It is a separate domain logon server, see configuration below (relevant entries only).
Does it have to be a member of a Samba domain? (security = domain?)


[global]
        security = USER
        workgroup = DOMAIN
        netbios name = DOMAINSERVER
        interfaces = x.y.v.w/24
        logon script = scripts\%m.bat
        os level = 110
        preferred master = Yes
        local master = Yes
        domain master = True
        domain logons = Yes
        domain admin group = @root
        ldap server = x.y.v.z
        ldap port = 389
        ldap suffix = o=kuleuven,c=be
        ldap admin dn = cn=master,o=kuleuven,c=be

The ldap server is installed with openldap.

Werner

At 16:42 24/06/2003, Dan Gapinski wrote:
Not to ask the annoying ?'s, but the server that you're working from is indeed a member of the Samba domain (& not a separate domain/workgroup)?

Dan
----- Original Message -----
From: <mailto:[EMAIL PROTECTED]>werner maes
To: <mailto:[EMAIL PROTECTED]>Dan Gapinski
Sent: Tuesday, June 24, 2003 10:45 AM
Subject: Re: [Samba] Ghost Create account: procedure number out ofrange inSamba


Yes, that's right.

Werner

Dan Gapinski wrote:

So in your Ghost services properties, then your 'Log on as' entry looks like


this:

domain\root

?

Thanks,

Dan

----- Original Message -----

From: "werner maes" <mailto:[EMAIL PROTECTED]>><[EMAIL PROTECTED]>

To: "Dan Gapinski" <mailto:[EMAIL PROTECTED]>><[EMAIL PROTECTED]>

Cc: <mailto:[EMAIL PROTECTED]>><[EMAIL PROTECTED]>

Sent: Tuesday, June 24, 2003 10:12 AM

Subject: Re: [Samba] Ghost Create account: procedure number out ofrange

inSamba





domain admin group = root (in smb.conf)


I have defined the user 'root' in LDAP. On the client I added the domain

users to the administrators group. I try to run the services under this

root account on the domain but the services will only run under a local

system account and not under a domain account. That seems to be the

problem. With this user 'root' it is possible to manually join the client

to the domain and to logon to the domain.


I've tried about everything but still no solution....


Still hoping though :-)


Werner Maes



At 09:39 24/06/2003, Dan Gapinski wrote:




I see - what type of domain account are you using? Your method is right




tho,




setting the services to run under a domain account. I just want you to be


absolutely sure that the account is administrator. If this is a test

environment, you could start by running the service as root, and see if



it




works then (though I would not do that in production).



Dan



----- Original Message -----


From: "werner maes" <mailto:[EMAIL PROTECTED]><[EMAIL PROTECTED]>

To: "Dan Gapinski" <mailto:[EMAIL PROTECTED]><[EMAIL PROTECTED]>

Cc: <mailto:[EMAIL PROTECTED]><[EMAIL PROTECTED]>

Sent: Tuesday, June 24, 2003 4:35 AM

Subject: Re: [Samba] Ghost Create account: procedure number out ofrange

inSamba





Sorry to bother you again but in my situation with LDAP authentication




it




doesn't seem to work.



I'll explain the configuration in detail.



I have a Samba 2.2.8a domain controller which is compiled and




configured




with LDAP support.


The user and machine accounts are defined in LDAP. I manually added an

Windows XP workstation

to the domain (no problems here) using a root account also defined in



LDAP.




Now I would like to clone this machine to other machines using Norton




Ghost




7.5. Therefore I have set up


a Ghost Multicast Server. Now when I use to Ghost Console on the



multicast




server and try to add our domain


to the list of supported domains in Ghost I get the error "Procedure



number




out of range".


On the Ghost Multicast Server there is the "ghost configuration



server"




service and on the client machine


there is the "ghost client agent" service. Both of these services only

start with a local system account.

These services do not run under a domain account. If I try to run them

under a domain account I get this

error message: "The service did not respond to the start or control



request




in a timely fashion".



Like I said, manually adding a machine to the domain gives no problems




with




the specified root account


in LDAP (see below, I did not include all attributes off course).

dn: uid=root, ou=xxx, o=xxx, c=xxx

objectClass: sambaAccount

uid: root

rid: 1000

uidNumber: 0

gidNumber: 0


Kind regards,



Werner Maes




At 15:20 23/06/2003, Dan Gapinski wrote:



Yes - sorry. I made a regular account for Ghost (which you could make




with




adduser or useradd or handcoding the passwd file) and added it to a




group




(in the groups file) that I called "admin". In smb.conf, I added a




line




that




went like this:


domain admin group = @admin


So that worked like a charm.


Hope that helps,

Dan

----- Original Message -----

From: "werner maes" <mailto:[EMAIL PROTECTED]><[EMAIL PROTECTED]>

To: "Dan Gapinski" <mailto:[EMAIL PROTECTED]><[EMAIL PROTECTED]>

Cc: <mailto:[EMAIL PROTECTED]><[EMAIL PROTECTED]>

Sent: Monday, June 23, 2003 2:21 PM

Subject: Re: [Samba] Ghost Create account: procedure number out of



range




inSamba






Hello Dan,



Thanks for yor reply !


But what exactly do you mean with "making a regular administrator

account for Ghost"?

Is it an entry in /etc/passwd or smbpasswd for "administrator"?

Could you give more specific details?


Kind regards,



Werner Maes





--


To unsubscribe from this list go to the following URL and read the

instructions: <http://lists.samba.org/mailman/listinfo/samba>http://lists.samba.org/mailman/listinfo/samba




--


To unsubscribe from this list go to the following URL and read the

instructions: <http://lists.samba.org/mailman/listinfo/samba>http://lists.samba.org/mailman/listinfo/samba











--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Reply via email to