On Fri, 5 Dec 2003, Tim Jordan wrote: > Hello, > I have installed the latest samba rpms from your site. I verified that > winbind works properly and the getent issue is resolved.
Great! > After starting the samba server I can browse out against the Windows > network. The samba server is a member server of an Active Directory > domain. > > Problem: windows clients on network can not browse to samba server. I > can ping, do dns lookups, and can see the box in network neighborhood > from a windows client. The samba server wants credentials to display > shares. I have tried root credentials, domain credentials, and local > unix acct. credentials with no success. I understand a guest account is > used in this situation, which I have added to the local unix accounts. > > Can you advise? > > > > > # Global parameters > > [global] > > workgroup = LABOR > > realm = LABOR.AK > > server string = Samba Server %v > > security = ADS This line should be ok, but you may want to try without it: > > obey pam restrictions = Yes > > smb passwd file = /etc/samba/smbpasswd > > guest account = guest > > log file = /var/log/samba/log.%m > > max log size = 50 > > name resolve order = wins lmhosts bcast > > socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 > > printcap name = cups > > os level = 0 > > preferred master = No > > local master = No > > domain master = No > > dns proxy = No > > wins server = 192.168.1.20 > > idmap uid = 10000-20000 > > idmap gid = 10000-20000 > > template shell = /bin/bash Please try commenting this line out: > > winbind use default domain = Yes > > printer admin = @Domain Admins > > printing = cups > > > > [homes] > > comment = Home Directories > > read only = No > > browseable = yes THis should not be necessary: > > guest ok = yes > > > > [printers] > > comment = All Printers > > path = /var/spool/samba > > create mask = 0700 > > guest ok = Yes > > printable = Yes > > print command = lpr-cups -P %p -o raw %s -r # using client side printer > > drivers. > > browseable = No > > > > [print$] > > path = /var/lib/samba/printers > > write list = @adm, root > > guest ok = Yes > > The rest looks ok. Unfortunately I currently don't have a test network, so I can't verify working settings. You may want to turn logging up (level 3 or 4) which should allow you to see what the problem is. Regards, Buchan > > > > > 2003-12-02 at 23:21, Buchan Milne wrote: > > > -----BEGIN PGP SIGNED MESSAGE----- > > Hash: SHA1 > > > > Tim Jordan wrote: > > > Hello, > > > I took your advice and installed Mandrake 9.2 then pulled down the rpms > > > from your site. > > > I have joined our Active Directory Domain with no problem. > > > Kerberoes is working. > > > I can use wbinfo3 -g -u to query domain groups and users but I can't > > > seem to use getent for domain groups and users. > > > > > > Do I need to change a pam file to enable this? I checked everything I > > > know like verifying the nsswitch.conf is correct, libnss_winbind.so & > > > libnss_winbind.so.2, is present... > > > > > > I have the following in my smb.conf > > > idmap uid > > > idmap gid > > > winbind enum users > > > winbind enum groups > > > template homedir > > > template shell > > > winbind use default domain > > > > > > When viewing my samba server from a windows workstation it wants a > > > username and password. I take it this is because I'm missing something??? > > > > > > Can you advise? > > > > I think this is due to one error, the renaming of libnss_winbind.so and > > libnss_winbind.so.2 to libnss_winbind3.so and libnss_winbind3.so.2 > > (which should work AFAIK). Others have reported that just linking > > libnss_winbind.so.2 to libnss_winbin3.so.2, and changing all occurences > > of winbind3 in /etc/nsswitch.conf to winbind should do the trick. > > > > I have adjusted this in the new packages of 3.0.1pre3: > > rpm -qlp > > public_html/mandrake/9.2/samba-3.0.1/samba3-winbind-3.0.1-0.pre3.2mdk.i586.rpm > > /etc/pam.d/system-auth-winbind > > /etc/rc.d/init.d/winbind > > /lib/libnss_winbind.so > > /lib/libnss_winbind.so.2 > > /lib/security/pam_winbind.so > > /usr/bin/wbinfo > > /usr/sbin/winbind > > /usr/sbin/winbindd > > /usr/share/man/man1/wbinfo.1.bz2 > > /usr/share/man/man8/winbindd.8.bz2 > > > > So, this should not be necessary in future builds for Mandrake 9.2 and > > older (in Mandrake 10 and on - as is the case in Mandrake cooker > > already, samba-3.0.x will be called samba, and samba-2.2.x will be > > called samba2 if we still ship it). > > > > It may be easier just to use these packages (and feedback on them would > > be good ...) > > http://ranger.dnsalias.com/mandrake/9.2/samba-3.0.1/ > > > > Regards, > > Buchan > > > > > > - -- > > |--------------Another happy Mandrake Club member--------------| > > Buchan Milne Mechanical Engineer, Network Manager > > Cellphone * Work +27 82 472 2231 * +27 21 8828820x202 > > Stellenbosch Automotive Engineering http://www.cae.co.za > > GPG Key http://ranger.dnsalias.com/bgmilne.asc > > 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 > > -----BEGIN PGP SIGNATURE----- > > Version: GnuPG v1.2.3 (GNU/Linux) > > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > > > iD8DBQE/zZ0QrJK6UGDSBKcRAjwfAJ9I4PcOSp9simLK/oZkn7YwZBOQbACeP896 > > cvwy+qVkabL0ssKRz7beKwU= > > =y/PH > > -----END PGP SIGNATURE----- > > > -- |----------------Registered Linux User #182071-----------------| Buchan Milne Mechanical Engineer, Network Manager Cellphone * Work +27 82 472 2231 * +27 21 8828820x121 Stellenbosch Automotive Engineering http://www.cae.co.za GPG Key http://ranger.dnsalias.com/bgmilne.asc 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7 -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
