Discussion Locked

NT Domain Controller

0 helpful
5 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Anyone can tell me what is wrong with my samba server when joining NT domain.It show me error message as follow:
No NT_STATUS_NO_TRUST_SAM_ACCOUNT and failed to change password for domain

5 replies

by steby

Re- configure your /etc/smb.conf file. Check these lines:
# workgroup = NT-Domain-Name or Workgroup-Name
workgroup =

# server string is the equivalent of the NT Description field
server string = samba server

# Client has a complex LAN with three separate networks plus localhost:
hosts allow = 192.168.1. 192.168.2. 192.168.3. 127.

# And to get along with the NT "Primary Domain Controller", we
# need to set:
security = server

# Use password server option only with security = server
password server = THE-PDC

# You may wish to use password encryption. Please read
# ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
# Do not enable this option unless you have read those documents
encrypt passwords = yes
smb passwd file = /etc/smbpasswd

# Unix users can map to different SMB User names
username map = /etc/smbusers

# Most people will find that this option gives better performance.
# See speed.txt and the manual pages fordetails
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

# Cause this host to announce itself to local subnets here
remote announce = 192.168.1.255 192.168.2.63
# Use only if you have an NT server on your network that has been# configured at install time to be a primary domain controller.
; domain controller = THE-PDC
# I had this commented out, and things seemed to work without it.

# if you enable domain logons then you may want a per-machine or
# per user logonscript
# run a specific logon batch file per username
logon script = %U.bat

# Windows Internet Name Serving Support Section:
# WINS Support - Tells the NMBD component of Samba to enable its WINS Server
; wins support = no

# WINS Server - Tells the NMBD components of Samba to be a WINS Client
# Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
wins server = 192.168.1.110

by sanjay_gowda

Hi,

Have you created an computer account in the NT PDC? Do so using the server manager from the Server. Then join the linux computer by using
smbpasswd -r PDCNAME -j DOMAINNAME
it would be better if you have a host entry for the pdcname and its ip address.

also if you have not done edit your smb.conf file and make the necessary changes. For security make it as domain
security = domain

You should have samba version 2.0.8 and above.

Regards
Sanjay

This discussion is closed to new replies.