Re: [Samba] A domain controller for the domain could not be contacted (2.2.3a-12.3 for Debian) -- SOLVED by adding updating to 3 and 'domain logons = Yes' to smb.config

2003-12-19 Thread Eduard Witteveen
John H Terpstra wrote:

I've searched on this topic on google, but this led only to other people
asking the same question, without any aswers.
It would really mean a lot to me to get Samba running in our
organisation, but i've already spend a lot of time on this.  So if one
could give me some pointers were to start, i would be very thankfull
   

First off, I'd recommend you use Samba-3.0.1 or later.
 

I changed my sources.list to use an backport for my system.
Below are the lines i added:
# samba backport
deb http://www.backports.org/debian stable samba
deb-src http://www.backports.org/debian stable samba
updated my system

nemo:/var/log/samba# smbd -V
Version 3.0.0-Debian
Second, have you read the Samba-HOWTO-Collection?
http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf
It might help. This is also available in book form. It is called, The
Official Samba-3 HOWTO and Reference Guide - It's available from
Amazon.Com.
 

After reading this document 
(http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf) my eyes 
fell on the following part:

snip
Note
The above parameters make for a full set of parameters that may define the
servers mode of operation. The following smb.conf parameters are the 
essentials
alone:
netbios name = BELERIAND
workgroup = MIDEARTH
domain logons = Yes
domain master = Yes
security = User
The additional parameters shown in the longer listing above just makes for a
more complete explanation.
/snip

I added the following line to my /etc/samba/smb.conf and im getting a 
login screen for joining the domain. I guess i can figure it out from 
here by using the other mails / docs :)
domain logons = Yes

I dont know if installing 3.0 was necessary, but i dont have time to 
analyse this problem further at this moment, thanx all

Eduard Witteveen
[global]
;added after reading the http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf 
page 55
domain logons = Yes

;changes after comments of Fabien Chevalier
wins server = 10.0.0.10

;changes after comments of Patrick Shoaf
password level = 8
username level = 8
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
unix password sync = yes
pam password change = yes
obey pam restrictions = yes

;basic server settings
workgroup = HAWAR3
netbios name = nemo
server string = Samba %h PDC running %v
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192

;PDC and master browser settings
os level = 64
preferred master = yes
local master = yes
domain master = yes

;security and logging settings
security = user
# encrypt passwords = yes
log file = /var/log/samba/log.%m
log level = 2
# max log size = 50
# hosts allow = 127.0.0.1 192.168.1.0/255.255.255.0

;user profiles and home directory
logon home = \\%L\%U\
logon drive = H:
logon path = \\%L\profiles\%U
logon script = netlogon.bat

;sync passwords
unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n\n *Retype*new*UNIX*password* %n\n  
*Enter*new*UNIX*password* %n\n *Retype*new*UNIX*password* %n\n *passwd: 
*all*authentication*tokens*updated*successfully*

; new machines
add user script = /usr/sbin/useradd -d /dev/null -g machines -s /bin/false -M %u

#  shares 
[unsafe]
path = /etc/samba
comment = Unsafe Config Share, has to be removed
browseable = yes
writeable = yes

[homes]
comment = Home Directories 
browseable = no
writeable = yes

[profiles]
path = /home/samba/profiles
writeable = yes
browseable = no
create mask = 0600
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] A domain controller for the domain could not be contacted (2.2.3a-12.3 for Debian)

2003-12-18 Thread Eduard Witteveen
Eduard Witteveen wrote:

Please let me know what to do next.
I've searched on this topic on google, but this led only to other people 
asking the same question, without any aswers.
It would really mean a lot to me to get Samba running in our 
organisation, but i've already spend a lot of time on this.  So if one 
could give me some pointers were to start, i would be very thankfull

Eduard Witteveen
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] A domain controller for the domain could not be contacted (2.2.3a-12.3 for Debian)

2003-12-18 Thread John H Terpstra
On Thu, 18 Dec 2003, Eduard Witteveen wrote:

 Eduard Witteveen wrote:

  Please let me know what to do next.

