.1 Server and i have samba Version 3.0.10-1.4E
> I have 2 users on this server right now: Root, Dsanchez.
> 
> I have also issued this command to set up these 2 users on the Samba
> Server as well.
> smbpasswd -a root
> smbpasswd -a dsanchez
> and i set up the password to match the linux account.
> 
> Here is my SMB.conf file:
> 
> # Global parameters
> [global]
>         workgroup = ETNET
>         server string = Samba PDC Server
>         passwd program = /usr/bin/passwd %u
>         passwd chat = *New*UNIX*password* %n\n
> *ReType*new*UNIX*password* %n\n
> *passwd:*all*authentication*tokens*updated*successfully*
>         unix password sync = Yes
>         log file = /var/log/samba/%m.log
>         max log size = 50
>         socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>         printcap name = /etc/printcap
>         add user script = /usr/sbin/useradd -d /dev/null -g 100 -s
> /bin/false -M %u
>         add machine script = /usr/sbin/useradd -c Machine -d /dev/null
> -s /bin/false machine_name$
>         domain logons = Yes
>         os level = 65
>         preferred master = Yes
>         domain master = Yes
>         dns proxy = No
>         idmap uid = 16777216-33554431
>         idmap gid = 16777216-33554431
>         hosts allow = 10.78., 127.
>         cups options = raw
> 
> [homes]
>         comment = Home Directories
>         read only = No
>         browseable = No
> 
> [netlogon]
>         comment = Network Logon Service
>         path = /home/netlogon
>         guest ok = Yes
>         share modes = No
> 
> [printers]
>         comment = All Printers
>         path = /var/spool/samba
>         printable = Yes
>         browseable = No
> 
> 
> I have also made the following changes to the XP box.
> 
> Registry changes:
> 
>
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetLogon\Parameters\Requiresignorseal
> 
> Which i set to '0' from '1'
> 
> I have made sure the following in Local Security Policy is set:
> I edited or checked the following entries:
> "Domain member: Digitally encrypt or sign secure
channel(Disabled)"
> "Domain member: Disable machine account password
changes(Disabled)."
> "Domain member: Require strong (Windows 2000 or later) session
key(Disabled)"
> 
> 
> Then i go to the Systems Properties/computer name change/
> 
> I change from workgroup: workgroup to Domain:ETINET
> 
> Then i click the 'ok' button, and a login window pops up.
> 
> I then use the following usernames to 'Join'
> 
> root
> admin
> administrator
> dsanchez
> etinet\root
> etinet\admin
> etinet\administrator
> etinet\dsanchez
> 
> I get the following error when i try to join as:
> administrator
> admin
> etinet\admin
> etinet\administrator
> 
> The following error occurred attempting to join the domain
"ETINET":
> Logon Failure: Unknown Username or bad password.
> 
> When i try using the following this is what i get:
> root
> etinet\root
> 
> The following error occurred attempting to join the domain
"ETINET":
> The username could not be found.
> 
> Then, if i try and use my account, whcih i added to the root group.
> Dsanchez
> etinet\Dsanchez
> 
> The following error occurred attempting to join the domain
"ETINET":
> Access is Denied.
> 
> 
> Note, this is an XP SP2 Machine and i only have 1 user on this machine
> (Dsanchez)
> 
> 
> Also,
> 
> I did find that this script
> add machine script = /usr/sbin/useradd -d /dev/null -g 102 -s /bin/false
> 
> has a group of 102
> 
> and the machine log file that was in /var/log/samba/<machinename>.log
> had this error in it.
> 
> useradd: unknown group 102
> 
> however i do have this script in the smb.conf file.
> 
> add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u
> 
> 
> So do i need both of these lines?
> do i need to make a group with the Gid of 102?
> 
> Thanks.

Lee Ball

2005-Aug-10 17:34 UTC

head link

[Samba] Joining XP SP2 to a Samba PDC

Correction, the command you want is:

smbpasswd -a -m {machine name, no $}

DSanchez wrote:> Hello and Thanks in advance.
>   
> I have a CentOS 4.1 Server and i have samba Version 3.0.10-1.4E
> I have 2 users on this server right now: Root, Dsanchez.
> 
> I have also issued this command to set up these 2 users on the Samba
> Server as well.
> smbpasswd -a root
> smbpasswd -a dsanchez
> and i set up the password to match the linux account.
> 
> Here is my SMB.conf file:
> 
> # Global parameters
> [global]
>         workgroup = ETNET
>         server string = Samba PDC Server
>         passwd program = /usr/bin/passwd %u
>         passwd chat = *New*UNIX*password* %n\n
> *ReType*new*UNIX*password* %n\n
> *passwd:*all*authentication*tokens*updated*successfully*
>         unix password sync = Yes
>         log file = /var/log/samba/%m.log
>         max log size = 50
>         socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>         printcap name = /etc/printcap
>         add user script = /usr/sbin/useradd -d /dev/null -g 100 -s
> /bin/false -M %u
>         add machine script = /usr/sbin/useradd -c Machine -d /dev/null
> -s /bin/false machine_name$
>         domain logons = Yes
>         os level = 65
>         preferred master = Yes
>         domain master = Yes
>         dns proxy = No
>         idmap uid = 16777216-33554431
>         idmap gid = 16777216-33554431
>         hosts allow = 10.78., 127.
>         cups options = raw
> 
> [homes]
>         comment = Home Directories
>         read only = No
>         browseable = No
> 
> [netlogon]
>         comment = Network Logon Service
>         path = /home/netlogon
>         guest ok = Yes
>         share modes = No
> 
> [printers]
>         comment = All Printers
>         path = /var/spool/samba
>         printable = Yes
>         browseable = No
> 
> 
> I have also made the following changes to the XP box.
> 
> Registry changes:
> 
>
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetLogon\Parameters\Requiresignorseal
> 
> Which i set to '0' from '1'
> 
> I have made sure the following in Local Security Policy is set:
> I edited or checked the following entries:
> "Domain member: Digitally encrypt or sign secure
channel(Disabled)"
> "Domain member: Disable machine account password
changes(Disabled)."
> "Domain member: Require strong (Windows 2000 or later) session
key(Disabled)"
> 
> 
> Then i go to the Systems Properties/computer name change/
> 
> I change from workgroup: workgroup to Domain:ETINET
> 
> Then i click the 'ok' button, and a login window pops up.
> 
> I then use the following usernames to 'Join'
> 
> root
> admin
> administrator
> dsanchez
> etinet\root
> etinet\admin
> etinet\administrator
> etinet\dsanchez
> 
> I get the following error when i try to join as:
> administrator
> admin
> etinet\admin
> etinet\administrator
> 
> The following error occurred attempting to join the domain
"ETINET":
> Logon Failure: Unknown Username or bad password.
> 
> When i try using the following this is what i get:
> root
> etinet\root
> 
> The following error occurred attempting to join the domain
"ETINET":
> The username could not be found.
> 
> Then, if i try and use my account, whcih i added to the root group.
> Dsanchez
> etinet\Dsanchez
> 
> The following error occurred attempting to join the domain
"ETINET":
> Access is Denied.
> 
> 
> Note, this is an XP SP2 Machine and i only have 1 user on this machine
> (Dsanchez)
> 
> 
> Also,
> 
> I did find that this script
> add machine script = /usr/sbin/useradd -d /dev/null -g 102 -s /bin/false
> 
> has a group of 102
> 
> and the machine log file that was in /var/log/samba/<machinename>.log
> had this error in it.
> 
> useradd: unknown group 102
> 
> however i do have this script in the smb.conf file.
> 
> add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u
> 
> 
> So do i need both of these lines?
> do i need to make a group with the Gid of 102?
> 
> Thanks.

Mac Mannanan

2005-Aug-11 18:34 UTC

head link

[Samba] Joining XP SP2 to a Samba PDC

Dont know if the typo was only in your email but you have

[global]>         workgroup = ETNET
in your smb.conf

and then tried to join
>I change from workgroup: workgroup to Domain:ETINET
Good luck

