samba - Dec 2007 - Tearing my hair out:

I have a samba 2.2.8a PDC, no windows servers at all.
The local network works.  Conan, the PDC also acts as a WINS 
server.  Postie, the DHCP server sets:
option netbios-name-servers 192.168.1.241 ;
option netbios-node-type 2 ;

All clients have lmhosts file with:
192.168.1.241   conan   #pre #dom:sjsa
192.168.1.242   postie  #pre


Last week I needed to reinstall a computer, named pixel
On server I ran
smbpasswd -a -m pixel
to reset the machine account password.


Pixel runs Win2k SP4

I go to Pixel and move it to the domain.
Usual signin and password of domain administrator.
Long Pause.  "Welcome to SJSA domain"

Reboot.

Now if I try to log in to a domain account, I get the message:
"The system cannot log you on to this domain because the system 
computer account in its primary domain is missing or the password 
on that account is incorrect."

Looking in pixel.log I see:

[2007/12/11 10:41:25, 0] smbd/password.c:domain_client_validate(1558)
   domain_client_validate: could not fetch trust account password 
for domain SJSA


Looking further, this is a common message in the log files, 
occuring just before shares connect normally.

Not sure what else to look for.

Sherwood Botsford wrote:
> I have a samba 2.2.8a PDC, no windows servers at all.
> The local network works.  Conan, the PDC also acts as a WINS server.  
> Postie, the DHCP server sets:
> option netbios-name-servers 192.168.1.241 ;
> option netbios-node-type 2 ;
> 
> All clients have lmhosts file with:
> 192.168.1.241   conan   #pre #dom:sjsa
> 192.168.1.242   postie  #pre
> 
> 
> Last week I needed to reinstall a computer, named pixel
> On server I ran
> smbpasswd -a -m pixel
> to reset the machine account password.
> 
> 
> Pixel runs Win2k SP4
> 
> I go to Pixel and move it to the domain.
> Usual signin and password of domain administrator.
> Long Pause.  "Welcome to SJSA domain"
> 
> Reboot.
> 
> Now if I try to log in to a domain account, I get the message:
> "The system cannot log you on to this domain because the system
computer
> account in its primary domain is missing or the password on that account 
> is incorrect."
> 
> Looking in pixel.log I see:
> 
> [2007/12/11 10:41:25, 0] smbd/password.c:domain_client_validate(1558)
>   domain_client_validate: could not fetch trust account password for 
> domain SJSA
> 
> 
> Looking further, this is a common message in the log files, occuring 
> just before shares connect normally.
> 
> Not sure what else to look for.
Problem solved.

I had two hosts with the same UID in both master.passwd and in 
smbpasswd.  So in this case both jabberwocky$ and pixel$ had 
UID's of 5100.

How did this happen?  Easy.  All machines are group 5000.  I use 
the last octet of the IP to give them a unique UID.  Jabberwocky 
was turfed.  In recycling the IP I failed to remove the old name 
from master.passwd and smbpasswd.

(So many places:
DNS
DHCP
Password
smbpasswd
hosts.yp

Sigh.  Anyway, posting this so that the Next Guy can find it 
faster.