NT_STATUS_UNSUCCESSFUL

[ceskobassman]

Hi, I'm making a domain with samba on my Ubuntu Desktop 8.04 server.
Everything seems ok in the config file, I've followed this how to

http://openskill.info/infobox.php?ID=552,

but when I try to add root at samba's users I have this error:

root@server:~# smbpasswd -a root
New SMB password:
Retype new SMB password:
Unable to modify TDB passwd: NT_STATUS_UNSUCCESSFUL!
Failed to add entry for user root.
Failed to modify password entry for user root

I've tried both with samba running and stopped..but the error is the same.

Thanks, Francesco

 

[danomac]

Does the tdb file exist?

Is it writeable?

Does the root user exist already? Maybe try changing the password instead of creating a new user.

NT_STATUS_UNSUCCESSFUL is a generic "oops" error in samba. It's what gets used when there's no specific error.

 

[ceskobassman]

Thanks for the reply,
I've run this command:
root# smbd -b | grep PRIVATE_DIR

and I get:
PRIVATE_DIR: /etc/samba

So I give:
root@server:~# ls -a /etc/samba/
. .. gdbcommands smb.conf smb.conf.090602.old user.map

tdb file doesn't seem to exist...but I don't know what it is used for...

EDIT: ok, I've added root user with "pdbedit" command. All ok now, except one other problem.
From the Windows client I've added the machine to the domain, now when I try to log into the domain with Win XP Pro I get an error like: "The domain mydomain.local isn't available" ...but it is another problem

 

[danomac]

That's a DNS error. You'll need to add service records to your DNS server.

Failing that, you can fallback to the NT4 and use the netbios name for the domain.

 

[ceskobassman]

I've set the DNS on my IpCop Machine.
If I ping amp-cs.local I get the right answer from the server. Is this the right way to test it?

Another thing, probably it will help to resolve. If I try to add XP client to the domain via XP's wizard I've got an error related to trust relationship between workstation and domain controller...I've tried to resolve removing both the machine and user account and readding them...but the problem is the same.

See you, Francesco

 

[danomac]

No, adding an A record to the DNS server is not sufficient for Active Directory. You need to add the appropriate SRV records to the DNS server. BIND does support this, and Microsoft's knowledgebase has the records that you'll need to add. The SRV records announce available services on the subnet.

Regarding the trust issue, have you tried executing "net rpc testjoin"? It'll tell you if the join has worked. It could be an issue with privileges otherwise.