First of all, apologies for our hilarious system architecture.  It's this way 
for historical reasons.

I had a setup that worked; I now have a setup that doesn't work and I'm trying 
to work out why.

The setup that worked: OS X Tiger (10.4) Server as PDC. Linux servers (a 
variety of flavours, from Ubuntu 8.04 LTS to SLES 11 SP2) getting user 
information from the server by LDAP and using SMB to export file shares, 
handing authentication requests back to the OS X machine by tbdsam.

What broke it: Updating the OS X machine to Snow Leopard Server.

What broke: the older (Samba version 3.0.28) linux boxes can still bind to the 
PDC and hand mount requests ok.  The newer machines (3.6.3) can't bind to the 
PDC and can't authenticate mount requests.

On a new machine, if I try to bind I get:

net rpc bind -U <PDC directory admin> -S <server>

error setting trust account password: NT_STATUS_ACCESS_DENIED
Unable to join domain CSB.

My guess is that somewhere between 3.0.28 and 3.6.3 the way samba servers bind 
to the PDC has changed and one or both ends of the relationship is making a 
hilarious mess of the way trust accounts are set up.

Before I start pasting lots of errors into an email and making it unreadable, 
does anyone have an OS X 10.6 machine as a PDC?  Or does anyone have any ideas 
why an older linux machine can bind and pass on authentication requests but a 
newer one can't?

Regards,

Chris



The Institute of Cancer Research: Royal Cancer Hospital, a charitable Company 
Limited by Guarantee, Registered in England under Company No. 534147 with its 
Registered Office at 123 Old Brompton Road, London SW7 3RP.

This e-mail message is confidential and for use by the addressee only.  If the 
message is received by anyone other than the addressee, please return the 
message to the sender by replying to it and then delete the message from your 
computer and network.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Reply via email to