MAJOR PROBLEMS: Samba (Fedora Core 3) as PDC + Windows XP Pro
Posted on 2005-04-18
Hello. I am trying to setup my Fedora box as the primary domain controller for my Windows XP Professional machine. After editing smb.conf, I made the appropriate registry change on my XP machine (requiresignorseal = 0) and was able to join the domain and login. I had problems setting up roaming profiles, but I was able to get them to work by changing a setting in the group policy editor on my XP machine. I had three local accounts on my XP mach. (admin, user1, user2). All (temporarily) were set with administrative abilities. I made the following changes to my systems:
1.) admin is the only local admin for xp mach. (removed user1, user2)
2.) created directories "/home/samba/profiles/user1" and "/home/samba/profiles/user2" on my Fedora box
3.) did "chmod -R 0700 /home/samba/profiles/user1" and same for user2
4.) did "chown -R user1:user1 /home/samba/profiles/user1" and same for user2
5.) removed the xp machine from the domain, rebooted, reconnected, rebooted ... i don't know why
After removing the computer from the domain, i checked the trust machines on my Fedora box, and made sure the computer was removed. After reconnecting the computers, I again checked the trusted machines. Everything is setup fine at this point. All users are members of the correct group (i created a "trusted" group from allowed samba users) and have entries in the smbpasswd file.
My XP machine allowed me to reconnect to the domain, and told me to reboot. However, upon reboot, when I try to logon to the domain I get an error telling me the domain is unavailable or the computer is not trusted (not the exact message). After removing/reconnecting numerous times, I changed the log level to 4 and inspected the smbd.log file. I noticed that, according to the log, the XP machine was sending the username "" (empty) and password "" (empty) no matter what is entered! Smbd is then responding with "Can't become connected user!". I'm clueless at this point. I've tried everything I could think of. Any help would be greatly appreciated. Thank you!