Domain Configuration

[CompDude]

Alright I have tried for a few hours to set this domain up, but cannot seem to get it working.

Slack 10 with Samba V3.

# Samba config file created using SWAT
# from 192.168.0.107 (192.168.0.107)
# Date: 2005/04/03 13:21:53

# Global parameters
[global]
	workgroup = DOMAIN
	server string = Files
	encrypt passwords = No
	name resolve order = wins lmhosts hosts bcast
	logon path = 
	logon home = 
	domain logons = Yes
	os level = 34
	preferred master = Yes
	domain master = Yes
	wins support = Yes
	ldap ssl = no
	valid users = matthew, george
	admin users = root

[Downloads]
	path = /server/downloads
	read only = No
	guest ok = Yes

[Music]
	path = /server/music
	read only = No
	guest ok = Yes

[Joe]
	path = /server/joe
	read only = No
	guest ok = Yes

[Matthew]
	path = /server/matthew
	read only = No
	guest ok = Yes

[George]
	path = /server/george
	read only = No
	guest ok = Yes

[photo]
	path = /server/photo
	read only = No

[src]
	path = /usr/src
	read only = No
	guest ok = Yes

[web]
	path = /server/web
	read only = No
	guest ok = Yes

[netlogon]
	comment = The Domain logon service
	path = /server/netlogon
	write list = matthew, root, ntadmin
	read only = No

I am trying to logon to the domain with a Windows XP Pro computer, and when I enter "root" as the user name it comes back with "Access is Denied".

[11red]

Have you added root as a samba user:

"smbpasswd -m -a root"

I'ts normaly better to create a user, "ntadmin" or alike, to do your administration with though.

[CompDude]

When I try the command here is the message that I get:

root@server:/home/matthew# smbpasswd -m -a root
Failed to initialise SAM_ACCOUNT for user root$.

This happens on any account I Try and add.

[11red]

ooohh...my bad.

drop the -m (it's for machine account)

"smbpasswd -a root"

[eärendil]

You have to add a UNIX account first, to be able to add a SMBaccount

And if this is a domainserver, shouldn't the OSlevel be set to 66?

And btw : Don't use the same password for samba root, as for unix root. That'll just mess things up. Acctually, to be safe..
Create a user with root-priveligies, instead of using root as loginname.
You should acctually not use root as a login, just as local config, for security reasons.

[CompDude]

I don't care about the security risks involved. I am fulloy aware of them and would just prefer to get this working under one account atleast. I figured ti would be simpler to use Root. However, now I can add the account but the permission is still denied.

[CompDude]

I don't care about the security risks involved. I am fulloy aware of them and would just prefer to get this working under one account atleast. I figured ti would be simpler to use Root. However, now I can add the account but the permission is still denied on the Windows Box.

[eärendil]

ok..

since you already have the user root in the unix passwd file, you don't have to add this user.
Add sambauser root, and also the machinename..

try the command : smbuser -a root -m "MACHINENAME" and then use smbpasswd root

I'm not 100% sure, but I do belive you have to add a machineaccount.

And also. set you os level=66 in the smb.conf file.