samba - Sep 2006 - permissions problem with adding a machine

I have configured a domain controller in samba 3.0.xxx. I followed the
how-to at samba.org and I think I may have missed a step because now
when I attempt to add a machine to the domain, I get an error.

I am using tdbsam as the user/group store. I ran the net group map to
make windows groups to unix groups. I have verified that my
administrator users are in group wheel.

I do not use the map users file. I found that when I put my
administrative user names there they were not permitted to log into
the domain.

Is there a checklist that I can follow to make sure I didn't forget a
step?

-- 
David Bear
phone: 	602-496-0424
fax: 	602-496-0955
College of Public Programs/ASU
University Center Rm 622
411 N Central
Phoenix, AZ 85007-0685
 "Beware the IP portfolio, everyone will be suspect of trespassing"

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 09/19/2006 10:52 PM, David Bear escreveu:
> I have configured a domain controller in samba 3.0.xxx. I followed the
> how-to at samba.org and I think I may have missed a step because now
> when I attempt to add a machine to the domain, I get an error.
> 
> I am using tdbsam as the user/group store. I ran the net group map to
> make windows groups to unix groups. I have verified that my
> administrator users are in group wheel.
> 
> I do not use the map users file. I found that when I put my
> administrative user names there they were not permitted to log into
> the domain.
> 
> Is there a checklist that I can follow to make sure I didn't forget a
> step?
	There are no checklists that I'm aware of.

	Did you try to add a machine with 'root'?

	Did you set any users in the "Domain Admins" group? (And
of course, did 'net groupmap' a unixgroup to the "Domain
Admins"
group?).


	If you still have problems, please, send you smb.conf
attached with the important part of your log (also increase the
loglevel/debuglevel).

	Kind regards,

- --
Felipe Augusto van de Wiel <felipe@paranacidade.org.br>
Coordenadoria de Tecnologia da Informa??o (CTI) - SEDU/PARANACIDADE
http://www.paranacidade.org.br/           Phone: (+55 41 3350 3300)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Debian - http://enigmail.mozdev.org

iD8DBQFFGA4oCj65ZxU4gPQRAq7SAKDOibdKc7lpAoADL6g0daUvHOkL0gCfZeKu
fJgy9lo0Q17jkbzaAQvX/So=dDb5
-----END PGP SIGNATURE-----