RE: [Samba] Domain Root Password
Think you should try this below # smbpasswd -a root -Original Message- From: Gerald Cenir [mailto:[EMAIL PROTECTED] Sent: Thu 4/7/2005 2:12 PM To: samba@lists.samba.org Cc: Subject: RE: [Samba] Domain Root Password Thanks but when I executed the command #smbpasswd root It says that it failed to find entry for user root. I checked my directory using slapcat and there is a user root dn: uid=root,ou=Users,dc=company,dc=com objectClass: top objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount ... should I delete it and add it again? -Original Message- From: Mark Sarria [mailto:[EMAIL PROTECTED] Sent: Thursday, April 07, 2005 11:59 AM To: Gerald Cenir; samba@lists.samba.org Subject: Re: [Samba] Domain Root Password all you need to do is type: #smbpasswd root -mark - Original Message - From: Gerald Cenir [EMAIL PROTECTED] To: samba@lists.samba.org Sent: Wednesday, April 06, 2005 7:57 PM Subject: [Samba] Domain Root Password Hi! How do we provide a password for the domain root? I am using Samba 3.0.3-5 and openldap-2.1.29-1 on a Fedora Core 2 Following the steps found in http://samba.idealx.org/smbldap-howto.en.html I issued to command: # smbldap-populate In the howto after executing the command, the entries were added and it asked to provide a password for the domain root. But in my case, it did not ask for a password. Regards, -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Domain Root Password
The fact that you seeing the error saying that samba cant find an entry for the root, is that you have to create an smbuser entry for root. The smbuser database does not synchronise automatically with /etc/passwd or ldap , if I'm not wrong.Hence, the command #smbpasswd -a root, will create an smbuser entry for root, and at the same time prompting you for a smbpasswd , which is also may not be the same as the system password. -Original Message- From: Gerald Cenir [mailto:[EMAIL PROTECTED] Sent: Thu 4/7/2005 2:12 PM To: samba@lists.samba.org Cc: Subject: RE: [Samba] Domain Root Password Thanks but when I executed the command #smbpasswd root It says that it failed to find entry for user root. I checked my directory using slapcat and there is a user root dn: uid=root,ou=Users,dc=company,dc=com objectClass: top objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount ... should I delete it and add it again? -Original Message- From: Mark Sarria [mailto:[EMAIL PROTECTED] Sent: Thursday, April 07, 2005 11:59 AM To: Gerald Cenir; samba@lists.samba.org Subject: Re: [Samba] Domain Root Password all you need to do is type: #smbpasswd root -mark - Original Message - From: Gerald Cenir [EMAIL PROTECTED] To: samba@lists.samba.org Sent: Wednesday, April 06, 2005 7:57 PM Subject: [Samba] Domain Root Password Hi! How do we provide a password for the domain root? I am using Samba 3.0.3-5 and openldap-2.1.29-1 on a Fedora Core 2 Following the steps found in http://samba.idealx.org/smbldap-howto.en.html I issued to command: # smbldap-populate In the howto after executing the command, the entries were added and it asked to provide a password for the domain root. But in my case, it did not ask for a password. Regards, -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Domain Root Password
http://www.linuxforum.com/forums/index.php?showtopic=68203 http://www.spinics.net/lists/samba/msg19401.html Hope these help -Original Message- From: Gerald Cenir [mailto:[EMAIL PROTECTED] Sent: Thu 4/7/2005 2:49 PM To: Ivan Toh Boon Cheong; samba@lists.samba.org Cc: Subject: RE: [Samba] Domain Root Password Executing smbpasswd -a root result in this message: [EMAIL PROTECTED] root]# smbpasswd -a root New SMB password: Retype new SMB password: ldapsam_modify_entry: LDAP Password could not be changed for user root: Object class violation entry modify failed ldapsam_add_sam_account: failed to modify/add user with uid = root (dn = uid=root,ou=Users,dc=company,dc=com) Failed to add entry for user root. Failed to modify password entry for user root There is an Administrator user however. But my machine still can't join the domain when I use the Administrator user. Regards, -Original Message- From: Ivan Toh Boon Cheong [mailto:[EMAIL PROTECTED] Sent: Thursday, April 07, 2005 2:21 PM To: Gerald Cenir; samba@lists.samba.org Subject: RE: [Samba] Domain Root Password The fact that you seeing the error saying that samba cant find an entry for the root, is that you have to create an smbuser entry for root. The smbuser database does not synchronise automatically with /etc/passwd or ldap , if I'm not wrong.Hence, the command #smbpasswd -a root, will create an smbuser entry for root, and at the same time prompting you for a smbpasswd , which is also may not be the same as the system password. -Original Message- From: Gerald Cenir [mailto:[EMAIL PROTECTED] Sent: Thu 4/7/2005 2:12 PM To: samba@lists.samba.org Cc: Subject: RE: [Samba] Domain Root Password Thanks but when I executed the command #smbpasswd root It says that it failed to find entry for user root. I checked my directory using slapcat and there is a user root dn: uid=root,ou=Users,dc=company,dc=com objectClass: top objectClass: inetOrgPerson objectClass: