Linux PDC & Win2K / XPpro

[Stevebon27]

I am running Redhat Linux servers and one is the PDC. I am using samba as the domain controller and linking win9x clients has worked.

With the newer operating systems available (and the shortly unavalibility of Win9x clients) I am now looking for help in linking a Win2K / XPpro client to this domain.

I get a message stating -
The following error occurred attempting to join domain domain. the account used is a computer account. Use your global user account or local user account to access this server.

Any help would be appreciated

[Compunuts]

What version of Red Hat?? And your SAMBA is later than 2.2 ?

[Stevebon27]

Redhat 7.2
Samba 2.2.2

[airhead]

Looks like you might not have set the Windows users up on your RH box. I can't recall if they need the same passwords as the windows box but give it a whirl and see what happens.

Yeah, if I remember right the passwords have to be the same. Check also about whether or not you have set them up for encrypted passwords. But it sounds like your trying to connect to the pdc under an invalid account or share. U sure you have that part setup right?

[Stevebon27]

Ive used Linuxconf to setup my users - they all work when logging from a Win9x machine. Using the same user/password combination from XP/2K fails. Is this to do with the SID's that 2K/XP use?

Did you enable password encryption on the 98 machines? If you didnt, then that might be your prob. Be default, the 9x systems use UN-encrypted passwords. If you configured samba to not use them either, it wont work since 2k etc. automatically use the encrypted ones.

[cloverm]

This is my smb.conf file that works as a PDC controller:

# Global parameters
[global]
workgroup = HANDY
netbios name = FILESERVER
server string = %h server (Samba %v)
encrypt passwords = Yes
update encrypted = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\sUNIX\spassword:* %n\n *Retype\snew\sUNIX\spassword:* %n\n .
syslog = 0
max log size = 1000
socket options = IPTOS_LOWDELAY TCP_NODELAY SO_SNDBUF=4096 SO_RCVBUF=4096
domain admin group = @adm
add user script = /usr/sbin/useradd -d /dev/null -g machines -s /bin/false -M %u
logon script = logon.cmd
logon drive = H:
domain logons = Yes
os level = 64
preferred master = True
domain master = True
dns proxy = No
admin users = admin

[homes]
comment = Home Directories
read only = No
create mask = 0700
directory mask = 0700
browseable = No

[printers]
comment = All Printers
path = /tmp
create mask = 0700
printable = Yes
browseable = No

[netlogon]
path = /usr/local/samba/lib/netlogon
write list = admin

[profiles]
path = /export/smb/ntprofile
read only = No
create mask = 0600
directory mask = 0700

[users]
path = /home
read only = No

I followed the instructions here: http://de.samba.org/samba/ftp/docs/h...PDC-HOWTO.html

Make sure you separate user and computer accounts. That seems to be the problem with the error message you're getting.
One more trick: even though the user "admin" is set up as admin in the smb.conf file, it didn't work for me, so I set up root as a samba user (behind a firewall it's not that bad!). When you try to join the domain from W2K use root as the account that has administrator rights. Let me know if you need more help. It took me a whole week to figure this sucker out and get it set up.

[thayne]

Couldn't he just remove the root account after he joined the windows machine?