 I've searched on this topic on google, but this led only to other people
 asking the same question, without any aswers.
 It would really mean a lot to me to get Samba running in our
 organisation, but i've already spend a lot of time on this.  So if one
 could give me some pointers were to start, i would be very thankfull

First off, I'd recommend you use Samba-3.0.1 or later.

Second, have you read the Samba-HOWTO-Collection?

http://www.samba.org/samba/docs/Samba-HOWTO-Collection.pdf

It might help. This is also available in book form. It is called, The
Official Samba-3 HOWTO and Reference Guide - It's available from
Amazon.Com.

Chapter 2 of the book as a number of worked example solutions that might
help you. This chapter is not in the Samba-HOWTO-Collection.

- John T.
-- 
John H Terpstra
Email: [EMAIL PROTECTED]
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] A domain controller for the domain could not be contacted (2.2.3a-12.3 for Debian)

2003-12-17 Thread Eduard Witteveen
Patrick Shoaf wrote:

I am running on RedHat, but everything should be same on server side.  
Try adding the following lines into the smb.conf file:

password level = 8
username level = 8
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
unix password sync = yes
pam password change = yes
obey pam restrictions = yes
I added your parameters to the config file and also created an 
additional shared called [unsafe] from which i can easier get the config 
file when i want to email it.

When i want to join the domain with an Windows XP Version 2002 
Professional Service Pack 1 i still get the following error:
   A domain controller for the domain HAWAR3 could not be contacted.
   Ensure that the domain name is typed correctly.
   If the name is correct click Details for troubleshooting

When i click on details:
   Note: This information is intended for a network administrator.  If 
you are not your network's administrator, notify the administrator that 
you received this information, which has been recorded in the file 
C:\WINDOWS\debug\dcdiag.txt.
   The domain name HAWAR3 might be a NetBIOS domain name.  If this is 
the case, verify that the domain name is properly registered with WINS.
   If you are certain that the name is not a NetBIOS domain name, then 
the following information can help you troubleshoot your DNS configuration.
   The following error occurred when DNS was queried for the service 
location (SRV) resource record used to locate a domain controller for 
domain HAWAR3:
   The error was: DNS name does not exist.
   (error code 0x232B RCODE_NAME_ERROR)
   The query was for the SRV record for _ldap._tcp.dc._msdcs.HAWAR3
   Common causes of this error include the following:
   - The DNS SRV record is not registered in DNS.
   - One or more of the following zones do not include delegation to 
its child zone:
   HAWAR3
   . (the root zone)
   For information about correcting this problem, click Help.

Screenshots:
- http://www.nergens.org/samba/ComputerNameChanges.PNG
- http://www.nergens.org/samba/ComputerProperties.PNG
Attached is my smb.conf

Eduard Witteveen  
[global]
;changes after comments of  Patrick Shoaf
password level = 8
username level = 8
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
unix password sync = yes
pam password change = yes
obey pam restrictions = yes

;basic server settings
workgroup = HAWAR3
netbios name = nemo
server string = Samba %h PDC running %v
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192

;PDC and master browser settings
os level = 64
preferred master = yes
local master = yes
domain master = yes

;security and logging settings
security = user
# encrypt passwords = yes
log file = /var/log/samba/log.%m
log level = 2
# max log size = 50
# hosts allow = 127.0.0.1 192.168.1.0/255.255.255.0

;user profiles and home directory
logon home = \\%L\%U\
logon drive = H:
logon path = \\%L\profiles\%U
logon script = netlogon.bat

;sync passwords
unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n\n *Retype*new*UNIX*password* %n\n  
*Enter*new*UNIX*password* %n\n *Retype*new*UNIX*password* %n\n *passwd: 
*all*authentication*tokens*updated*successfully*

; new machines
add user script = /usr/sbin/useradd -d /dev/null -g machines -s /bin/false -M %u

#  shares 
[unsafe]
path = /etc/samba
comment = Unsafe Config Share, has to be removed
browseable = yes
writeable = yes

[homes]
comment = Home Directories 
browseable = no
writeable = yes

[profiles]
path = /home/samba/profiles
writeable = yes
browseable = no
create mask = 0600
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] A domain controller for the domain could not be contacted (2.2.3a-12.3 for Debian)

2003-12-17 Thread Fabien Chevalier

 The error was: DNS name does not exist.
 (error code 0x232B RCODE_NAME_ERROR)
 The query was for the SRV record for
 _ldap._tcp.dc._msdcs.HAWAR3 Common causes of this error
 include the following: - The DNS SRV record is not registered
 in DNS.

