samba - Nov 2001 - Addition - Help!!! Windows XP Joining Samba 2.2.2 Domain

Have also now changed the root username back to root to see if that
helped (although it doesn't cause any problems with any other
applications), but it does now mean that I get the same error message
using the root user as I do using the user seri:
	The following error occurred attempting to join the domain
"HOME":
	Access is denied.
I have also added the line
	nt acl support = no
to the [global] section but am still having the same problems.

Any ideas what so ever, please....

Seri

-----Original Message-----
From: samba-admin@lists.samba.org [mailto:samba-admin@lists.samba.org]
On Behalf Of Seri Al-Najjar
Sent: 12 November 2001 17:33
To: Samba Mailing List
Subject: Help!!! Windows XP Joining Samba 2.2.2 Domain

Okay, I'm at the end of my amazing internet research skills, and now I'm
having to offer this problem up to the mailing lists.

In a fit of stupidity I've just upgraded my machine from 98 to XP
(purely for research ;), and now I need to add it to the domain.

My root user on the Linux box running samba is called guB~b1n5 and the
Linux box is configured to use PAM and SSL, I've manually created
machine entries for the computer I'm adding using useradd and smbpasswd.

When I try to add my machine to the domain using the username guB~b1n5
and the relevant password I receive the message:
	The following error occurred attempting to join the domain
"HOME":
	Logon failure: unknown user name or bad password.

I've also configured my own user (seri) to be a domain admin, and when I
try to add the machine to the domain using this user and password I
receive the message:
	The following error occurred attempting to join the domain
"HOME":
	Access is denied.

Looking through the logs I see that when I try to add the computer to
the domain using the guB~b1ns (root) user no entries appear in either
log.smbd or log.snickers (snickers being the name of the machine I'm
adding), if I try to add the computer using the user name seri I see the
following in log.snickers:
[2001/11/12 17:23:06, 0]
rpc_server/srv_samr.c:api_samr_set_userinfo(672)
  api_samr_set_userinfo: Unable to unmarshall SAMR_Q_SET_USERINFO.
[2001/11/12 17:23:06, 0] passdb/pdb_smbpasswd.c:startsmbfilepwent(171)
  startsmbfilepwent_internal: unable to open file
/usr/private/smbpasswd. Error was Permission denied
[2001/11/12 17:23:06, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1459)
  unable to open passdb database.

Probing a little further, if I test the server using:
	smbclient -L localhost -U seri
I receive a full list of the correct shares, if I do the same using:
	smbclient -L localhost -U guB~b1n5
I see:
	session setup failed: ERRSRV - ERRbadpw (Bad password -
name/password pair in a Tree Connect or Session Setup are invalid.)

I've been through my smb.conf, smbpasswd, passwd & group files and
I'm
stumped, I've enclosed them with this mail in the hope they will help.

Any suggestions gratefully received.

Seri Al-Najjar

--------------

----------smb.conf----------
# Samba config file created using SWAT
# from 10.16.42.252 (10.16.42.252)
# Date: 2001/11/12 13:53:39

# Global parameters
[global]
        workgroup = HOME
        netbios name = YORKIE
        interfaces = eth0 lo
        encrypt passwords = yes
        min passwd length = 0
        null passwords = Yes
        log file = /var/log/samba/log.%m
        max log size = 50
        domain admin group = guB~b1n5 seri @ntadmin
        domain guest group = ntguest @ntguest
        add user script = /usr/sbin/useradd -d /dev/null -g 100 -s
/bin/false -M %u
        logon script = logon.bat
        logon path = \%L\profiles\%U
        logon drive = W:
        logon home = \%L\%U\.profiles
        domain logons = Yes
        os level = 64
        preferred master = True
        domain master = True
        wins support = Yes
        hosts allow = 10.16.42. 127.
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192


[netlogon]
        path = /home/samba/netlogon
        write list = guB~b1n5 seri @ntadmin

[web]
        path = /home/www
        read only = No

[profiles]
        path = /home/samba/ntprofile
        read only = No
        create mask = 0600
        directory mask = 0700

[homes]
        comment = Home Directories
        read only = No
        browseable = No

