samba - Nov 2011 - win 7 join domain error

Hi

i am trying to join a win 7 client to my samba pdc. Authentication is via ldap 
which is working fine.

I have added the two windows 7 registry items:

HKLM\System\CCS\Services\LanmanWorkstation\Parameters
            DWORD  DomainCompatibilityMode = 1
            DWORD  DNSNameResolutionRequired = 0

I have a samba root passsword setup when I setup the samba PDC with Yast on 
opensuse 11.4. On the win 7 machine, I can see the home shares by typing e.g.

\\hh1\steve

into windows explorer where hh1 is the domain name.

When I try to add the machine to the domain  get the win 7 error:

'The specified computer could not be found. Contact an administrator to
verify
if the account is in the domain. . .'

Root has a samba password which I specify when joining.

Could anyone help here?

My smb.conf is:


[global]
        workgroup = HH1
        map to guest = Bad User
        passdb backend = ldapsam:ldap://127.0.0.1
        printcap name = cups
        add machine script = /usr/sbin/useradd  -c Machine -d /var/lib/nobody 
-s /bin/false %m$
        logon path = \\%L\profiles\.msprofile
        logon drive = P:
        logon home = \\%L\%U\.9xprofile
        domain logons = Yes
        os level = 65
        preferred master = Yes
        domain master = Yes
        ldap admin dn = cn=admin,dc=com
        ldap group suffix = ou=group
        ldap idmap suffix = ou=Idmap
        ldap machine suffix = ou=Machines
        ldap passwd sync = yes
        ldap suffix = dc=com
        ldap ssl = no
        ldap timeout = 5
        ldap user suffix = ou=people
        usershare allow guests = Yes
        idmap backend = ldap:ldap://127.0.0.1
        cups options = raw

[homes]
        comment = Home Directories
        valid users = %S, %D%w%S
        read only = No
        inherit acls = Yes
        browseable = No

[profiles]
        comment = Network Profiles Service
        path = %H
        read only = No
        create mask = 0600
        directory mask = 0700
        store dos attributes = Yes

[users]
        comment = All users
        path = /home
        read only = No
        inherit acls = Yes
        veto files = /aquota.user/groups/shares/

[groups]
        comment = All groups
        path = /home/groups
        read only = No
        inherit acls = Yes

[printers]
        comment = All Printers
        path = /var/tmp
        create mask = 0600
        printable = Yes
        browseable = No

[print$]
        comment = Printer Drivers
        path = /var/lib/samba/drivers
        write list = @ntadmin, root
        force group = ntadmin
        create mask = 0664
        directory mask = 0775

[netlogon]
        comment = Network Logon Service
        path = /var/lib/samba/netlogon
        write list = root

From: steve <steve at steve-ss.com>
Date: Sat, 5 Nov 2011 01:07:58 +0100
> i am trying to join a win 7 client to my samba pdc. Authentication is via
ldap
> which is working fine.
> I have added the two windows 7 registry items:
> 
> HKLM\System\CCS\Services\LanmanWorkstation\Parameters
>             DWORD  DomainCompatibilityMode = 1
>             DWORD  DNSNameResolutionRequired = 0
(snip)
> When I try to add the machine to the domain  get the win 7 error:
> 'The specified computer could not be found. Contact an administrator to
verify
> if the account is in the domain. . .'
> Root has a samba password which I specify when joining.
> Could anyone help here?
> My smb.conf is:
> 
> [global]
>         workgroup = HH1
>         map to guest = Bad User
>         passdb backend = ldapsam:ldap://127.0.0.1
>         printcap name = cups
>         add machine script = /usr/sbin/useradd  -c Machine -d
/var/lib/nobody
> -s /bin/false %m$
(snip)

Use simple "%u" instead of "%m$", see smb.conf(5) for
details.

---
TAKAHASHI Motonobu <monyo at samba.gr.jp>

Please keep CC to the list.

From: steve <steve at steve-ss.com>
Date: Sat, 5 Nov 2011 08:33:37 +0100
> On Saturday 05 Nov 2011 04:08:49 you wrote:
> > From: steve <steve at steve-ss.com>
> > Date: Sat, 5 Nov 2011 01:07:58 +0100
> > 
> > Use simple "%u" instead of "%m$", see smb.conf(5)
for details.
> > 
> > ---
> > TAKAHASHI Motonobu <monyo at samba.gr.jp>
> 
>  I changed that but no luck. The logs give this:
> 
> Nov  5 08:27:18 hh1 smbd[7285]: [2011/11/05 08:27:18.540172,  0] 
> passdb/pdb_interface.c:348(pdb_default_create_user)
> Nov  5 08:27:18 hh1 smbd[7285]:   _samr_create_user: Running the command 
> `/usr/sbin/useradd  -c Machine -d /var/lib/nobody -s /bin/false
steve-pc$'
> gave 83
Simply running "/usr/sbin/useradd  -c Machine -d /var/lib/nobody -s
/bin/false steve-pc$" on your command line is successed?

If not, arguments for useradd is not good, so it's not a problem for
Samba, but for useradd.

Also you had better search why useradd returns 83.

---
TAKAHASHI Motonobu <monyo at samba.gr.jp>