Topic: W2k domain logon

[karl]

Hi all,
I have tried to get Win2k pc's to log into a e-smith setup as pdc. I have tried Darrell's way and via the " trust-account rpm", but all fail. The error I recieve is
"error, the credentils supplied details confilct with an existing set of credentials "
Any help or pointers would be appreciated. Thanks in advance,
Karl

[andrew]

Hi Karl,

Did you upgrade the Win2k box with Service Pack 2? If so, there is a problem with Samba & SP2, which will not be rectified until Samba 2.2.1 is released.

The only workaround is to rollback to SP1, get it on the domain, then upgrade to SP2.

Hope that helps.

Andrew.

[karl]

Hi Andrew,
As yet I've not upgraded Win2k at all. It is still a virgin install. It works fine so I'm following "if it ain't broke,don't fix it".
I have tried renaming my pc to something else (fredfrog) and trying to connect that way, but still no success. I can remember reading somwhere about using "root" as the name with access rights to the domain, but the response is still the same.
I'm stuck

Regards Karl

[bill roy]

I have the same problem too. I have win2k SP1 and have tried to connect to the domain and still get the "credentials supplied" message...

[andrew]

Try this,

1.Create a UNIX user account for the win2k machine account " useradd -c 'win2k workstation' -M -s /bin/false -n workstationname$"
(note, "workstationname$" would be the name of the win2k box)

2.When the win2k workstation asks for a user with permissions to join you to the domain the root account has to be created for samba.
Add root to the smbpasswd file:
"smbpasswd -add root"
Changing root password in smbpasswd:
"smbpasswd root"
Enable the user root account:
"smbpasswd -e root"

This is from upgrading Samba, but should be the same for the e-smith install.

Andrew.

[karl]

I've tried what you suggested and still end up with the same response.
" The credentials you supplied conflict witha existing set of credentials"
I may have confused Samba with added "machine" users throught the "trust account" rpm, and via what you suggested. I am running out of ideas, but do you know of a way of checking for machine accounts, so as I can clean any out ?
I don't know where to go from here, do you suggest upgrading to Samba 2.2.x ?
If so did you fall into any problems. Thanks Andrew again for your assistance.

Karl

[Des Dougan]

I wasn't sure, from watching this thread, whether everyone was on the same page, and now I am sure...

Karl, fundamentally, you can't get a Win2K box to logon to Samba _unless_ you are using Samba 2.2. Samba 2.0.x simply does not have that capability. There are a number of threads on General, Experienced and devinfo forums which, if you search for "domain logon" or "win2k", you will find additional information.

Note that e-smith have not (yet) announced whether 2.2 is supported, so if you do install it, you may break something else (although others seem to have done it successfully).


Des Dougan

[karl]

Hi Des,
Thanks for your info. It was what was needed, someone to actually tell me if it would be a success or not. I bit the bullett and "rpm -i --force samba2.2x".
I backed up the smbpasswd file and copied it back after the install.
I let it install, then did a "signal-event post-upgrade ", then a reboot. The templates overwrote the standard samba as well as my custom ones. I then went through the normal procedure of adding a machine accoutn etc, and it worked. I could become a member of the domain. It even populated the profiles except for some access rights to some "start menu" stuff. I'm going to keep plugging on with this and see where I end up.
Regards      Karl

[andrew]

Here is a copy of the thread on upgrading Samba. I've upgrading together with three other e-smiths server's, and so far no trouble at all. I would however backup the server prior to upgrading (just in case!!).

Godd luck.

Hi!

Here's a way to get Win2k clients to login to a E-smith PDC.

1.Download Samba2.20

http://se.samba.org/samba/ftp/Binary_Packages/redhat/RPMS/7.0/samba-2.2.0-20010417.i386.rpm.

2.Install the new version by running"rpm -i --force samba-2.2.0-20010417.i386.rpm"
I'm sure theres alot of better ways to do this, all I know is when you do a regular "rpm -i filename" the e-smith complains about conflicting files.