It seems your workstation tries to locate the DC by doing a dns query, what is not 
currently supported by Samba.
What is your workstation node type set to?

Regards,

Fabien Chevalier

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] A domain controller for the domain could not be contacted (2.2.3a-12.3 for Debian)

2003-12-17 Thread Eduard Witteveen
Fabien Chevalier wrote:

It seems your workstation tries to locate the DC by doing a dns query, what is not currently supported by Samba.
What is your workstation node type set to?
 

Could you rephrase your question?  I dont know how i found out what the 
node type of my workstations is.
(after some googling i tried looking in the registry for the key 
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netbt\Parameters 
NodeType, but i couldnt find the entry)

Eduard Witteveen
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] A domain controller for the domain could not be contacted (2.2.3a-12.3 for Debian)

2003-12-17 Thread Fabien Chevalier
Le Wednesday 17 December 2003 12:39, Eduard Witteveen a écrit :
 Fabien Chevalier wrote:
 It seems your workstation tries to locate the DC by doing a
  dns query, what is not currently supported by Samba. What is
  your workstation node type set to?

 Could you rephrase your question?  I dont know how i found out
 what the node type of my workstations is.

Please send your ipconfig /all.
I suppose something's wrong in your network settings.
Are you using Dhcp or static Ip?

Regards,

Fabien Chevalier

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] A domain controller for the domain could not be contacted (2.2.3a-12.3 for Debian)

2003-12-17 Thread Eduard Witteveen
Fabien Chevalier wrote:

Please send your ipconfig /all.
 

I attached the output

I suppose something's wrong in your network settings.
Are you using Dhcp or static Ip?
 

Dhcp. (look in the output)

The linux server (nemo) has ip-number  10.0.0.152

Eduard Witteveen


Windows IP Configuration



Host Name . . . . . . . . . . . . : SHARED-PC

Primary Dns Suffix  . . . . . . . : 

Node Type . . . . . . . . . . . . : Hybrid

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No



Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix  . : 

Description . . . . . . . . . . . : Realtek RTL8139/810x Family Fast Ethernet 
NIC

Physical Address. . . . . . . . . : 00-E0-4C-48-3E-AB

Dhcp Enabled. . . . . . . . . . . : Yes

Autoconfiguration Enabled . . . . : Yes

IP Address. . . . . . . . . . . . : 10.0.0.156

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 10.0.0.138

DHCP Server . . . . . . . . . . . : 10.0.0.10

DNS Servers . . . . . . . . . . . : 194.134.0.97

194.134.5.55

Primary WINS Server . . . . . . . : 10.0.0.10

Lease Obtained. . . . . . . . . . : Dienstag, 16. Dezember 2003 10:38:39

Lease Expires . . . . . . . . . . : Dienstag, 23. Dezember 2003 10:38:39

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

Re: [Samba] A domain controller for the domain could not be contacted (2.2.3a-12.3 for Debian)

2003-12-17 Thread Fabien Chevalier
Le Wednesday 17 December 2003 13:20, Eduard Witteveen a écrit :
 Fabien Chevalier wrote:
 Please send your ipconfig /all.

 I attached the output

 I suppose something's wrong in your network settings.
 Are you using Dhcp or static Ip?

 Dhcp. (look in the output)

 The linux server (nemo) has ip-number  10.0.0.152


 Eduard Witteveen

Ok, thanks.

I think your Samba server hasn't been registered to your wins server,
thus when trying to join the domain, your workstation falls back to dns...which 
obviously fails.

Try to add wins server = 10.0.0.10 to your smb.conf,
and let us know if it works...

