Good day to everyone!

Ok, I am at work, with a fedora core 1 box, trying to join the domain in our office. Unfortunately, the domain has a Windows 2003 server running as the domain controller, and it will only allow access through encrypted passwords. Therein lies my problem. I added winbind to start through chkconfig, and it is running from boot. I boot into runlevel 3, and before I startx, I su and do "net join -S <domain controller> -U <mydomainname>%<mypassword>. I get a message about realm not being set in smb.conf, but then then it ends with the message "joined <generic domain name here>".

I can open nautilus, send it to smb:/// and see the domain. I click on the domain and can see all the computers (except my own, but that isn't really a problem for me). When I click on individual computers, it brings up an authentication required window, and tells me my password will be sent unencrypted. This infuriates me. I upgraded to FC1 in hopes that samba-common and samba-client 3.0.4 would allow for encrypted passwords, but it isn't happening. Using the same username/pass that I used to join the domain in the first place, or to check my exchange mail on that server, I can't view the shared files. The authentication required box just keeps returning as fast as I can hit enter. I'm certain that the unencrypted password is the problem. Here is my smb.conf file:

[global]
netbios name = Jim
security = domain
workgroup = GENXWIFI
log file = /var/log/samba.log
log level = 1
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_RCVBUF=8192 SO_SNDBUF=8192
wins support = no
encrypt passwords = Yes
os level =20
password server = *
winbind uid = 10000-20000
winbind gid = 10000-20000


As you can see, it should be encrypting my passwords, yet it isn't. I've been all over this site, google, and samba mailing lists, and see many problems trying to get servers joined to a win domain, but not much on the client only side. Any help is greatly appreciated!

Peace,
JimBass

That also happens if you dont have a samba password (smbpasswd) or your samba user isnt being authenticated on the other end. You can see the machines, so samba is functioning, make sure your samba user is properly set up, and that you have a concurrent account on the domain.

The username and pass are good, they are the same that allow the "net join" command to work, and allow access to my exchange email. The domain account is fine, I have administrative access to the domain controller, and I confirmed that the pass is good.

As root, I did smbpasswd -a <mydomainname> <mydomainpass>, and now when I do smb:/// in nautilus, it brings up smb:/// as a folder! That should not be, it used to show me the domain. I disabled that account (thinking to undo the error), then tried smbpasswd -L <user> <pass>

Looks like I need more help!

Thanks and Peace,
JimBass