Manannan



>From: DSanchez <myjunkacct@gmail.com>
>To: samba@lists.samba.org
>Subject: [Samba] Joining XP SP2 to a Samba PDC
>Date: Wed, 10 Aug 2005 09:51:28 -0700
>
>Hello and Thanks in advance.
>
>I have a CentOS 4.1 Server and i have samba Version 3.0.10-1.4E
>I have 2 users on this server right now: Root, Dsanchez.
>
>I have also issued this command to set up these 2 users on the Samba
>Server as well.
>smbpasswd -a root
>smbpasswd -a dsanchez
>and i set up the password to match the linux account.
>
>Here is my SMB.conf file:
>
># Global parameters
>[global]
>         workgroup = ETNET
>         server string = Samba PDC Server
>         passwd program = /usr/bin/passwd %u
>         passwd chat = *New*UNIX*password* %n\n
>*ReType*new*UNIX*password* %n\n
>*passwd:*all*authentication*tokens*updated*successfully*
>         unix password sync = Yes
>         log file = /var/log/samba/%m.log
>         max log size = 50
>         socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>         printcap name = /etc/printcap
>         add user script = /usr/sbin/useradd -d /dev/null -g 100 -s
>/bin/false -M %u
>         add machine script = /usr/sbin/useradd -c Machine -d /dev/null
>-s /bin/false machine_name$
>         domain logons = Yes
>         os level = 65
>         preferred master = Yes
>         domain master = Yes
>         dns proxy = No
>         idmap uid = 16777216-33554431
>         idmap gid = 16777216-33554431
>         hosts allow = 10.78., 127.
>         cups options = raw
>
>[homes]
>         comment = Home Directories
>         read only = No
>         browseable = No
>
>[netlogon]
>         comment = Network Logon Service
>         path = /home/netlogon
>         guest ok = Yes
>         share modes = No
>
>[printers]
>         comment = All Printers
>         path = /var/spool/samba
>         printable = Yes
>         browseable = No
>
>
>I have also made the following changes to the XP box.
>
>Registry changes:
>
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetLogon\Parameters\Requiresignorseal
>
>Which i set to '0' from '1'
>
>I have made sure the following in Local Security Policy is set:
>I edited or checked the following entries:
>"Domain member: Digitally encrypt or sign secure
channel(Disabled)"
>"Domain member: Disable machine account password
changes(Disabled)."
>"Domain member: Require strong (Windows 2000 or later) session 
>key(Disabled)"
>
>
>Then i go to the Systems Properties/computer name change/
>
>I change from workgroup: workgroup to Domain:ETINET
>
>Then i click the 'ok' button, and a login window pops up.
>
>I then use the following usernames to 'Join'
>
>root
>admin
>administrator
>dsanchez
>etinet\root
>etinet\admin
>etinet\administrator
>etinet\dsanchez
>
>I get the following error when i try to join as:
>administrator
>admin
>etinet\admin
>etinet\administrator
>
>The following error occurred attempting to join the domain
"ETINET":
>Logon Failure: Unknown Username or bad password.
>
>When i try using the following this is what i get:
>root
>etinet\root
>
>The following error occurred attempting to join the domain
"ETINET":
>The username could not be found.
>
>Then, if i try and use my account, whcih i added to the root group.
>Dsanchez
>etinet\Dsanchez
>
>The following error occurred attempting to join the domain
"ETINET":
>Access is Denied.
>
>
>Note, this is an XP SP2 Machine and i only have 1 user on this machine
>(Dsanchez)
>
>
>Also,
>
>I did find that this script
>add machine script = /usr/sbin/useradd -d /dev/null -g 102 -s /bin/false
>
>has a group of 102
>
>and the machine log file that was in /var/log/samba/<machinename>.log
>had this error in it.
>
>useradd: unknown group 102
>
>however i do have this script in the smb.conf file.
>
>add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u
>
>
>So do i need both of these lines?
>do i need to make a group with the Gid of 102?
>
>Thanks.
>--
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/listinfo/samba
_________________________________________________________________
It's fast, it's easy and it's free. Get MSN Messenger 7.0 today! 
http://messenger.msn.co.uk

Possibly Parallel Threads

Search for more maybe matching threads

samba - Aug 2005 - Joining XP SP2 to a Samba PDC

[Samba] Joining XP SP2 to a Samba PDC

[Samba] Joining XP SP2 to a Samba PDC

[Samba] Joining XP SP2 to a Samba PDC

[Samba] Joining XP SP2 to a Samba PDC

Possibly Parallel Threads