[printers]
        comment = All Printers
        path = /usr/spool/samba
        create mask = 0600
        directory mask = 0700
        printable = Yes
        browseable = No
----------smb.conf----------

----------smbpasswd----------
seri:1000:C819160E87A9C8EFC2265B23734E0DAC:F773C5DB7DDEBEFA4B0DAE7EE8C50
AEA:[U          ]:LCT-3BEFC4C3:
helen:1001:AAD3B435B51404EEAAD3B435B51404EE:31D6CFE0D16AE931B73C59D7E0C0
89C0:[U          ]:LCT-3B4CC6E0:
caitlin:1002:AAD3B435B51404EEAAD3B435B51404EE:31D6CFE0D16AE931B73C59D7E0
C089C0:[U          ]:LCT-3B4CC6E5:
jon:5001:6197BBF97427C246AAD3B435B51404EE:9E04D34BC285A130C215E9DEDC66CC
D7:[U          ]:LCT-3B4F5E0A:
root:5012:D480EA9533C500D4AAD3B435B51404EE:329153F560EB329C0E1DEEA55E88A
1E9:[U          ]:LCT-3BEFC619:
snickers$:5013:23FF65E5B1A3207193E28745B8BF4BA6:9CDBB55FE0C3674A3AF10999
B8DF6DA6:[W          ]:LCT-3BEFD619:
guB~b1n5:0:C819160E87A9C8EF382A5EF502CE946B:8D7D16AACA4CE189E04F3155E704
FAFE:[UX         ]:LCT-00000000:
meme:5014:4AE72DADF7CD3FBBAAD3B435B51404EE:0952200D1B50BBA9DD84CFE73E29B
C15:[UX         ]:LCT-00000000:
ntguest:5015:AAD3B435B51404EEAAD3B435B51404EE:31D6CFE0D16AE931B73C59D7E0
C089C0:[UX         ]:LCT-00000000:
----------smbpasswd----------

----------/etc/passwd----------
guB~b1n5:x:0:0:root:/root:/bin/bash
bin:x:1:1::/home/ftp:/bin/nono
nobody:x:9:13::/home/ftp:/bin/nono
ftp:x:14:14::/home/ftp:/bin/nono
seri:x:1000:0:Seri Al-Najjar:/home/seri:/bin/bash
helen:x:1001:100:Helen Al-Najjar:/home/helen:/bin/bash
caitlin:x:1002:100::/home/caitlin:/bin/bash
postfix:x:5001:500:postfix:/home/ftp:/bin/nono
cyrus:x:5002:502:cyrus:/home/ftp:/bin/nono
manager:x:5006:100::/home/manager:
spam:x:5008:100::/home/spam:
pauljohn:x:5009:100::/home/pauljohn:
danoq1:x:5010:12::/home/danoq1:/bin/sh
snickers$:x:5013:100:snickers:/dev/null:/bin/false
meme:x:5014:100::/home/meme:
ntguest:x:5015:506::/home/ntguest:
----------/etc/passwd----------

----------/etc/group----------
root:x:0:
bin:x:1:
sys:x:2:
kmem:x:3:
tty:x:4:
tape:x:5:
daemon:x:6:
floppy:x:7:
disk:x:8:
lp:x:9:
dialout:x:10:
audio:x:11:
users:x:12:
nobody:x:13:
ftp:x:14:
users:x:100:
postfix:x:500:
maildrop:x:501:
cyrus:x:502:
nogroup:x:503:
ntadmin:x:505:guB~b1n5,seri
ntguest:x:506:ntguest
----------/etc/group----------


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Seri Al-Najjar wrote:
> 
> Have also now changed the root username back to root to see if that
> helped (although it doesn't cause any problems with any other
> applications), but it does now mean that I get the same error message
> using the root user as I do using the user seri:
>         The following error occurred attempting to join the domain
> "HOME":
>         Access is denied.
> I have also added the line
>         nt acl support = no
> to the [global] section but am still having the same problems.
> 
Is it XP Home, or Professional?  I'm given to understand that Home
cannot log into a domain!

I'm sure someone will correct me if I'm wrong...