posixAccount objectClass: shadowAccount ... should I delete it and add it again? -Original Message- From: Mark Sarria [mailto:[EMAIL PROTECTED] Sent: Thursday, April 07, 2005 11:59 AM To: Gerald Cenir; samba@lists.samba.org Subject: Re: [Samba] Domain Root Password all you need to do is type: #smbpasswd root -mark - Original Message - From: Gerald Cenir [EMAIL PROTECTED] To: samba@lists.samba.org Sent: Wednesday, April 06, 2005 7:57 PM Subject: [Samba] Domain Root Password Hi! How do we provide a password for the domain root? I am using Samba 3.0.3-5 and openldap-2.1.29-1 on a Fedora Core 2 Following the steps found in http://samba.idealx.org/smbldap-howto.en.html I issued to command: # smbldap-populate In the howto after executing the command, the entries were added and it asked to provide a password for the domain root. But in my case, it did not ask for a password. Regards, -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Re: Unable to join Samba server to Win2k domain
Hi , It will be good if you can paste your krb5.conf and smb.conf with the mail, so that we can see where you have gone wrong. But just to double check some basic issues: 1) Are winbind and smb services restarted everytimes you did any changes to the config files? 2) Since you are using AD mixed mode, instead of using net ads join , can you try net join -U Administrator? 3)By the way, did you try the method of adding Samba server into the domain from the AD server? Regards, Ivan Toh -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Henrik Larsson Sent: Tuesday, December 16, 2003 5:02 PM To: [EMAIL PROTECTED] Subject: [Samba] Re: Unable to join Samba server to Win2k domain Anyone know what could cause all these problems or a straight solution how to solve them? Upgraded to 3.0.1, and i still can't add my Samba server to the Windows 2000 domain. Same errors as described in my previous mail. What information more than the one i supplied could be usefull if i should add this as a bugreport? Best regards Henrik -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba3 and AD
Hi all,
I'm trying integrate my Redhat 7.3 machine with Win2000 server Active
Directory, such that users can logon to the Linux box using AD accounts.
I have successfully join the Linux box into the domain as a domain
member server, and current linux account users can access their Samba
share from their Windows machines. When I tried to configure winbind, I
was hit with a problem when trying to list domain users:
# wbinfo -u
Error looking up domain users
When I check /var/log/samba/log.winbindd, it kept saying improper format
of Kerberos config file
[2003/11/27 14:59:37, 1]
nsswitch/winbindd_util.c:add_trusted_domains(206)
scanning trusted domain list
[2003/11/27 14:59:38, 0]
libsmb/cliconnect.c:cli_session_setup_spnego(683)
Kinit failed: Improper format of Kerberos configuration file
Below is my global configuration for /etc/samba/smb.conf and
/etc/krb5.conf:
/etc/samba/smb.conf
[global]
# workgroup = NT-Domain-Name or Workgroup-Name
workgroup = SMUSTF
netbios name = BEOWULF
server string = Samba Server
#ACTIVE DIRECTORY JOINING
realm = sam
security = ADS
encrypt passwords = yes
password server = dc01.sam
printcap name = /etc/printcap
load printers = yes
log file = /var/log/samba/log.%m
max log size = 50
# WINBIND CONFIG
winbind separator = +
idmap uid = 1-2
idmap gid = 1-2
winbind enum users = yes
winbind enum groups = yes
template homedir = /home/%D/%U
template shell = /bin/bash
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
wins server = 202.161.42.5
dns proxy = no
/etc/krb5.conf
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
ticket_lifetime = 24000
default_realm = SAM
default_tgs_enctypes = des-cbc-crc des-cbc-md5
default_tkt_enctypes = des-cbc-crc des-cbc-md5
dns_lookup_realm = true
dns_lookup_kdc = true
[realms]
SAM = {
kdc = dc01.sam:88
# admin_server = dc01.sam:749
default_domain = sam
admin_server = dc01.sam:749
}
[domain_realm]
.sam = SAM
sam = SAM
[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}
Please help.
Regards,
Ivan Toh Boon Cheong
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] winbind, wbinfo -u gives errors
Hi all,
Please help, I'm having problem with my winbindd. When I tried to do a
wbinfo -u , below error appear:
Error looking up domain users
When I check log.winbindd, it says:
libsmb/cliconnect.c:cli_session_setup_spnego(683)
Kinit failed: Improper format of Kerberos configuration file
My krb5.conf is as below, is there any other files I need to look out??
etc/krb5.conf
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
ticket_lifetime = 24000
default_realm = SAM
default_tgs_enctypes = des-cbc-crc des-cbc-md5
default_tkt_enctypes = des-cbc-crc des-cbc-md5
dns_lookup_realm = true
dns_lookup_kdc = true
[realms]
SAM = {
kdc = dc01.sam:88
# admin_server = dc01.sam:749
default_domain = sam
admin_server = dc01.sam:749
}
[domain_realm]
.sam = SAM
sam = SAM
[kdc]
profile = /var/kerberos/krb5kdc/kdc.conf
[appdefaults]
pam = {
debug = false
ticket_lifetime = 36000
renew_lifetime = 36000
forwardable = true
krb4_convert = false
}
Regards,
Ivan Toh
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
