Hi...

I've been trying to set up samba to act as a master domain controller for windoze 2000 clients.

When I try to get the client to join the domain, I get greeted with either of the following messages on the client.

"The username/password is not valid" or
"The username matches an existing set of credentials" or words to that effect.

I am trying to join the domain as root.

Here's my smb.conf file, made with SWAT.

[global]
log file = /var/log/samba/log.%m
ldap ssl = no
idmap gid = 15000-20000
add group script = /usr/sbin/groupadd %g
delete group script = /usr/sbin/groupdel %g
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
add user to group script = /usr/sbin/usermod -G %g %u
logon drive = H:
domain master = Yes
map to guest = Bad User
encrypt passwords = yes
printer admin = @adm
passdb backend = tdbsam
wins support = true
dns proxy = No
printing = cups
server string = Samba Server %v
idmap uid = 15000-20000
workgroup = HOMELAN
logon path = \\%N\\profiles\%u
os level = 35
add user script = /usr/sbin/useradd -m %u
printcap name = cups
security = user
add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null
max log size = 50
delete user script = /usr/sbin/userdel -r %u
domain logons = Yes

[homes]
comment = Home Directories
read only = No
browseable = No

[printers]
comment = All Printers
path = /var/spool/samba
create mask = 0700
guest ok = Yes
printable = Yes
print command = lpr-cups -P %p -o raw %s -r # using client side printe
r drivers.
browseable = No

[print$]
path = /var/lib/samba/printers
write list = @adm, root
inherit permissions = Yes
guest ok = Yes

[pdf-generator]
comment = PDF Generator (only valid users)
path = /var/tmp
printable = Yes
print command = /usr/share/samba/scripts/print-pdf %s ~%u //%L/%u %m %I
"%J" &

[netlogon]
path = /var/lib/samba/netlogon
write list = ntadmin

[profiles]
path = /var/lib/samba/profiles
read only = No
create mask = 0600
directory mask = 0700
browseable = No

I have removed the some of the users shares from the above.

Any Ideas?

Cheers,
DBG

your add machine script doesn't look right

Things you may want to check

do the unix user names the clients log in with have access/read/write permission to the shared directories?

are you samba user names/passwords the same as your unix ones?

I can't help with domain issues - I still use win98 clients and simple shares.

Stuart

Yes...

Think I missed a %u at the end of it.

Yes they have permission and the smaba usernames are the same as the unix ones....

do you have machine trust accounts created already or are you relying on the script?