Il giorno lun, 15/12/2008 alle 16.13 -0600, Dale Schroeder ha scritto:
> Is your ldap server working properly, for example, do getent passwd
> and getent group return the proper values?

yes they work fine


> What does "net rpc testjoin" say?

net rpc testjoin
Unable to find a suitable server
Join to domain 'CPE' is not valid

but 

net rpc -I 10.10.20.21 testjoin
Join to 'CPE' is OK

in my server I have two nic eth0 with address 1.1.1.5 on a private
network and eth1 on the client accessible network, yesterday I
configured samba with bind interfaces only and since them to make work
the net rpc commands I have to specify -I <client accessible ip address>
the ip is the one cofigured on eth1,

additionally since then I have this error every 5 minutes in my nmbd
logs:

 become_domain_master_browser_wins:
  Attempting to become domain master browser on workgroup CPE, subnet
UNICAST_SUBNET.
[2008/12/16 21:39:06, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_browser_wins(349)
  become_domain_master_browser_wins: querying WINS server from IP
127.0.0.1 for domain master browser name CPE<1b> on workgroup CPE
[2008/12/16 21:39:07, 0]
nmbd/nmbd_become_dmb.c:become_domain_master_query_success(233)
  become_domain_master_query_success:
  There is already a domain master browser at IP 1.1.1.5 for workgroup
CPE registered on subnet UNICAST_SUBNET.

maybe a cache,

however the clients can access and work with their roaming profiles




> Is nscd running?  It is known to conflict with winbind.

no nscd is not running

> Are you using winbind because you are in a trust with another domain?
> To my knowledge, winbind is only needed on a PDC when a trust is
> involved.

ok I disabled winbind the official guide by example however says to
enable it, strange ... 

> If you are not in a trust, do things work properly with the winbind
> daemon stopped?

Seems they work,

now I have only a client accessible and it seems to work, we'll see
tomorrow

> Do your logs give any clues?  If not, try raising the "log level"
> value.

I think I have seen all possible samba errors in my logs ....

> 
> Good luck.  Let me know what you find out.

thanks
Nicola
> 
> Dale
> 
> Mailing List SVR wrote: 
> > Il giorno lun, 15/12/2008 alle 13.38 -0600, Dale Schroeder ha scritto:
> >   
> > > Mailing List SVR wrote: 
> > >     
> > > > Il giorno lun, 15/12/2008 alle 17.16 +0100, Mailing List SVR ha scritto:
> > > >   
> > > >       
> > > > > Il giorno lun, 15/12/2008 alle 16.55 +0100, Mailing List SVR ha 
> > > > > scritto:
> > > > >     
> > > > >         
> > > > > > I have this error on my samba pdc, seems something related to 
> > > > > > winbind,
> > > > > > my pdc worked fine for some months and now this error make login 
> > > > > > very
> > > > > > slow and sometime the users are unable to load their roaming 
> > > > > > profile,
> > > > > > 
> > > > > > any hints?
> > > > > > 
> > > > > > regards
> > > > > > Nicola
> > > > > > 
> > > > > >       
> > > > > >           
> > > > > My setup is samba+ldap, if you need other details please ask,
> > > > > 
> > > > > thanks
> > > > > Nicola
> > > > > 
> > > > >     
> > > > >         
> > > > additionally 
> > > > 
> > > > net rpc join -S domainname -U root
> > > >       
> > 
> > ok this work remain the problem for idmap,
> > 
> > here is my smb.conf:
> > 
> > 
> > [global]
> >     unix charset = LOCALE
> >     workgroup = CPE
> >     netbios name = CPE-PDC
> >     server string = Samba PDC
> >     interfaces = eth1, eth1:0, eth1:1, eth1:2, lo
> >     bind interfaces only = Yes
> >     passdb backend = ldapsam:ldap://ldap.cpe.it
> >     username map = /etc/samba/smbusers
> >     log level = 1
> >     syslog = 0
> >     log file = /var/log/samba/%m
> >     max log size = 50
> >     smb ports = 137 138 139 445
> >     name resolve order = wins bcast hosts
> >     time server = Yes
> >     printcap name = cups
> >     add user script = /usr/sbin/smbldap-useradd -m "%u"
> >     add group script = /usr/sbin/smbldap-groupadd -p "%g"
> >     add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
> >     delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
> >     set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
> >     add machine script = /usr/sbin/smbldap-useradd -w "%u"
> >     logon script = scripts\logon.bat
> >     logon path = \\%L\profiles\%U
> >     logon drive = H:
> >     logon home = \\%L\%U
> >     domain logons = Yes
> >     os level = 95
> >     preferred master = Yes
> >     domain master = Yes
> >     wins support = Yes
> >     ldap admin dn = cn=admin,dc=cpe,dc=it
> >     ldap delete dn = Yes
> >     ldap group suffix = ou=Groups
> >     ldap idmap suffix = ou=Idmap
> >     ldap machine suffix = ou=Computers
> >     ldap passwd sync = Yes
> >     ldap suffix = dc=cpe,dc=it
> >     ldap user suffix = ou=Users
> >     idmap backend = ldap:ldap://ldap.cpe.it
> >     idmap uid = 10000-200000
> >     idmap gid = 10000-200000
> >     winbind use default domain = Yes
> >     printer admin = Administrator
> >     map acl inherit = Yes
> > 
> > [netlogon]
> >     comment = Network Logon Service
> >     path = /home/dati/samba/netlogon/
> >     browseable = No
> >     locking = No
> >     share modes = No
> > 
> > [profiles]
> >     path = /home/dati/samba/profiles
> >     valid users = %U
> >     admin users = "@Domain Admins"
> >     read only = No
> >     guest ok = Yes
> >     profile acls = Yes
> >     case sensitive = No
> >     preserve case = No
> >     short preserve case = No
> >     hide files = /desktop.ini/ntuser.ini/NTUSER.*/
> >     browseable = No
> >     csc policy = disable
> > 
> > [homes]
> >     comment = Cartella Personale
> >     valid users = %S
> >     read only = No
> >     hide files = /.bash*/.profile/
> >     browseable = No
> > 
> > 
> >   
> > > Should be -S <servername>, not <domainname>.  If that doesn't help,
> > > you'll probably need to supply your smb.conf
> > > 
> > > Dale
> > >     
> > > > return 
> > > > 
> > > > Unable to find a suitable server
> > > > 
> > > >   
> > > >       
> > 
> >   

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to