samba not working with new windows PDC

[Simeon Harwood]

Afternoon all, it's head scratching time again!
We are trying to test out a new version of Samba.
B8725AA_A.02.01.01_HP-UX_B.11.11 based on samba v 3.0.7 has been installed and had a very basic config.
We have set the netbios name, set the security to share, and configured one share. We have also configured the username.map file to convert a windows user to a unix user.
In our live environment all is OK, I can access the share as a given user on the NT domain, and it maps to the unix user.
We have then created a BDC (backup domain controler)of the windows, and promoted it to a PDC (primary domain controler), and put it on an isolated network.
We have then moved the network cable from the unix box to the isolated network too. Now the samba share does not authenticate.
We have tried lots of things out including: -
- rebooting all boxes.
- de-configuring samba and re-configuring
- de-installing samba and re-intalling
- using the share with a guest permission (this works)
- re-imaging the BDC, the promoting it to PDC
- adding and deleting different users from windown and unix boxes.
- configuring the share while on the isolated lan, then moving the HP box back into live. (again works in live, not on the isolated network)

We are at a loss as to what is wrong.

Any ideas would be appreciated.

[Mobeen_1]

Simeon,
Are you very sure that the accounts are in synch between your PDC and BDC (which you have promoted to PDC) ?

rgds
Mobeen

[Simeon Harwood]

Yeah, we have re-created the PDC twice now, the last one was yesterday, the account that we are using to test is my own user account, and I know that I haven't changed my password for about 3 weeks now.

[Florian Heigl (new acc) · Accepted solution]

sorry for the trivial question, but as You didn't mention it -

did You re-join the domain after upgrading samba?

[Simeon Harwood]

Just got back to my desk now, and guess what...... We didn't rejoin the domain.
We thought that as the PDC was a BDC from the the live domain, and promoted when it was on an isolated lan, it would still have access to the domain.
How wrong we were.

Thanks,
Sime.

[Simeon Harwood]

problem solved, always rejoin the domain.