Samba PDC and Domain Memeber
 

hi there,

i was just wondering if the same machine that is being run as a Samba domain controller can join the domain it is creating? because when i try to add it using 'net join' command i get this

[2005/09/18 21:56:50, 0] utils/net_ads.c:ads_startup(191)
ads_connect: Transport endpoint is not connected
Creation of workstation account failed
Unable to join domain WINDOWS.


here is my smb.conf file

#=============[Gobal=============

[global]
load printers = yes
domain logons = yes
os level = 65
security = ads
preferred master = yes
workgroup = Windows
logon script = %G\%G.bat
logon drive = H:
logon path = \\%L\profiles\%U\
logon home = \\%L\%U
domain master = yes
printing = cups
netbios name = home
local master = yes
realm = WINDOWS
encrypt passwords = yes

username map = /etc/samba/smbusers

winbind uid = 10000-20000
winbind gid = 10000-20000
winbind use default domain = yes
winbind enum users = yes
winbind enum groups = yes

#=============[Share]=============#
[netlogon]
comment = The domain logon service
path = /etc/samba/netlogon
public = no
browseable = no
writeable = no

[profiles]
comment = user profiles
path = /etc/samba/profiles
create mode = 0600
directory mode = 0700
writeable = yes
browseable = yes

[homes]
read only = no
browsable = no
path = /home/%U
writeable = yes
comment = User Home Drives

[root]
path = /
browseable = no
read only = no

[cd-rom]
path = /media/cdrom
browseable = yes
read only = yes
comment = CD-ROM on Samba



and here is my /etc/krb5.conf file

[libdefaults]
default_realm = WINDOWS

[realms]
[libdefaults]
default_realm = WINDOWS

[realms]
WINDOWS = {
kdc = fedora
default_domain = WINDOWS
kpasswd_server = fedora
admin_server = fedora
}

[domain_realm]
.fedora = WINDOWS

the nature of Windows NT is that there is no "member servers". You only get Primary Domain Controllers and Backup Domain controllers. If your samba server is a PDC (which holds the Security Accounts Manager) for all Windows NT domain hosts, then I imagine that trying to have it join the same domain that it is the PDC for will fail. maybe I read that sentence wrong and someone else will have a better answer, or if you could clarify what you meant by that.