Topic: Troubles adding XPSP2 PC's to SME domain

[jahlewis]

Has anyone else encountered (and yes, I've searched through the wiki/forums) this issue when trying to add win XPSP2 pcs to a SME 7.3 domain (happend in 7.2 as well)

When trying to add as "admin", I get the following error in windows:

Code: [Select]

"Login failure: account currently disabled"/var/log/samba/ shows

Code: [Select]

[2008/01/23 22:49:39, 1] auth/auth_sam.c:sam_account_ok(142)
  sam_account_ok: Account for user 'admin' was disabled.
The same thing happens with both a freshly installed XPSP2, and another updated version.  Both starting on workgroups.

I followed the user-groups wiki page instructions to create a "admin users = @ntadmins" entry in the smb.conf, but it makes no difference.

I've also tried the reg.patch.  I've successfully added a vista pc in the past.

Any other logs to look at?

[tad1214]

Try adding another user, not admin, and make him part of the domain admins. Then add the computers to the domain with that user.

[jahlewis]

I did that (by adding a user on the smeserver to the ntadmins group)

When attempting to join the domain using that user's credentials, I get this error in xp:

Code: [Select]

Logon failure: unknown user name or bad password.
Weird.  This has never been a problem for me before 7.1.

[tad1214]

Try domain admins.

http://wiki.contribs.org/SME_Server:Documentation:Administration_Manual:Chapter9


Add a user, and create a group named whatever you please, bui in the Group Description, put Domain Admins, exactally like that.  Then use that user to add people to the domain.

[jahlewis]

Thanks for the help and the links.  Did that, and no luck.  Same error.  I'll reboot everything, because "when in doubt, reboot...)

-JL

[tad1214]

And if all else fails, backup and reinstall! 

[cactus]

Try domain admins.

http://wiki.contribs.org/SME_Server:Documentation:Administration_Manual:Chapter9


Add a user, and create a group named whatever you please, bui in the Group Description, put Domain Admins, exactally like that.  Then use that user to add people to the domain.

Did you perhaps change the root or admin password? Are they still the same?

You should try "Domain Admins" but be sure to enter it in the description field exactly as entered here, the group name is irrelevant and can be freely choosen within the limits of the rules stated in the server-manager panel. If it does not work report a bug and be sure to attach (do not post them inline please) the relevant log file sections as attachment to the bug report.

[CharlieBrady]

When trying to add as "admin", I get the following error in windows: ...

Please search the bug tracker, and if you do not find a match, then report your problem there.

[jahlewis]

yes, i did change the admin pw recently, using the server-manager.  Is there anyway to check the smb user permissions to verify they are reading from PAM or however the authentication works?  No luck after rebooting btw.  Yes, "domain admins" is in the description.

I'll search bug tracker now.

[cactus]

yes, i did change the admin pw recently, using the server-manager.  Is there anyway to check the smb user permissions to verify they are reading from PAM or however the authentication works?  No luck after rebooting btw.  Yes, "domain admins" is in the description.

I'll search bug tracker now.

That is probably the cause of your error, AFAIK you should not change the admin password (that way) and it should be the same as your root password.

[jahlewis]

I changed it because of this problem, trying to see if that was the issue.  If changing the root/admin pw throught the server-manager page is not the best way to change it, what is?

-JL

[cactus]

I changed it because of this problem, trying to see if that was the issue.  If changing the root/admin pw throught the server-manager page is not the best way to change it, what is?

-JL

You would normally not change this, if you want to this is the way to (re)set it: http://wiki.contribs.org/SME_Server:Documentation:FAQ#Reset_the_root_and_admin_password

[mike_mattos]

Before getting too involved in server settings, you may want to try connecting a Win98 system.

If that works, you may need to change the XP security settings. 

Also, you didn't by any chance RENAME a windows user?  I did that and found out that the renamed user would not connect , nor would a new user with the old name.

[jahlewis]

I added a bug, but it looks like mine was related to this one:

http://bugs.contribs.org/show_bug.cgi?id=3613

[CharlieBrady]

You would normally not change this,...

No, that's not true. It's entirely a local policy decision if and when the admin password is changed. If it is changed, it should be changed via the server-manager interface.

if you want to this is the way to (re)set it: http://wiki.contribs.org/SME_Server:Documentation:FAQ#Reset_the_root_and_admin_password

No, those instructions are for disaster recovery if you have physical access to the server, but have forgotten or lost the admin password (e.g. if the previous admin has left the organisation).

All of this discussion here is out of place - if something doesn't work correctly, please make a detailed bug report via the bug tracker.