Panther PDC trouble (take 2)

[eddyer]

In another environment, I’ve been able to edit the smb.conf file to finally advertise the server to windows (XP Pro) clients as a domain controller. When I attempt to add to the domain I get “access denied” on the WIndows PC.
In the Server Admin windows service log I get:
“[2004/09/16 10:17:10, 1] auth_ods.cpendirectory_auth_user(206)
User “khs” authenticated successfully with “dsAuthMethodStandard:dsAuthSMBNTKey”
[2004/09/16 10:17:10, 0] auth_ods.cpendirectory_smb_pwd_check_ntlmv1(266)
opendirectory_smb_pwd_check_ntlmv1: [0]opendirectory_auth_user
[2004/09/16 10:17:10, 2] auth_ods.cpendirectory_smb_pwd_check_ntlmv1(274)
opendirectory_smb_pwd_check_ntlmv1: [0]opendirectory_user_session_key
[2004/09/16 10:17:10, 2] /SourceCache/samba/samba-56/samba/source/auth/auth.c:check_ntlm_password(305)
check_ntlm_password: authentication for user [khs] -> [khs] -> [khs] succeeded
[2004/09/16 10:17:10, 2] /SourceCache/samba/samba-56/samba/source/rpc_server/srv_samr_nt.c:_samr_lookup_domain(2464)
Returning domain sid for domain BLACKBURN -> S-1-5-21-4036026186-3120961681-2241850057
[2004/09/16 10:17:10, 2] /SourceCache/samba/samba-56/samba/source/rpc_server/srv_samr_nt.c:access_check_samr_object(93)
_samr_open_domain: ACCESS DENIED (requested: 0x00000211)
[2004/09/16 10:17:10, 2] /SourceCache/samba/samba-56/samba/source/rpc_server/srv_samr_nt.c:_samr_lookup_domain(2464)
Returning domain sid for domain BLACKBURN -> S-1-5-21-4036026186-3120961681-2241850057
[2004/09/16 10:17:10, 2] /SourceCache/samba/samba-56/samba/source/rpc_server/srv_samr_nt.c:access_check_samr_function(115)
_samr_create_user: ACCESS DENIED (granted: 0x00000201; required: 0x00000010)
[2004/09/16 10:17:11, 2] /SourceCache/samba/samba-56/samba/source/smbd/server.c:exit_server(558)
Closing connections”

What am I doing wrong?

[tycho]

I’m having a similar problem.
Installed a new Xserve. Promoted it to a PDC. Checked with to join as the admin user. Worked fine.
Created new users, and all of them get “Access denied” when I try to join them.
Tried users as admins and nonadmin, wiyh or without home folders.
Checked to re-promote the PDC, wih no success.

[Author]

Posts