Good luck,

Fabien Chevalier

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] A domain controller for the domain could not be contacted (2.2.3a-12.3 for Debian)

2003-12-17 Thread Eduard Witteveen
Fabien Chevalier wrote:

I think your Samba server hasn't been registered to your wins server,
thus when trying to join the domain, your workstation falls back to dns...which 
obviously fails.
Try to add wins server = 10.0.0.10 to your smb.conf,
and let us know if it works...
 

No. I've attached my current configuration file.
When i try to join the domain i still get the same error message(and no 
logfile).
Please let me know what to do next.

[global]
;changes after comments of Fabien Chevalier
wins server = 10.0.0.10

;changes after comments of Patrick Shoaf
password level = 8
username level = 8
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
unix password sync = yes
pam password change = yes
obey pam restrictions = yes

;basic server settings
workgroup = HAWAR3
netbios name = nemo
server string = Samba %h PDC running %v
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192

;PDC and master browser settings
os level = 64
preferred master = yes
local master = yes
domain master = yes

;security and logging settings
security = user
# encrypt passwords = yes
log file = /var/log/samba/log.%m
log level = 2
# max log size = 50
# hosts allow = 127.0.0.1 192.168.1.0/255.255.255.0

;user profiles and home directory
logon home = \\%L\%U\
logon drive = H:
logon path = \\%L\profiles\%U
logon script = netlogon.bat

;sync passwords
unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n\n *Retype*new*UNIX*password* %n\n  
*Enter*new*UNIX*password* %n\n *Retype*new*UNIX*password* %n\n *passwd: 
*all*authentication*tokens*updated*successfully*

; new machines
add user script = /usr/sbin/useradd -d /dev/null -g machines -s /bin/false -M %u

#  shares 
[unsafe]
path = /etc/samba
comment = Unsafe Config Share, has to be removed
browseable = yes
writeable = yes

[homes]
comment = Home Directories 
browseable = no
writeable = yes

[profiles]
path = /home/samba/profiles
writeable = yes
browseable = no
create mask = 0600
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

RE: [Samba] A domain controller for the domain could not be contacted(2.2.3a-12.3 for Debian)

2003-12-17 Thread Russell Lavoie
You need to make sure that your node type is hybrid or you will not be able to contact 
the samba server.  I have had this problem before and that is how I fixed it.

Russ

-Original Message-
From: Fabien Chevalier [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, December 17, 2003 3:53 AM
To: Eduard Witteveen
Cc: [EMAIL PROTECTED]
Subject: Re: [Samba] A domain controller for the domain could not be 
contacted(2.2.3a-12.3 for Debian)


Le Wednesday 17 December 2003 12:39, Eduard Witteveen a écrit :
 Fabien Chevalier wrote:
 It seems your workstation tries to locate the DC by doing a  dns 
 query, what is not currently supported by Samba. What is  your 
 workstation node type set to?

 Could you rephrase your question?  I dont know how i found out what 
 the node type of my workstations is.

Please send your ipconfig /all.
I suppose something's wrong in your network settings.
Are you using Dhcp or static Ip?

Regards,

Fabien Chevalier


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] A domain controller for the domain could not by contacted (2.2.3a-12.3 for Debian)

2003-12-16 Thread Eduard Witteveen
Hello,

I'm having problems using Samba as an primary domain controller. I am 
using debian woody as our platform.

The version of samba is 2.2.3a-12.3 for Debian and i followed the 
instructions which can be found on the following url: 
http://www-106.ibm.com/developerworks/eserver/tutorials/samba/. In short 
this covers:
   - creating the config file
   - creating the users / groups
   - creating directory structure
   - configuring the windows client
I attached my config file's /logging  from my debian woody system.