3.Reboot the system

4.The first thing I noticed was that the users samba passwords settings were gone so I guess we have to update the samba passwd file. Enter the E-smith-Manager, enter "user accounts" and then do a reset password for all users.

5.As far as I noticed e-smiths templates solution didn't apply to our new samba version so, changes to the smb.conf file has to be made in /etc/smb.conf

6.Create a UNIX user account for the win2k machine account " useradd -c 'win2k workstation' -M -s /bin/false -n workstationname$"

7.When the win2k workstation asks for a user with permissions to join you to the domain the root account has to be created for samba.
Add root to the smbpasswd file:
"smbpasswd -add root"
Changing root password in smbpasswd:
"smbpasswd root"
Enable the user root account:
"smbpasswd -e root"

8. On the win2k client logon as the Administrator, right click the My Computer Icon and select properties from the popup menu, select the Network Identifications tab and click the properties button and change the settings to join your domain.
After a while you will be asked to enter a name and a password of a user with permissions to join the domain, use the root account we created earlier.

9.Thats It! The sweet "WELCOME TO THE YOURDOMAN DOMAIN" message should appear if everything wen't your way.

Note! This is not a professional way of doing things, but I had nothing to lose when I decided to brutally --force the new samba version into e-smith. I suggest that you do this in a test enviorment where you have absolutely nothing to lose.

Best of luck // Olle Maartensson // SWEDEN

[karl]

Andrew,
Just missed you. I basically have done what you posted and it went fine. The templates and web manager also work without problems at this stage. After a reboot the templates restored back to previous but with samba 2.2 running.
Thanks for your help, Karl

[karl]

Ok, last post.
1. Setup e-smith as domain controller and workgroup
2. Added all users and passwords
3. Backed up /etc/smbpassword
4. Installed Samba 2.2.x
5. Mucked around with smb.conf
6. Got Win2K logging on
7. Got roaming profiles to work
8. Got Win9x working
9. Printing Ok
10. Did not try e-smith-manager
11. All config done through smb.conf

[WXP]

Hey !

I'd like to make a PDC.
I tried what is explained here but It didnt work for me.
Could someone please take the time to answer ?

I did exactly that :

1. Install E-Smith 4.1.2

2.Download Samba 2.2.0 : http://se.samba.org/samba/ftp/Binary_Packages/redhat/RPMS/7.0/samba-2.2.0-20010417.i386.rpm.

3.Install the new version by running"rpm -i --force samba-2.2.0-20010417.i386.rpm"

4.Reboot the system

5.Enter the E-smith-Manager, enter "user accounts" and then I added a user called "pbrossin" and i reset his password.
(I assume this is the login i'm gonna use on my windows 2k computer...?)

6.Create a UNIX user account for the win2k machine account:
"useradd -c 'PC1' -M -s /bin/false -n PC1$"

"PC1" is the "Full Computer Name" of my w2k station

7.I did that :

"smbpasswd -add root"
"smbpasswd root"
"smbpasswd -e root"

8.Then I tried to put E-Smith as Domain and Then enter root & password
but I get :

The following error occured attempting to join the domain "E-Smith":
The credentials supplied conflict with an existing set of credentials.

Please help !

-------

[root@Server /]# rpm -q samba
samba-2.2.0-20010417

[Charles Harmon]

I recently had this problem.  Does your current workgroup setting have the same name as the domain you are trying to join?  I had the same problem, this is what you need to do for sucess:

1. Change your current workgroup to something new such as "TEMP"
2. Reboot your win2k machine
3. Add your win2k machine to your e-smith domain

If all goes well you should see "Welcome to DOMAIN" and it will prompt you for another reboot.

Good Luck.....

Charles

[Dan Brown]

Very very bad, for a number of reasons (not the least of which is that you're not using the current version of Samba).  I'd delete the unix user account, and then check out my howto at http://www.familybrown.org/howtos/samba-upgrade-howto.html.

[WXP]

no my current workgroup is "Workgroup" and my domain is "E-Smith"

Thanx for trying to help man !