Samba and trust accounts

metalenkist · 06-13-2009, 05:31 AM

Hey all, I got a really annoying problem with and you guys just rock and hopefully can help me solve this problem.

I'm trying to set up samba as a PDC, I did the whole smb config thingy, I added samba users and machines but still it won't work

I get this really annoying error:

Quote:

cynthia:~ # net join -S CYNTHIA -Uweemen%justanotherpassword
[2009/06/13 12:05:01, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(349)
error setting trust account password: NT_STATUS_ACCESS_DENIED
Unable to join domain CYNTHIA.

This works well:

Quote:

cynthia:~ # net join -S CYNTHIA -Uroot%nottherealrootpassword
Joined domain CYNTHIA.

what is going wrong here? If I need to post additional info just let me know!

Already thanks in advance

Leon

I posted my smb.conf below

Code:

# smb.conf is the main Samba configuration file. You find a full commented
# version at /usr/share/doc/packages/samba/examples/smb.conf.SUSE if the
# samba-doc package is installed.
# Date: 2008-08-28
[global]
	log level = 3
	netbios name= CYNTHIA
	include = /etc/samba/dhcp.conf
	logon drive = P:
	workgroup = CYNTHIA
	logon path = \\%L\profiles\.msprofile
	os level = 99
	map to guest = Bad User
	encrypt passwords = yes
	usershare allow guests = Yes
	logon home = \\%L\%U\.9xprofile
	#printing = cups
	#printcap name = cups
	#printcap cache time = 750
	#cups options = raw
	
	time server = yes
	domain master = yes
	local master = yes
	#preferred master = yes
	username map = /etc/samba/smbusers
	admin users = root
	domain logons = yes
	security = domain
	add machine script = /usr/sbin/useradd -g 100 -d /dev/null -s /bin/false %u
[netlogon]
	comment = Net Logon Service
	path = /usr/local/netlogon
	writable = no
	browsable = no

[profiles]
	path = /home/profiles
	browsable = no
	writable = yes
	create mask = 0600
	directory mask = 0700

[Home]
	comment = Home directory
	writable = yes
	veto files = /aquota.user/groups/shares/
	path = /home/%U
	inherit acls = Yes


[Shares]
	comment = Public shares
	writeable = yes
	path = /shares

[Projects]
	comment = Project sources
	writeable = yes
	user = weemen
	path = /projects
	write list = weemen
	#only user = yes

[Webserver]
	writeable = yes
	path = /srv/www/htdocs/
	write list = weemen
	#only user = yes
	comment = Webserver Cynthia
	user = weemen
	allow hosts = 192.168.0.3

chitambira · 06-15-2009, 05:21 AM

you need root/admin privileges to join a machine to the domain. apparently it seens user weemen does not have such privileges.

metalenkist · 06-16-2009, 06:57 AM

Hey Chitambira, thnx a lot for the help unfortunately I did't help me

I have user weemen placed in the username map = /etc/samba/smbusers where the root user also is.
This "net join -S CYNTHIA -Uweemen%justanotherpassword" works now.

After that I tried it in Windows but then I got my trust account error back (even with root).

Did I misunderstood something? Is there a way to add a machine manual to the domain and is it possible
to get a confirmation that the machine really joined the domain

oh and forgot to tell that my laptop runs on Windows 7. That might be important to know.

metalenkist · 06-18-2009, 02:45 PM

I've tried on a Win XP box as well it allso didn't work there

I'm getting quite insane now.

I tested my config with testparm and there were no serious issues with it.
I added wins support (which got me the rid of some other error: "there are currently no logon servers available to service the logon request"

I'm really getting frustrated now, does anyone have any ideas to test things and get my problem solved?

thnx in advance

billymayday · 06-18-2009, 04:06 PM

If you are using the RC for Windows 7, I think you are stuffed.

I'll see if I can find the posts in the samba mailing list for this one, and post back.

billymayday · 06-18-2009, 04:10 PM

Read this thread http://lists.samba.org/archive/samba...ay/148052.html

metalenkist · 06-21-2009, 06:16 AM

Sorry for my late response. I got ill the last few days but ehmmmm...

...w00tZ0r5, it works

I already did the registery changes but apperently I didn't check my version well.
After I installed the new version (3.3.4) and making a new smb.conf all my problems disappeared

Somehow it remains a mystery for me why my old XP laptop didn't work on the old version but that
doensn't matter anymore

Thank you very much all!!