Help answer threads with 0 replies.
Go Back > Forums > Linux Forums > Linux - Newbie
User Name
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!


  Search this Thread
Old 09-20-2009, 04:09 AM   #1
LQ Newbie
Registered: Sep 2009
Location: Christchurch, New Zealand
Distribution: CentOS
Posts: 5

Rep: Reputation: 0
Question Domain Controller Authentication under Samba not working!!


I have recently been transferring a network infrastructure from Server 2003 to CentOS and have setup DNS, DHCP, Samba.
I have nearly completed implementing a PDC under Samba and everything was going smoothly. The hitch I'm having is logging on from an XP client to the DC. It allows the logon to happen but gives me a temporary profile only, showing two errors at logon about not being able to load a roaming/local profile.

I have looked at the log file:
[2009/09/17 13:38:27, 0] auth/auth_util.c:create_builtin_administrators(844)
create_builtin_administrators: Failed to create Administrators
[2009/09/17 13:38:27, 2] auth/auth_util.c:create_local_nt_token(966)
create_local_nt_token: Failed to create BUILTIN\Administrators group!
[2009/09/17 13:38:27, 0] auth/auth_util.c:create_builtin_users(810)
create_builtin_users: Failed to create Users

As far as I know, the account database is correct on the Samba side. I know that for a first logon to the domain, a root account must be used, I have given this a try as well as several other user accounts. The computer account has a trust relationship with the domain. I'm guessing that a problem may exist in the permission side of things but have really only been plucking at straws to try and get it working.

I don't have too much Linux knowledge and would really appreciate your help!

Old 09-20-2009, 06:32 AM   #2
Registered: Feb 2004
Distribution: Debian Jessie
Posts: 259

Rep: Reputation: 32
I think you might have to tell Samba about the user account XP is going to connect with.
On the Linux box, Try:

smbpasswd -a <user account XP is trying to access PDC with>
Old 09-21-2009, 12:12 AM   #3
LQ Newbie
Registered: Sep 2009
Location: Christchurch, New Zealand
Distribution: CentOS
Posts: 5

Original Poster
Rep: Reputation: 0
I will give that a try tomorrow when I go into work.

What about the root account on Samba that I need to join the domain with first? When I join with a user on the XP client, the user is an account in Samba, not on the XP machine. So shouldn't it not matter??

And if I do need to join say the Administrator account, do I enter, 'BUILTIN\Administrator' with 'smbpasswd -a' or just 'Administrator'?

Thanks for your help
Old 10-05-2009, 06:01 PM   #4
LQ Newbie
Registered: Sep 2009
Location: Colorado
Distribution: RedHat 5, SuSE 10
Posts: 9

Rep: Reputation: 1
In this case it looks like it's trying to find information from the PDC about the local groups "Administrators" and "Users". You could try creating those two groups manually, or set Samba up to automatically create groups it doesn't know about using something like this in smb.conf:
add group script = /usr/sbin/groupadd "%g"
(or whatever is appropriate for your flavor of Linux)

As far as adding users via smbpasswd, you don't need to specify a domain for that command.


controller, dc, domain, pdc, samba

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off

Similar Threads
Thread Thread Starter Forum Replies Last Post
Samba authentication using a windows domain controller _os_ Linux - Server 4 08-05-2009 05:50 AM
Stop one profile from roaming in domain with samba domain controller aiurm Linux - Server 4 10-16-2008 06:12 AM
Domain Controller Samba htphuc01t1 Linux - Server 1 05-06-2008 10:54 AM
Authentication of Linux machines from windows 2000 domain controller jomy Linux - Networking 1 12-05-2004 02:25 AM
help with new samba domain controller bladrag Linux - Networking 5 05-04-2004 09:52 PM > Forums > Linux Forums > Linux - Newbie

All times are GMT -5. The time now is 04:39 AM.

Main Menu
Write for LQ is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration