What kind of DHCP server do you have? You should make sure that DHCP is assigning the samba PDC's IP as the WINS server IP address to clients. You also want to make sure the samba server is the only WINS server.

Windows DHCP servers can OPTIONALLY update DNS info, which means somehow when them samba server is registered with the DHCP server, data gets added to DNS (or even WINS if your DHCP server is also a WINS server.) Clients don't use a hostname for joining a Samba or NT4 domain, so I am not 100% sure that this is the actual issue.

You want to make sure that you do have a static DNS entry for the Samba server.


Also, make sure that the windows clients - even if they can't join the domain- can see networks shares on the samba server (that will verify netbios is running.)

For the moment, you should allocate a DHCP reservation for the samba server anyway.




On 07/08/2011 01:00 PM, Thomas Harvey wrote:
I've seen this asked before in various forums and even on here, but never 
answered; here is a list of the symptoms and what I have done, hopefully 
someone here will have a solution.

I have an Ubuntu10.04 server running samba3.4.7 and I have a (fleet of) Lenovo 
Thinkpad Edge's running win7Pro64
If the Samba server has been assigned a static IP address then the Lenovo will 
not join the domain, telling me that the server cannot be found. I get the auth 
screen where I enter the Samba Domain Admin details. Nothing shows on the samba 
server logs, and windows dialogs:

The following Error occurred when attempting to join the domain "OFS"
The specified domain either does not exist or could not be contacted

When the server gets it's IP address by DHCP the Lenovo will join just fine.

I don't want to rely on a DHCP lease, or on the router distributing a fixed IP 
to the specific MAC address, I want to set it on ubuntu. Have I misunderstood 
something about Samba networking?
I assume it something to do with my static settings, and broadcasting or 
something, so here is my /etc/network/interfaces and then I will talk about the 
things I have tried and the weirdnesses.

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto eth0
iface eth0 inet static
        address 10.25.100.14
        netmask 255.255.0.0
        network 10.11.0.0
        broadcast 10.11.255.255
        gateway 10.25.100.1

Anyone spot anything I'm doing wrong here.. the working DHCP is the standard "iface 
eth0 inet dhcp" line instead of static and all of the static settings. Surely most 
people run their servers on a static IP??

So, I tried to create an aliased Static IP...

# The loopback network interface
auto lo
iface lo inet loopback

# The primary network interface
auto eth0
iface eth0 inet dhcp
iface eth0:0 inet static
        address 10.25.100.14
        netmask 255.255.0.0
        network 10.11.0.0
        broadcast 10.11.255.255
        gateway 10.25.100.1

And then bring that up with ifup eth0:0 Then the server will respond on both 
the static IP and the one assigned by DHCP when pinging and ssh, but the laptop 
will not join the domain. ifdown eth0:0 and it will join the domain.

Once it has joined everything will work fine, so I can log in, access the 
shares, even log in with users that were created on the server after the laptop 
was joined to the domain. But, I hardly want to have to ssh in, check the 
dynamic IP, drop the static one, add a new machine to the domain and then log 
in to the dynamic IP and up the static IP each time I provision a new laptop! 
Nor do I want to rely on the dynamic IP lease length on the router to assign 
the same IP from the DHCP pool each time. This is what static IPs are for.

Is there something fundamentally wrong in my understanding of Windows/Samba 
networks.

Also, I can net join form another ubuntu machine to join the domain when the 
PDC is on static, so this seems to only be an issue with Win clients. I don not 
have any XP or vista boxes to try this out on.

For reasons of completion... here is the redacted output of testparm:

Thanks for any help...

Processing section "[homes]"
Processing section "[profiles]"
Processing section "[netlogon]"
Processing section "[cappuccino]"
Processing section "[photos]"
Loaded services file OK.
Server role: ROLE_DOMAIN_PDC
[global]
        workgroup = OFS
        obey pam restrictions = Yes
        passdb backend = ldapsam:ldap://localhost
        pam password change = Yes
        syslog = 0
        log file = /var/log/samba/log.%m
        max log size = 1000
        smb ports = 139
        server signing = auto
        add user script = /usr/sbin/smbldap-useradd -m '%u'
        delete user script = /usr/sbin/smbldap-userdel %u
        add group script = /usr/sbin/smbldap-groupadd -p '%g'
        delete group script = /usr/sbin/smbldap-groupdel '%g'
        add user to group script = /usr/sbin/smbldap-groupmod -m '%u' '%g'
        delete user from group script = /usr/sbin/smbldap-groupmod -x '%u' '%g'
        set primary group script = /usr/sbin/smbldap-usermod -g '%g' '%u'
        add machine script = /usr/sbin/smbldap-useradd -w '%u'
        logon path = "\\SERVER\profiles\%U"
        logon drive = U:
        domain logons = Yes
        os level = 35
        domain master = Yes
        dns proxy = No
        wins support = Yes
        ldap admin dn = cn=admin,dc=domain,dc=com
        ldap group suffix = ou=groups
        ldap idmap suffix = ou=Idmap
        ldap machine suffix = ou=machines
        ldap passwd sync = yes
        ldap suffix = dc=domain,dc=com
        ldap user suffix = ou=people

[homes]
        comment = Home Directories
        path = /office/homes/%U
        valid users = %S
        read only = No
        create mask = 0750
        browseable = No
        browsable = No

[profiles]
        comment = Roaming Profile Share
        path = /srv/samba/profiles
        read only = No
        create mask = 0600
        directory mask = 0700
        profile acls = Yes
        hide files = /desktop.ini/outlook*.lnk/*Briefcase*/
        store dos attributes = Yes
        browseable = No
        browsable = No

[netlogon]
        comment = Network Logon Service
        path = /srv/samba/netlogon
        admin users = root
        browseable = No
        browsable = No


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Reply via email to