Samba Problems
From MissionTechWiki
Adding a Samba 2.2 server (Redhat 7) to a Windows 2003 domain.
This is what worked for me.
On the windows server, create a computer account, with the netbios name of the server. This account must be a Pre-Windows 2000 computer.
On the samba server, the following settings must be in the config file
domain logons = no domain master = no nt acl support = yes password server = domain server (_eg. Server01_) security = domain workgroup = new domain (_eg. MercyShips_)
Once these settings are in place, restart samba
# service smb restart
and issue the command to join the domain
# smbpasswd -j MercyShips -r Server01
You will get the following message if all is successful.
2007/09/19 16:01:45 : change_trust_account_password: Changed password for domain MERCYSHIPS. Joined domain MERCYSHIPS.
Possible Errors
cli_net_auth2: Error NT_STATUS_ACCESS_DENIED cli_nt_setup_creds: auth2 challenge failed modify_trust_password: unable to setup the PDC credentials to machine SERVER01. Error was : NT_STATUS_ACCESS_DENIED. 2007/09/19 16:01:12 : change_trust_account_password: Failed to change password for domain MERCYSHIPS. Unable to join domain MERCYSHIPS.
This was because I was had created a regular computer trust account, instead of a pre-windows 2000 trust account. I deleted the trust account and created a new pre-windows 2000 trust account.
cli_net_auth2: Error NT_STATUS_NO_TRUST_SAM_ACCOUNT cli_nt_setup_creds: auth2 challenge failed modify_trust_password: unable to setup the PDC credentials to machine SERVER01. Error was : NT_STATUS_NO_TRUST_SAM_ACCOUNT. 2007/09/19 15:59:05 : change_trust_account_password: Failed to change password for domain MERCYSHIPS. Unable to join domain MERCYSHIPS.
This is because I still had domain logons = yes in my configuration. Windows thought I must have been some other domain controller, or backup controller. Once this option was set to no and samba restarted, I could proceed with joining.