- This topic has 2 replies, 1 voice, and was last updated 19 years, 1 month ago by
.
-
Posts
-
Recently I’m lucky for setting up an OD master and a Windows PDC without any problems joining the windows clients to domain, but all of a sudden the diradmin account can no longer join the domain, the error is “Logon Failure: Unknown username or password”. I’m running the latest version of OS X server (10.4.10). Can anyone tell me what seems to be the problem, mac clients has no problems binding using diradmin account, and windows box can authenticate and access shares through smb. I am thinking that the problem would be on the smba PDC not being synchronized on the LDAP (OD). Would there be a problem if i change the diradmin pasword? Because I noticed that the error occured after i changed the diradmin password, reverted it back to the orig password but still has error.
I thought also it was fixed, upon browsing through the other threads here. But i guess I was wrong.. I tried demoting to standalone then promote to PDC, still the same, unknown username or password. Haven’t tried deleting /etc/smb.conf and the contents of /var/samba. How do i use the tdbtool? can you give the exact syntax? thanks Mactroll.
I found the error, one of our local department system admin put up a test domain with same name as our TLD name, without asking us at the data center, hmmm… Clients always returned an unknown username or password because it is looking at two same domain names. Whew, its seemles now, back to normal after demoting the test domain controller.
One thing i’ve noticed with 10.4.10, it will return an access denied if you try to join winxp to smb domain right after changing the diradmin password, still not in sync i think. To workaround with this, we stopped the windows service, demote the PDC to standalone, delete /var/db/samba/secrets.tdb, promote smb to PDC using diradmin and new password, then start the windows service. Join again using diradmin and new password, and presto, access denied is gone.. This worked in our case. Hope this could help.
- You must be logged in to reply to this topic.