On Sat, 2005-11-12 at 15:32 +0100, Christoph Peus wrote: > Hello experts, > > I've migrated our NT4 domain to sambe 3.0.20b/ldap backend with "net rpc > vampire", and nearly everything works as expected. But one big problem > remains: it's not possible to login to the domains member maschines now, > because "the domain is not available at the moment" (translated from > german). After the maschine rejoined the samba domain, login works. (But > this is not an option for our ~500 maschines...) > > I have looked at the computer account of one maschine after the migration > and after I rejoined the domain manually. There's a difference: > > after "net rpc vampire" migration: > > dn: uid=BIT59$,ou=computers,dc=uni-wh,dc=de > objectClass: top > objectClass: inetOrgPerson > objectClass: posixAccount > objectClass: sambaSamAccount > cn: BIT59$ > sn: BIT59$ > uid: BIT59$ > uidNumber: 22693 > gidNumber: 515 > homeDirectory: /dev/null > loginShell: /bin/false > description: Computer > gecos: Computer > structuralObjectClass: inetOrgPerson > entryUUID: 4de87562-e740-1029-802b-d5f8fbe677cd > creatorsName: cn=smbldap-tools,ou=DSA,dc=uni-wh,dc=de > createTimestamp: 20051111204849Z > sambaSID: S-1-5-21-1139895982-289624505-398547282-4370 > sambaPrimaryGroupSID: S-1-5-21-1139895982-289624505-398547282-515 > displayName: BIT59$ > sambaLogonTime: 1131741671 > sambaNTPassword: 6D4D1F74BA851B7DB9DBCBA966C00AEF > sambaPwdLastSet: 1131727258 > sambaAcctFlags: [W ] > entryCSN: 20051111204858Z#000001#00#000000 > modifiersName: cn=samba,ou=DSA,dc=uni-wh,dc=de > modifyTimestamp: 20051111204858Z > > Something wrong here? > > > after the maschine rejoined the domain: > > dn: uid=bit59$,ou=computers,dc=uni-wh,dc=de > objectClass: top > objectClass: inetOrgPerson > objectClass: posixAccount > objectClass: sambaSamAccount > cn: bit59$ > sn: bit59$ > uid: bit59$ > uidNumber: 22694 > gidNumber: 515 > homeDirectory: /dev/null > loginShell: /bin/false > description: Computer > gecos: Computer > structuralObjectClass: inetOrgPerson > entryUUID: f490cd82-e7b4-1029-8a6d-c4cb6795876f > creatorsName: cn=smbldap-tools,ou=DSA,dc=uni-wh,dc=de > createTimestamp: 20051112104350Z > sambaSID: S-1-5-21-1139895982-289624505-398547282-46388 > sambaPrimaryGroupSID: S-1-5-21-1139895982-289624505-398547282-515 > displayName: BIT59$ > sambaPwdCanChange: 1131878635 > sambaPwdMustChange: 1142160235 > sambaNTPassword: 22E8E02D746C544A1DB0D183715C2D86 > sambaPwdLastSet: 1131792235 > sambaAcctFlags: [W ] > entryCSN: 20051112104358Z#000001#00#000000 > modifiersName: cn=samba,ou=DSA,dc=uni-wh,dc=de > modifyTimestamp: 20051112104358Z > > Obviously the "sambaPwdCanChange" and "sambaPwdMustChange" attributes are > missing in the computer account after migration. Could this cause the > problem or do I search at the wrong place? > > Thanks in advance for your support! ---- it's easy enough to fix with the pdbedit command, set those values and then try to log in.
Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba