Ok, I have followed the instructions to a "T" in the "by example" at samba.org for this project I am doing for my final in school.

Samba.org => by example => ch9 =>Active Directory Domain with Samba Domain Member Server & UNIX/Linux Client Domain Member.

But in the first part dealing with Domain Member Services when I run the "getent passwd" and "getent group" commands. It pulls from the files in the /etc and not the Win2k3 PDC. It seems I can join the domain, I can view users and groups via "wbinfo -u" & "wbinfo -g", but it wont let me log on.

Info:
1) SuSE 9.1 Pro
2) Samba 3.02
3) heimdal-0.6.1rc3-51
4) I have tryied config a seprate NTP server on my firewall and have tried pointing all my boxes to the win2k3 AD for NTP.
5) All dns is pointing to Win2k3.
6) All IP's are static.

A few questions I have to start this off with:
1) Can winbind and samba deal with supper--netting? ex 192.168.0.0/255.255.192.0
2) In SuSE using yast2, am I causing more problem by pre-setting up Kerberos and LDAP in the GUI?
3) The other thing I noticed was that in the gui, suse's smb client config can find and join a Win2k Adv Server Domain in 2000 native mode. But cant see a win2k3 in mixed mode. Yet Join using the "net ads join" command when win2k3 was in win2k3 Native mode. And my Question is, WHY?

Config files will be on my website by sun afternoon. Best way to contact me is via ICQ.

Thanks a Bunch
John F. Moore III

This might be because how suse manages passwords, as far as I know it does not use md5, and that might cause samba or the windows network to deny you logon since it does not get what it sees as a valid password. I know that you are able to choose which type of password encryption you want at install time, but it might be possible to do this at a later stage also. First an foremost, validate this, this is just a suggestion from me.

krisealv: SuSE does give you the option to use DES, md5, or blowfish. Check out YaST, "Security settings". (this is the case in 9.1 anyway).

I wasn't planning on joining this thread. I don't know very much about NT domains, and was curious as to how this pans out (I may need to do this in the future).