Samba Problems

From MissionTechWiki

Adding a Samba 2.2 server (Redhat 7) to a Windows 2003 domain.

This is what worked for me.

On the windows server, create a computer account, with the netbios name of the server. This account must be a Pre-Windows 2000 computer.

On the samba server, the following settings must be in the config file

domain logons = no
domain master = no
nt acl support = yes
password server = domain server (_eg. Server01_)
security = domain
workgroup = new domain (_eg. MercyShips_)

Once these settings are in place, restart samba

# service smb restart

and issue the command to join the domain

# smbpasswd -j MercyShips -r Server01

You will get the following message if all is successful.

2007/09/19 16:01:45 : change_trust_account_password: Changed password for domain MERCYSHIPS.
Joined domain MERCYSHIPS.

Possible Errors

cli_net_auth2: Error NT_STATUS_ACCESS_DENIED
cli_nt_setup_creds: auth2 challenge failed
modify_trust_password: unable to setup the PDC credentials to machine SERVER01. Error was : NT_STATUS_ACCESS_DENIED.
2007/09/19 16:01:12 : change_trust_account_password: Failed to change password for domain MERCYSHIPS.
Unable to join domain MERCYSHIPS.

This was because I was had created a regular computer trust account, instead of a pre-windows 2000 trust account. I deleted the trust account and created a new pre-windows 2000 trust account.

cli_net_auth2: Error NT_STATUS_NO_TRUST_SAM_ACCOUNT
cli_nt_setup_creds: auth2 challenge failed
modify_trust_password: unable to setup the PDC credentials to machine SERVER01. Error was : NT_STATUS_NO_TRUST_SAM_ACCOUNT.
2007/09/19 15:59:05 : change_trust_account_password: Failed to change password for domain MERCYSHIPS.
Unable to join domain MERCYSHIPS.

This is because I still had domain logons = yes in my configuration. Windows thought I must have been some other domain controller, or backup controller. Once this option was set to no and samba restarted, I could proceed with joining.

Original page: http://www.missiontech.info/wiki/Samba_Problems
from the MissionTech Wiki created by the International Conference on Computers and Missions