I did the following things on the windows client (Windows XP 
Professional 2002 Service Pack 1)
   - Open the Local Security Policy editor (Start - All Programs - 
Administrative Tools - Local Security Policy).
   - Locate the entry Domain member: Digitally encrypt or sign secure 
channel (always). Disable it.
   - Locate the entry Domain member: Disable machine account password 
changes. Make sure it's disabled as well.
   - Locate the entry Domain member: Require strong (Windows 2000 or 
later) session key. Disable it.
   - Next, download the WinXP_SignOrSeal registry patch from 
www.samba.org http://www.samba.org or collect it from the Further 
resources: Downloads and developerWorks 
http://www-106.ibm.com/developerworks/eserver/tutorials/samba/samba-6-2.html 
section at the end of this tutorial. Apply it by double-clicking and 
answering Yes to the dialog prompt.
   - Now join the domain the same as you would for Windows NT or 2000. 
Right-click My Computer, select Properties, Computer Name, and Change. 
Or click the Network ID button and run the Network Wizard.

I put some screenshots of windows on the following locations: 
http://www.nergens.org/samba/ComputerNameChanges.PNG and 
http://www.nergens.org/samba/ComputerProperties.PNG

( i searched on the mailarchive, but i couldnt find any pointers / im 
kinda new to smb so i dont know how to debug)

Could someone please help me here?

Eduard Witteveen

[global]
;basic server settings
workgroup = HAWAR3
netbios name = nemo
server string = Samba %h PDC running %v
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192

;PDC and master browser settings
os level = 64
preferred master = yes
local master = yes
domain master = yes

;security and logging settings
security = user
# encrypt passwords = yes
log file = /var/log/samba/log.%m
log level = 2
# max log size = 50
# hosts allow = 127.0.0.1 192.168.1.0/255.255.255.0

;user profiles and home directory
logon home = \\%L\%U\
logon drive = H:
logon path = \\%L\profiles\%U
logon script = netlogon.bat

;sync passwords
unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n\n *Retype*new*UNIX*password* %n\n  
*Enter*new*UNIX*password* %n\n *Retype*new*UNIX*password* %n\n *passwd: 
*all*authentication*tokens*updated*successfully*

; new machines
add user script = /usr/sbin/useradd -d /dev/null -g machines -s /bin/false -M %u


#  shares 

[homes]
comment = Home Directories 
browseable = no
writeable = yes

[profiles]
path = /home/samba/profiles
writeable = yes
browseable = no
create mask = 0600[2003/12/16 17:18:37, 0] smbd/server.c:main(698)
  smbd version 2.2.3a-12.3 for Debian started.
  Copyright Andrew Tridgell and the Samba Team 1992-2002
[2003/12/16 17:18:37, 1] lib/debug.c:debug_message(250)
  INFO: Debug class all level = 2   (pid 232 from pid 232)
[2003/12/16 17:18:37, 2] param/loadparm.c:do_section(2973)
  Processing section [homes]
[2003/12/16 17:18:37, 2] param/loadparm.c:do_section(2973)
  Processing section [profiles]
[2003/12/16 17:18:37, 2] param/loadparm.c:do_section(2973)
  Processing section [netlogon]
[2003/12/16 17:18:37, 2] lib/interface.c:add_interface(81)
  added interface ip=10.0.0.152 bcast=10.0.0.255 nmask=255.255.255.0
[2003/12/16 17:18:37, 2] smbd/server.c:open_sockets(198)
  waiting for a connection
nemo:/var/log/samba# cat log.nmbd 
[2003/12/16 17:18:37, 0] nmbd/nmbd.c:main(783)
  Netbios nameserver version 2.2.3a-12.3 for Debian started.
  Copyright Andrew Tridgell and the Samba Team 1994-2002
[2003/12/16 17:18:37, 1] lib/debug.c:debug_message(250)
  INFO: Debug class all level = 2   (pid 230 from pid 230)
[2003/12/16 17:18:37, 2] nmbd/nmbd.c:main(821)
  Becoming a daemon.
[2003/12/16 17:18:37, 2] lib/interface.c:add_interface(81)
  added interface ip=10.0.0.152 bcast=10.0.0.255 nmask=255.255.255.0
[2003/12/16 17:18:37, 2] nmbd/nmbd_subnetdb.c:make_subnet(193)
  making subnet name:10.0.0.152 Broadcast address:10.0.0.255 Subnet mask:255.255.255.0
[2003/12/16 17:18:37, 2] nmbd/nmbd_subnetdb.c:make_subnet(193)
  making subnet name:UNICAST_SUBNET Broadcast address:0.0.0.0 Subnet mask:0.0.0.0
[2003/12/16 17:18:37, 2] nmbd/nmbd_subnetdb.c:make_subnet(193)
  making subnet name:REMOTE_BROADCAST_SUBNET Broadcast address:0.0.0.0 Subnet 
mask:0.0.0.0
[2003/12/16 17:18:37, 2] nmbd/nmbd_lmhosts.c:load_lmhosts_file(41)
  load_lmhosts_file: Can't open lmhosts file /etc/samba/lmhosts. Error was No such 

Re: [Samba] A domain controller for the domain could not by contacted (2.2.3a-12.3 for Debian)

2003-12-16 Thread Fabien Chevalier
Le Tuesday 16 December 2003 17:12, Eduard Witteveen a écrit :
 Hello,

 I'm having problems using Samba as an primary domain
 controller. I am using debian woody as our platform.

 The version of samba is 2.2.3a-12.3 for Debian and i
 followed the instructions which can be found on the following
 url:
 http://www-106.ibm.com/developerworks/eserver/tutorials/samba/



 Could someone please help me here?

Sure we can. :-)
For now you just missed something.
Relevant information is generally in /var/log/samba/log.NETBIOSNAME.
Have a look at it, and if you still cannot find, send relevant part back to the list.

Good luck,

Fabien Chevalier

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] A domain controller for the domain could not by contacted (2.2.3a-12.3 for Debian)

2003-12-16 Thread Eduard Witteveen
Fabien Chevalier wrote:

Relevant information is generally in /var/log/samba/log.NETBIOSNAME.

 

I cannot find this file. I did the following steps:
- Stopped the samba deamon
- Removed all the logging from the /var/log/samba directory
- Started the samba deamon
- Tried to join the domain again
nemo:/var/log/samba# ls -la
total 16
drwxr-x---2 root adm  4096 Dec 16 18:42 .
drwxr-xr-x6 root root 4096 Dec 16 06:25 ..
-rw-r--r--1 root root 3548 Dec 16 18:43 log.nmbd
-rw-r--r--1 root root  663 Dec 16 18:42 log.smbd
But when i try to access the server itselve by entering 
\\ipnumber-samba-machine in start  run  this file is created.
   nemo:/var/log/samba# cat log.shared-pc
   [2003/12/16 18:48:41, 2] smbd/server.c:exit_server(458)
 Closing connections
   [2003/12/16 18:48:41, 2] smbd/server.c:exit_server(458)
 Closing connections
   [2003/12/16 18:48:41, 2] smbd/server.c:exit_server(458)
 Closing connections

I tried to join the domain again at this point, but no changes are made 
to the logging while im doing this

Are there things i have to test before i want to join the domain?

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] A domain controller for the domain could not by contacted (2.2.3a-12.3 for Debian)

2003-12-16 Thread Patrick Shoaf
I am running on RedHat, but everything should be same on server side.  Try 
adding the following lines into the smb.conf file:

password level = 8
username level = 8
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
unix password sync = yes
pam password change = yes
obey pam restrictions = yes
I have these lines in my conf and everything is working for me, even WinXP 
now.
The first two lines are for the case differences between Win  linux.
All version of win beyond Win95 defaults to encrypted passwords, hence line 3.
I have two password files, /etc/passwd for Linux  smbpasswd for Samba, 
users must be in both to authenticate, hence lines 4-5.
Lines 6-7 were in my default config and things work, so I did not question 
them.

If this does not work, please email me complete smb.conf file, and I will 
do a more thorough comparison.

Good Luck.

Patrick Shoaf

At 11:12 AM 12/16/2003, Eduard Witteveen wrote:
Hello,

I'm having problems using Samba as an primary domain controller. I am 
using debian woody as our platform.

