[Samba] problem joining computer to domain

John H Terpstra
Mon, 21 Nov 2005 19:23:51 -0000

On Monday 21 November 2005 10:39, Tony Austin wrote:
> I cannot join my WinXP workstation computers to the Samba domain.  Using
> the Computer Name / Change on the XP computer gives me an error saying
> that the username or password is incorrect - except very occasionally when
> it works although I do nothing different!

Have you been following the Samba documentation?

Suggest you follow chapter 5 of the book "Samba-3 by Example, second
edition".
This book is available from Amazon.Com under ISBN: 013188221X
Alternately, you can download this book from:

http://www.samba.org/samba/docs/Samba3-ByExample.pdf

Please contact me directly with details of any steo that fails.

The documentation provides extensively documented configuration files and
includes, in section 5.1.3.7, detailed diagnostic guidance.

- John T.

> I have noticed that on when it works there is a machine record set up in
> LDAP with Samba data as follows:-
>
> dn: uid=leem-q4hw$,ou=People,dc=commtechgroup,dc=co.uk
> uid: leem-q4hw$
> sambaSID: S-1-5-21-1504740027-1884281049-541626052-3090
> sambaPrimaryGroupSID: S-1-5-21-1504740027-1884281049-541626052-2107
> displayName: leem-q4hw$
> objectClass: sambaSamAccount
> objectClass: account
> creatorsName: cn=Manager,dc=commtechgroup,dc=co.uk
> createTimestamp: 20051109143944Z
> sambaPwdCanChange: 1131547184
> sambaPwdMustChange: 2147483647
> sambaNTPassword: 7F47D21BE0CCA3F6BA29CDC00277875B
> sambaPwdLastSet: 1131547184
> sambaAcctFlags: [W          ]
> modifiersName: cn=Manager,dc=commtechgroup,dc=co.uk
> modifyTimestamp: 20051109143944Z
>
> But the rest of the time, when it doesn't work, I get an LDAP entry
> without any Samba data like this:-
>
> dn: uid=commaint-df398$,ou=People,dc=commtechgroup,dc=co.uk
> objectClass: top
> objectClass: inetOrgPerson
> objectClass: posixAccount
> cn: commaint-df398$
> sn: commaint-df398$
> uid: commaint-df398$
> uidNumber: 1046
> gidNumber: 553
> homeDirectory: /dev/null
> loginShell: /bin/false
> description: Computer
> creatorsName: cn=Manager,dc=commtechgroup,dc=co.uk
> createTimestamp: 20051116130633Z
> modifiersName: cn=Manager,dc=commtechgroup,dc=co.uk
> modifyTimestamp: 20051116130633Z
>
> I have experimented with various combinations of
>
> root# ./smbldap-useradd -a -w compname$
>
> to see if I can get the record set up with the Samba data, but no luck.
>
> I now have 2 servers both of which show the same symptom.
>
> Tony