Trust relationship between WinXP Pro PC and Linux Smb

ahill · 12-01-2005, 05:24 PM

I have a Redhat Linux 9.0 server providing login services, file and print sharing via samba for a local domain. All the PC's here use Win2000 Pro except one which has WinXP Pro. I have added a machine account on the Linux machine for the XP machine and gotten the XP machine to join the domain.

However, when I try to add a user from the domain using the windows control panel (i.e. let the Linux box authenticate logins) I get the following error message.

"The user could not be added because the following error has occured: The trust relationship between this workstation and the primary domain failed."

The only help from Microsoft talks about a Windows domain controller which is useless in this situation.

Any thoughts on getting a Microsoft XP machine to trust a Redhat Linux domain controller?

amitsharma_26 · 12-02-2005, 08:34 AM

Let me unfold the complete procedure for doing this :
Follow these steps in the very same procedure..

Setting up machine - trust - accounts :

Quote:

useradd - d /dev/null -s /bin/false <machine-name>$
* After that go to your windows xp box & change the settings from workgroup you were previous in to DOMAIN name of as specified in your smb.conf.
* After this it will ask you for a login & password.. You have to enter you linux box administrator user & pass over there.. After this it will welcome you to the domain.
* Come back to your linux box..
smbpasswd -a -e -m <machine-name>

Prior to this you can useradd your desired users to your box & samba through smbpasswd.
Also add your administrator account to samba users through smbpasswd.

Tip : Disable xp firewall.. in some cases it might generate problems in joining the domain.
Also if possible download & install the latest samba package.

..amit..

ahill · 12-02-2005, 10:15 AM

I have already gone through the steps as described. I tried undoing all the above and recreating the machine account, joining the domain and adding the samba machine account. Still didn't work.

Disabling the firewall (Symantec) didn't help either.

I finally started playing with WinXP local security policy and tried disabling always encrypting data transfers. This seems to have done the trick. I was able to create a domain user account on the WinXP box and login using that account.

Thanks, for your input. I hope my discover helps another.

amitsharma_26 · 12-02-2005, 11:13 AM

Quote:

Originally posted by ahill
I finally started playing with WinXP local security policy and tried disabling always encrypting data transfers. This seems to have done the trick. I was able to create a domain user account on the WinXP box and login using that account.

It means you are not using samba latest version.. coz you do not have to do this with latest samba release.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
"requiresignorseal"=dword:00000000
"signsecurechannel"=dword:00000000

I think you might be using samba 2 or other version. I was expecting you to have latest samba 3 version & thts y i didnt mentioned it.

..amit..