[solved] Samba 3 PDC

Grand Styolz · n00b Joined: 06 May 2004 Posts: 43 Location: Oly, WA

For about a week, I've been trying to get my gentoo machine to be a PDC on my network. I've been to countless HOWTO's and tutorial sites to figure out how to do it. But every time I try to make one of my XP/2K machines to join the domain, it says that my username and password is incorrect. I understand you can only use your root account to allow people to join the domain, and that exactly what I did!! I have no idea what I am doing wrong?!? Here is the link to the last HOWTO I was on... http://www.linuxhelp.ca/forums/index.php?act=ST&f=3&t=3823 and if this helps, I have Samba 3.0.2a running (Which I don't think is the problem...) Maybe someone here can figure out what I did wrong...and btw I followed those exact instructions, Step-By-Step. I think I've done it at least 4 times and still no go \=
_________________
emerge grand_styolz

YopWongSapn · l33t Joined: 26 Jan 2004 Posts: 627

Did you add root as a Samba user? That's by far the most common mistake with Samba. I've done it countless times.

Samba does not (by default) use the system's password file. It has its own user management, and users need to be added before they can log onto the Samba machine.
_________________
Gentoo...it's like wiping your ass with silk. Or sandpaper.

Grand Styolz · n00b Joined: 06 May 2004 Posts: 43 Location: Oly, WA

nobspangle · Posted: Fri Jun 11, 2004 10:45 pm Post subject:

I've never got a machine to automatically create it's own account on a Samba server (although it is possible) I've always had to first manually create the account on the server and then add the windows machine.

This doesn't, however, appear to be your problem. Could you post the output from testparm.

Grand Styolz · n00b Joined: 06 May 2004 Posts: 43 Location: Oly, WA

nobspangle · Posted: Sat Jun 12, 2004 10:44 am Post subject:

first off you need
encrypt passwords = yes
in your [global] section

However your problem seems to be in your password database, what is the output of
pdbedit -L

you should get a list of users together with UIDs and groups, if this is not the case post the output here.

Grand Styolz · n00b Joined: 06 May 2004 Posts: 43 Location: Oly, WA

*added* encrypt passwords = yes

tux root # pdbedit -L
ntuser:1002:
tux root #
_________________
emerge grand_styolz

nobspangle · Posted: Sat Jun 12, 2004 6:34 pm Post subject:

It looks like you have no root samba user
what happens if you try to add the root samba user like this

Grand Styolz · n00b Joined: 06 May 2004 Posts: 43 Location: Oly, WA

tux root # pdbedit -a -u root
new password:
retype new password:
tdb_update_sam: Failing to store a SAM_ACCOUNT for [root] without a primary group RID
Unable to add user! (does it already exist?)
tux root #
_________________
emerge grand_styolz

nobspangle · Posted: Sat Jun 12, 2004 10:59 pm Post subject:

what do you get for

Grand Styolz · n00b Joined: 06 May 2004 Posts: 43 Location: Oly, WA

tux root # net groupmap list
Domain Admins (S-1-5-21-1060390961-1268263197-2987771102-512) -> root
System Operators (S-1-5-32-549) -> -1
Domain Admins (S-1-5-21-1605391454-3489333530-2847811489-512) -> adm
Domain Guests (S-1-5-21-1060390961-1268263197-2987771102-514) -> nobody
Replicators (S-1-5-32-552) -> -1
Guests (S-1-5-32-546) -> -1
Domain Guests (S-1-5-21-1605391454-3489333530-2847811489-514) -> nobody
Domain Admins (S-1-5-21-2053994848-1283631494-2845739797-512) -> -1
Domain Admins (S-1-5-21-2727105517-2836918896-1788635133-512) -> -1
Domain Guests (S-1-5-21-2053994848-1283631494-2845739797-514) -> -1
Domain Guests (S-1-5-21-2727105517-2836918896-1788635133-514) -> -1
Power Users (S-1-5-32-547) -> -1
Print Operators (S-1-5-32-550) -> -1
Administrators (S-1-5-32-544) -> -1
Domain Users (S-1-5-21-1605391454-3489333530-2847811489-513) -> users
Domain Users (S-1-5-21-1060390961-1268263197-2987771102-513) -> -1
Account Operators (S-1-5-32-548) -> -1
Domain Users (S-1-5-21-2727105517-2836918896-1788635133-513) -> -1
Domain Admins (S-1-5-21-4015466948-996750401-4152269970-512) -> -1
Domain Users (S-1-5-21-2053994848-1283631494-2845739797-513) -> -1
Domain Guests (S-1-5-21-4015466948-996750401-4152269970-514) -> -1
Domain Users (S-1-5-21-4015466948-996750401-4152269970-513) -> -1
Backup Operators (S-1-5-32-551) -> -1
Users (S-1-5-32-545) -> -1
_________________
emerge grand_styolz

nobspangle · Posted: Sun Jun 13, 2004 12:10 am Post subject:

that's your problem,
Where have all those group mappings come from? It looks like they belong to at least three or four domains.

you may want to try deleting your group mappings then see if you can add root as a samba user.

Grand Styolz · n00b Joined: 06 May 2004 Posts: 43 Location: Oly, WA

..lol how do i do that?!?
_________________
emerge grand_styolz

nobspangle · Posted: Sun Jun 13, 2004 7:54 am Post subject:

Grand Styolz · n00b Joined: 06 May 2004 Posts: 43 Location: Oly, WA

dude, your a life saver. I don't know how I would of servived without you man...lol thnx for all the help. It's working fine now ^^
_________________
emerge grand_styolz

nobspangle · Posted: Mon Jun 14, 2004 7:45 am Post subject:

That's cool,
I have a question for you now.
1. Can you change passwords and other stuff with the user manager for domains tool? If so what account are you logged into the PC with when you do that and what groups are they a member of?

Grand Styolz · n00b Joined: 06 May 2004 Posts: 43 Location: Oly, WA