WinXP/Win2K unable to join Samba Domain
 

I have a Samba (2.2.3a) Domain running on RH Linux 7.3

In the past I have been able to add clients without a problem but lately when I try to add a client, I get this error "Logon failure: unknown user or bad password". When I try with another logon (my domain logon), I get the error "Access is denied". I thought this was a problem with XP and I was reffered to this registry entry which has not solved the problem.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\netlogon\parameters
"RequireSignOrSeal"=dword:00000000

Is it possible that the master account that I was using to admit the clients to the domain is damaged and if so, how do I create another account on samba which has privileges to admit a new XP or Win 2K client.

Help appreciated.

did you update samba to 3.x?
what is if you add the user/machine acc with the scripts referred in smb.conf manually?

I have not updated Samba and not planning to do so while it works fine for my small network and until I'm very comfortable tweaking it.

You mean I try to run the add user script as entered in smb.conf manually on the command line? I have this line: add user script = /usr/bin/useradd -d /dev/null............

yes is it possible to add user and/or machine acc's with this commands?
just try to add the accs ... with smbpasswd you can modify your samba admin acc like you want this acc should always be able to be used as "log on" acc or to add machine accs if not please paste your error log

I have run useradd -d /dev/null -g 100 -s /bin/false -M toshiba-user$ where toshiba-user is the name of the XP computer and the account was created. However when I try to change the XP comp to the domain, I get the same error as before. I believe this procedure adds the machine as a user but how do you add it to samba. If I was adding a new user I would then run 'smbpasswd -a user' but what do you do for a computer name? Also, how do I edit the computer account that I was using as a master account just in case it has a problem too?

I managed to solve this. Apparently the account I was using to usher in the clients into samba was corrupted (no idea how) so I refreshed this and I was then able to enjoin the Win XP computer onto the domain.

Thank you for your help blubbfish.

I just want to know how you refresh this, the account you use for ushering in the clients into samba. Because I wanted to reset my password because I can not join a Windows 2000 client to samba with ldap. Thanks.