[Samba] Windows 98 logon server problem

2003-07-22 Thread Louis Nafziger
Anybody have any ideas about this?

Hi,

I have Samba version 2.2.7 up and running as a PDC for several
Windows 2000/XP clients, as well as file sharing working.  However, when
I try to use it as a Win9X logon server, I can not seem to make it work.

Whenever I try to logon from the Win98 computer, I get the error
message Incorrect Parameter (in windows) and get the following message
in the nmbd.log file:

=-=-=
[2003/07/15 12:15:05, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
   process_logon_packet: Logon from 192.168.13.189: code = 0x0
=-=-=

I have the following lines (among others) in my smb.conf:

logon home = \\%L\home\%U\.profiles
netbios name = AIP-KY
workgroup = AIP-KY
security = user
encrypt passwords = yes
password level = 8
domain master = yes
preferred master = yes
domain logons = yes
logon script = logon.bat
logon path = \\%L\profiles\%U
logon home = \\%L\home\%U\.profiles

Please let me know if you need any more information!

Louis Nafziger
[EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Creating domain users - how?

2003-07-16 Thread Louis Nafziger
Paul,

That is correct.  There is no setup at all required *for the user* on
the win2k machine.  Once it is part of the domain, assuming that it is
setup properly and can communicate with the domain server at login time
(machine passwords are correct, etc.) then a user does not have to exist
on the local machine in order to login.

The error message that you are getting refers to the computer account,
and not the user account as causing the problem, so it indicates a
problem with the machine account.

Please respond to my email address (and CC the list if you want) if you
have further questions as I don't always have time to keep up with the
mailing list.


Louis
[EMAIL PROTECTED]

 Louis,
 
 Thanks for your response.
 
 I thought I'd done what you said, but armed with your experience I'll
 get out of the domain, undo the server side changes and start again
 being more careful this time.
 
 Sorry to seem dim, but can you just confirm that (once I've done the
 rest properly) all I have to do to add a domain user to the domain is
 to add it on the PDC as both a linux and an smb user? (i.e. nothing to
 do from a Win2K client m/c)
 
 Paul

 The problem is - how do I do it? It seems to be such an easy question
 but I've failed to find it in the documentation. (I'm trying to follow

 How to Configure Samba 2.2 as a Primary Domain Controller which I
was
 pointed to by SWAT.) I'm guessing the solution's obvious, but if so, I

 hope somebody can help easily.

 I've used samba for a few years (so I'm not a complete newbie), but
now
 I'm trying to use it as a PDC for the first time. It's a simple
network
 consisting of a Mandrake Linux 9.1 m/c acting as the DNS and PDC, and
a
 Win2K workstation. It's samba version 2.2.7. The samba configuration
 seems OK so far as SWAT is concerned and I've tried using a share
 successfully. The config includes the netlogon share as documented.
 I've successfully persuaded a Windoze m/c to join the domain.
 The Windoze m/c's name is in both /etc/passwd and
/etc/samba/smbpasswd.
 The dollar sign is at the end of the name in both cases.
 I've also added root in /etc/samba/smbpasswd.
 I've created a user (which I intend will be a domain user) in
 /etc/passwd and in /etc/samba/smbpassed.

 Now what? I don't know what to do next.

 What worries me is that there doesn't seem to be a way of telling the
 Windoze m/c what password you've entered for it on the PDC. Anyway...

 If I try to add the user in Win2K using Control Panel/Users and
 Passwords/Add/Browse and tell it to use the root user and password,
it
 successfully returns a list of users on the linux m/c, including the
 one I want to be a domain user. However, when I select my domain
user
 and proceed in the wizard I get the following error message:
 The user could not be added because the following error has occurred:

 The trust relationship between this workstation and the primary domain

 failed.

 I've also tried ignoring the fact that I haven't told Windoze anything

 about this domain user. When I just try logging in as this user, it
 says:
 The system cannot log you on to this domain because the system's
 computer account in its primary domain is missing or the password on
 that account is incorrect.

 I can post the smb.conf file if necessary.

 Thanks for any help...

 Paul

 =
 LK,Paul
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Creating domain users - how?

2003-07-15 Thread Louis Nafziger
Paul,

I had similar problems, and this is a problem with the machine
account, not the user account.  The machine trust account should be
setup similar to the following, assuming a machine name of win2kname.

useradd -r -g trust -d /dev/null -s /dev/null win2kname$
smbpasswd -a -m win2kname

Note that the $ is not required on the second command.

This can also be caused if the win2k machine and the samba server
passwords are different on the machine trust account.  Note that you
should not normally change these, as when you join the domain, they will
be set automatically.  If this is the problem, you will need to leave
the domain on the win2k machine, and the delete the samba trust account
(i.e. smbpasswd -d -m win2kname).  Then re-create it (with smbpasswd -a
-m win2kname) and re-join the domain.  If all goes well, you should be
able to login!

