SMB Devs,

In regards to my problem in staying 'joined' to a domain our DNS here at ANSTO only allows the domain controllers to do DDNS with BIND. Could this cause any problems?

I have ddns_enable set to false in sharectl:
ddns_enable=false

I have not rebooted or restarted the server since last email to the list but when I last checked it was still not a member of the domain after a reboot etc.

Regards,
---
Cooper Ry Lees
UNIX Evangelist - Information Management Services (IMS)
Australian Nuclear Science and Technology Organisation
T  +61 2 9717 3853
F  +61 2 9717 9273
M  +61 403 739 446
E  [EMAIL PROTECTED]
www.ansto.gov.au

Important: This transmission is intended only for the use of the addressee. It is confidential and may contain privileged information or copyright material. If you are not the intended recipient, any use or further disclosure of this communication is strictly forbidden. If you have received this transmission in error, please notify me immediately by telephone and delete all copies of this transmission as well as any attachments.

On 02/12/2008, at 7:48 AM, Ross Smith wrote:

No major mistakes then, cool :-)

I'll add the ddns stuff to my notes and test it out, I can definately
see that being useful to know.

Regarding the hostname, I think it is done with the OpenSolaris
installer, but not with the one currently included in snv.  That
installer doesn't prompt for a host name at any point although it does
create a (blank) hostname.e1000g0 file.

And I'll look forward to the Kerberos updates.  CIFS is certainly
pretty smooth these days, much easier than it was to begin with, and
really not much more complicated than setting up a windows server.  I
just thought I'd best check my notes since I aware I'm testing a
moving target here :)

Ross


On Mon, Dec 1, 2008 at 8:26 PM, Alan M Wright <[EMAIL PROTECTED]> wrote:
I thought step 2 was done by the installer but I could be wrong.

Step 3 shouldn't be necessary if you enable dynamic DNS updates
prior to enabling the CIFS service:

      sharectl set -p ddns_enable=true smb
      svcadm enable -r smb/server

There appears to be a bug in BIND, which prevents it from making
dynamic DNS updates on ADS.  There is an open bug with ISC.
So we perform the updates from within the CIFS service.

We are looking into ways of handling the Kerberos situation more
elegantly.

Alan
--

On 12/01/08 06:36, Ross wrote:

Just wanted to check if my experience of joining a domain with snv_103 is correct. Am I making any obvious mistakes here, and are there plans to simplify any of these steps (2, 3 & 5 look to me like they could be covered
by the installer)?

1. Install Solaris, configuring kerberos, DNS, etc.

2. Configure a hostname, since this doesn't appear to be covered by the
install.
edit /etc/hostname.e1000g0

3. Load your AD DNS tool and add the hostname and IP address since Solaris
doesn't appear to register it's IP with the server.

4. Synchronise time with the domain with:
# ntpdate server

5. Edit the krb5.conf file, since there appear to be settings missed here too. Ensure the default realm is in CAPS, and set [domain_realm] as .domain
= REALM, eg:
[domain_realm]
.domain.local = DOMAIN.LOCAL

6. Start the service
# svcadm enable -r smb/server

7. Join the domain
# smbadm join -u user domain


_______________________________________________
cifs-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/cifs-discuss

_______________________________________________
cifs-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/cifs-discuss

Reply via email to