[NTLUG:Discuss] Samba as Primary Domain Controller

[Richard Geoffrion]

Rick Cook <rcook at ntlug.org> wrote:
> Hi all,
>
> I am attempting to get a samba installation to work as the Primary
> Domain Controller for a Windows 2000 box (my wife needs a Windows box
> for her MLS application). I have successfully set up samba many times
> as a file server and I have a SuSE machine at work that is using an
> existing Windows 2000 based PDC to do its user authentication.
>
> I think I have all of the appropriate switches/configuration in
> smb.conf as defined in the Samba-PDC-HOWTO, however, I can't get the
> Windows 2000 machine added as a participant in the NT Domain. Never
> having done this step to a Windows PDC (the NT Administrators do this
> at work - even for my VMware virtual machine), I can't tell what I
> might be missing.
>
>
> Any suggestions?
>


Have you????

...created an smbuser called root and assigned it a password?
    root at sambapdc# smbpasswd -a root

...created a unix account with your wife's machine name then followed it up
with an SMB account?

[here is the script that I use to do both..]
    root at sambapdc:/usr/local/samba/bin# cat newmachine
    /usr/sbin/useradd -d /dev/null -g 100 -c"$1's Computer" -s /bin/false -M
$1$
    smbpasswd -m -a $1
[/script]

.... tried to join the domain from the Windows 2K box? (be sure that the
win2k workgroup does NOT match the domain name or you will get
"...conflicting creditials..." error messages.)  When asked for the
administrator username and password use root and the smb password you gave
to the smb root user. (It does not need to nor should it be the same as the
UNIX root user)

Provided all of your smb.conf options are correct, the win2k box should join
the domain.  Now you will need to add users to your PDC with 'smbadduser -a
usertobeadded'


-Richard