Samba PDC: err "no account in domain"

[Pavel Lisy]

On Po, 2003-02-03 at 15:20, Jiri Chmelik wrote:
> na nove nainstalovanem serveru Suse 7.3 jsem nakonfiguroval sambu 2.2.7a
> jako PDC, stanice W2k SP1, posleze SP3 (problem je stejny)
> 
> [global]
>  client code page = 852
>  character set = ISO8859-2
>  workgroup = domena
>  netbios name = SERVER
>  server string = Server
>  encrypt passwords = Yes
>  log file = /var/log/samba/log.%m
>  time server = Yes
>  unix extensions = Yes
>  socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
>  printcap name = CUPS
>  domain admin group = @admin
>  admin users = @admin
>  valid users = @mikro
>  printer admin = @mikro
>  add user script = /usr/sbin/useradd -d /dev/null -g pocitace -s /bin/false
> %m$
>  logon script = logon.bat
>  domain logons = Yes
>  os level = 65
>  preferred master = Yes
>  domain master = Yes
>  printing = cups
>  atd..
> 
> zalozil skupiny: pocitace (200), admin (400) a mikro (300)
> vytvoril ucet administrator:
> useradd -g admin -G mikro -m administrator (zkousel jsem i s -G mikro,root)
> pridal ho do samby:
> smbpasswd -a administrator <heslo>
> (zkousel i nastavit heslo administratora do linuxu)
> 
> pri pokusu o pripojeni pocitace do domeny mi vytvori ucet pocitace
> v shadow
> chmelik$:!:12086:0:99999:7:::
> v passwd
> chmelik$:x:501:200::/dev/null:/bin/false
> v /etc/smbpasswd
> chmelik$:501:NO PASSWORDXXXXXXXXXXXXXXXXXXXXX:NO
> PASSWORDXXXXXXXXXXXXXXXXXXXXX:[NDW        ]:LCT-3E3E7967:
> 
> v logu se objevi
> [2003/02/03 14:44:30, 0] smbd/service.c:make_connection(381)
>   make_connection: administrator logged in as admin user (root privileges)
> [2003/02/03 14:44:30, 0] rpc_server/srv_samr_nt.c:_samr_set_userinfo(2485)
>   _samr_set_userinfo: Unable to get smbpasswd entry for uid 0
> [2003/02/03 14:44:30, 0]
> rpc_server/srv_samr_nt.c:_samr_delete_dom_user(2691)
>   _samr_delete_dom_user: Not yet implemented.
> [2003/02/03 14:44:31, 0] smbd/service.c:make_connection(381)
>   make_connection: administrator logged in as admin user (root privileges)
> [2003/02/03 14:44:31, 0] rpc_server/srv_netlog_nt.c:get_md4pw(188)
>   get_md4pw: Workstation chmelik$: no account in domain
> 
> a W2k vyhodi hlasku:
> ..doslo k chybe..
> pouzity ucet je ucet pocitace, k pristupu k tomuto serveru pouzijte globalni
> uzivatelsky ucet nebo mistni uzivatelsky ucet.
> 
Automaticke vytvareni uctu mi fungovalo. Pokud uz jste neco zkousel , je
nutne smazat vsechny zaznamy pro dany pocitac. (/etc/passwd, /etc/group,
/etc/samba/smbpasswd), potom zkusit pripojit pocitac do domeny a zadat
ze to chce uzivatel root s heslem, ktere ma root v /etc/samba/smbpasswd.
Dle dokumentace v sambe to zatim s jinym uzivatelem nefunguje.

Vas problem bude asi v tom, ze administrator nema UID 0
Ale udelejte pres roota a melo by to fungovat.

Pavel

-- 
Pavel Lisy <pali na tmapy.cz>
T-MAPY spol. s r.o.