The version of samba is 2.2.3a-12.3 for Debian and i followed the 
instructions which can be found on the following url: 
http://www-106.ibm.com/developerworks/eserver/tutorials/samba/. In short 
this covers:
   - creating the config file
   - creating the users / groups
   - creating directory structure
   - configuring the windows client
I attached my config file's /logging  from my debian woody system.

I did the following things on the windows client (Windows XP Professional 
2002 Service Pack 1)
   - Open the Local Security Policy editor (Start - All Programs - 
Administrative Tools - Local Security Policy).
   - Locate the entry Domain member: Digitally encrypt or sign secure 
channel (always). Disable it.
   - Locate the entry Domain member: Disable machine account password 
changes. Make sure it's disabled as well.
   - Locate the entry Domain member: Require strong (Windows 2000 or 
later) session key. Disable it.
   - Next, download the WinXP_SignOrSeal registry patch from 
www.samba.org http://www.samba.org or collect it from the Further 
resources: Downloads and developerWorks 
http://www-106.ibm.com/developerworks/eserver/tutorials/samba/samba-6-2.html 
section at the end of this tutorial. Apply it by double-clicking and 
answering Yes to the dialog prompt.
   - Now join the domain the same as you would for Windows NT or 2000. 
Right-click My Computer, select Properties, Computer Name, and Change. Or 
click the Network ID button and run the Network Wizard.

I put some screenshots of windows on the following locations: 
http://www.nergens.org/samba/ComputerNameChanges.PNG and 
http://www.nergens.org/samba/ComputerProperties.PNG

( i searched on the mailarchive, but i couldnt find any pointers / im 
kinda new to smb so i dont know how to debug)

Could someone please help me here?

Eduard Witteveen



[global]
;basic server settings
workgroup = HAWAR3
netbios name = nemo
server string = Samba %h PDC running %v
socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192
;PDC and master browser settings
os level = 64
preferred master = yes
local master = yes
domain master = yes
;security and logging settings
security = user
# encrypt passwords = yes
log file = /var/log/samba/log.%m
log level = 2
# max log size = 50
# hosts allow = 127.0.0.1 192.168.1.0/255.255.255.0
;user profiles and home directory
logon home = \\%L\%U\
logon drive = H:
logon path = \\%L\profiles\%U
logon script = netlogon.bat
;sync passwords
unix password sync = yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n\n *Retype*new*UNIX*password* 
%n\n  *Enter*new*UNIX*password* %n\n *Retype*new*UNIX*password* %n\n 
*passwd: *all*authentication*tokens*updated*successfully*

; new machines
add user script = /usr/sbin/useradd -d /dev/null -g machines -s /bin/false 
-M %u

#  shares 

[homes]
comment = Home Directories
browseable = no
writeable = yes
[profiles]
path = /home/samba/profiles
writeable = yes
browseable = no
create mask = 0600[2003/12/16 17:18:37, 0] smbd/server.c:main(698)
  smbd version 2.2.3a-12.3 for Debian started.
  Copyright Andrew Tridgell and the Samba Team 1992-2002
[2003/12/16 17:18:37, 1] lib/debug.c:debug_message(250)
  INFO: Debug class all level = 2   (pid 232 from pid 232)
[2003/12/16 17:18:37, 2] param/loadparm.c:do_section(2973)
  Processing section [homes]
[2003/12/16 17:18:37, 2] param/loadparm.c:do_section(2973)
  Processing section [profiles]
[2003/12/16 17:18:37, 2] param/loadparm.c:do_section(2973)
  Processing section [netlogon]
[2003/12/16 17:18:37, 2] lib/interface.c:add_interface(81)
  added interface ip=10.0.0.152 bcast=10.0.0.255 nmask=255.255.255.0
[2003/12/16 17:18:37, 2] smbd/server.c:open_sockets(198)
  waiting for a connection
nemo:/var/log/samba# cat log.nmbd
[2003/12/16 17:18:37, 0] nmbd/nmbd.c:main(783)
  Netbios nameserver version 2.2.3a-12.3 for Debian started.
  Copyright Andrew Tridgell and the Samba