Louis

 The problem is - how do I do it? It seems to be such an easy question
 but I've failed to find it in the documentation. (I'm trying to follow

 How to Configure Samba 2.2 as a Primary Domain Controller which I
was
 pointed to by SWAT.) I'm guessing the solution's obvious, but if so, I

 hope somebody can help easily.

 I've used samba for a few years (so I'm not a complete newbie), but
now
 I'm trying to use it as a PDC for the first time. It's a simple
network
 consisting of a Mandrake Linux 9.1 m/c acting as the DNS and PDC, and
a
 Win2K workstation. It's samba version 2.2.7. The samba configuration
 seems OK so far as SWAT is concerned and I've tried using a share
 successfully. The config includes the netlogon share as documented.
 I've successfully persuaded a Windoze m/c to join the domain.
 The Windoze m/c's name is in both /etc/passwd and
/etc/samba/smbpasswd.
 The dollar sign is at the end of the name in both cases.
 I've also added root in /etc/samba/smbpasswd.
 I've created a user (which I intend will be a domain user) in
 /etc/passwd and in /etc/samba/smbpassed.

 Now what? I don't know what to do next.

 What worries me is that there doesn't seem to be a way of telling the
 Windoze m/c what password you've entered for it on the PDC. Anyway...

 If I try to add the user in Win2K using Control Panel/Users and
 Passwords/Add/Browse and tell it to use the root user and password,
it
 successfully returns a list of users on the linux m/c, including the
 one I want to be a domain user. However, when I select my domain
user
 and proceed in the wizard I get the following error message:
 The user could not be added because the following error has occurred:

 The trust relationship between this workstation and the primary domain

 failed.

 I've also tried ignoring the fact that I haven't told Windoze anything

 about this domain user. When I just try logging in as this user, it
 says:
 The system cannot log you on to this domain because the system's
 computer account in its primary domain is missing or the password on
 that account is incorrect.

 I can post the smb.conf file if necessary.

 Thanks for any help...

 Paul

 =
 LK,Paul



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Windows 98 logon server problem

2003-07-15 Thread Louis Nafziger
Hi,

I have Samba version 2.2.7 up and running as a PDC for several
Windows 2000/XP clients, as well as file sharing working.  However, when
I try to use it as a Win9X logon server, I can not seem to make it work.

Whenever I try to logon from the Win98 computer, I get the error
message Incorrect Parameter (in windows) and get the following message
in the nmbd.log file:

=-=-=
[2003/07/15 12:15:05, 1]
nmbd/nmbd_processlogon.c:process_logon_packet(69)
   process_logon_packet: Logon from 192.168.13.189: code = 0x0
=-=-=

I have the following lines (among others) in my smb.conf:

logon home = \\%L\home\%U\.profiles
netbios name = AIP-KY
workgroup = AIP-KY
security = user
encrypt passwords = yes
password level = 8
domain master = yes
preferred master = yes
domain logons = yes
logon script = logon.bat
logon path = \\%L\profiles\%U
logon home = \\%L\home\%U\.profiles

Please let me know if you need any more information!

Louis Nafziger
[EMAIL PROTECTED]




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Workgroup/Domain Browsing

2003-06-12 Thread Louis Nafziger
I am currently running samba on a Redhat 8.0 server, and it is working great.  Keep up 
the good work guys!

My question involves a VPN connection to the server on a different network segment.  I 
have the following setup:

Internal Network - 192.168.13.0/24
 |
 |
Red Hat Samba Server - 192.168.13.3 - aip-ky
 |
VPN
 |
Windows XP Client - 192.168.10.2

On the XP client, I am able to manually specify shares on the samba server using the 
IP addres:  

\\192.168.13.3\data

If I add an entry to my hosts file, I can do the following:

\\aip-ky\data

(lmhosts.sam would not work for some reason though.)

However, browsing does not work.  The workgroup aip-ky does not show up, and neither 
does the server aip-ky.  I guess that I have two problems/questions:

1)  How can I have the machine names resolve automatically (ala wins) across the 
different network segments?

2)  How can I enable browsing of the remote network resources from the Windows client 
so that I don't have to manually specify the resource address?

Any help would be appreciated!

Louis
[EMAIL PROTECTED]

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Trying to join a domain

2003-06-06 Thread Louis Nafziger
I am running samba version 2.2.5 on Redhat.

I am using a windows 2000 computer to try to join a samba domain.

I have created the appropriate accounts, and workgroup file sharing is
working.

I get the following errors in the log file when I attempt to join the
domain:

[2003/06/05 17:59:26, 0]
rpc_server/srv_samr.c:api_samr_set_userinfo(670) api_samr_set_userinfo:
Unable to unmarshall SAMR_Q_SET_USERINFO.
[2003/06/05 17:59:26, 0] passdb/pdb_smbpasswd.c:pdb_getsampwrid(1416)
unable to open passdb database.

Any help would be greatly appreciated!

--
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Louis Nafziger
Advanced Industrial Products, INC.
Email:  [EMAIL PROTECTED]
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba