Re: [Samba] Can't join Windows 7 Pro/XP to samba PDC
= preexec = preexec close = No postexec = root preexec = root preexec close = No root postexec = available = Yes volume = fstype = NTFS set directory = No wide links = No follow symlinks = Yes dont descend = magic script = magic output = delete readonly = No dos filemode = No dos filetimes = Yes dos filetime resolution = No fake directory create times = No vfs objects = msdfs root = No msdfs proxy = [homes] comment = Home Directories path = %H valid users = %S, %D%w%S read only = No inherit acls = Yes browseable = No [profiles] comment = Network Profiles Service path = %H read only = No create mask = 0600 directory mask = 0700 store dos attributes = Yes [users] comment = All users path = /home read only = No inherit acls = Yes veto files = /aquota.user/groups/shares/ [groups] comment = All groups path = /home/groups read only = No inherit acls = Yes It can be convenient to detect a problem. Good luck Gérard -Message d'origine- De : atara...@gmail.com [mailto:atara...@gmail.com] De la part de Andres Tarallo Envoyé : mercredi 30 mars 2011 15:04 À : Gérard Guével Cc : samba Objet : Re: [Samba] Can't join Windows 7 Pro/XP to samba PDC Gerard: Here is my smb.conf [global] workgroup = ARAMDA map to guest = Bad User passdb backend = ldapsam:ldap://localhost log level = 3 log file = /var/log/samba.log printcap name = cups add user script = ldapsmb -a -u %u delete user script = ldapsmb -d -u %u add group script = ldapsmb -a -g %g delete group script = ldapsmb -d -g %g add user to group script = ldapsmb -j -u %u -g %g delete user from group script = ldapsmb -j -u %u -g %g set primary group script = ldapsmb -m -u %u -gid %g add machine script = /usr/sbin/smbldap-useradd -t 0 -g 1515 -w %u logon path = \\%L\profiles\.msprofile logon drive = Z: logon home = \\%L\%U\.9xprofile domain logons = Yes os level = 65 preferred master = Yes domain master = Yes wins support = Yes ldap admin dn = cn=replicasamba,dc=aramda,dc=uy ldap group suffix = ou=Groups ldap idmap suffix = ou=Idmap ldap machine suffix = ou=Computers ldap passwd sync = yes ldap suffix = dc=aramda,dc=uy ldap ssl = no ldap user suffix = ou=People add share command = /var/lib/samba/scripts/modify_samba_config.pl delete share command = /var/lib/samba/scripts/modify_samba_config.pl usershare allow guests = Yes hosts allow = 127.0.0.1, 172.16.1. cups options = raw I will test your suggestions. Your help is appreciated. Andrés -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Can't join Windows 7 Pro/XP to samba PDC
Andres, Your smb.conf seems right at a first glance. Is it a choice not to set the local master to yes ? What are your charsets ? Something like dos charset = CP850, unix charset = UTF-8, display charset = LOCALE I already have a connection problem with the dos charset set to CP850. Try with dos charset set to ASCII. Please increase your log level to 10 and give me the results of the following commands. You can launch these commands locally and/or from a Linux station if possible : testparm -v |grep charset nmblookup -B yourboard __SAMBA__ nmblookup -M ARAMDA nmblookup -d 2 '*' findsmb smbclient -L yourboard Uxxx Check if you detect some protocol negotiation failed in your samba.log file. At the end, you can launch a full testparm -v to display all your samba parameters values. It can be convenient to detect a problem. Good luck Gérard -Message d'origine- De : atara...@gmail.com [mailto:atara...@gmail.com] De la part de Andres Tarallo Envoyé : mercredi 30 mars 2011 15:04 À : Gérard Guével Cc : samba Objet : Re: [Samba] Can't join Windows 7 Pro/XP to samba PDC Gerard: Here is my smb.conf [global] workgroup = ARAMDA map to guest = Bad User passdb backend = ldapsam:ldap://localhost log level = 3 log file = /var/log/samba.log printcap name = cups add user script = ldapsmb -a -u %u delete user script = ldapsmb -d -u %u add group script = ldapsmb -a -g %g delete group script = ldapsmb -d -g %g add user to group script = ldapsmb -j -u %u -g %g delete user from group script = ldapsmb -j -u %u -g %g set primary group script = ldapsmb -m -u %u -gid %g add machine script = /usr/sbin/smbldap-useradd -t 0 -g 1515 -w %u logon path = \\%L\profiles\.msprofile logon drive = Z: logon home = \\%L\%U\.9xprofile domain logons = Yes os level = 65 preferred master = Yes domain master = Yes wins support = Yes ldap admin dn = cn=replicasamba,dc=aramda,dc=uy ldap group suffix = ou=Groups ldap idmap suffix = ou=Idmap ldap machine suffix = ou=Computers ldap passwd sync = yes ldap suffix = dc=aramda,dc=uy ldap ssl = no ldap user suffix = ou=People add share command = /var/lib/samba/scripts/modify_samba_config.pl delete share command = /var/lib/samba/scripts/modify_samba_config.pl usershare allow guests = Yes hosts allow = 127.0.0.1, 172.16.1. cups options = raw I will test your suggestions. Andrés -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Can't join Windows 7 Pro/XP to samba PDC
2011/3/24 Chris Weiss cwe...@gmail.com: On Thu, Mar 24, 2011 at 8:40 AM, John Drescher dresche...@gmail.com wrote: On Thu, Mar 24, 2011 at 9:36 AM, Andres Tarallo atara...@acm.org wrote: 2011/3/23 Gaiseric Vandal gaiseric.van...@gmail.com: Did you try manually creating a unix user account for the samba machine? Does getent passwd show that machine? Yes, I've created a user account with smbldap-passwd. We can login through ssh and from console. Did you create the a account for the machine you are trying to add? John add machine script is in the conf, so manual creation should not be needed. better question is: does the machine account actually get created in the right place? Yes, tne machines account are created under the Computers OU, where samba should lookup them. As said before: we runned out of ideas. So your ideas are highly appreciated. Andrés PS: Did you see something wrong in our smb.conf.? Andrés -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Can't join Windows 7 Pro/XP to samba PDC
2011/3/24 John Drescher dresche...@gmail.com: On Thu, Mar 24, 2011 at 9:45 AM, Chris Weiss cwe...@gmail.com wrote: On Thu, Mar 24, 2011 at 8:40 AM, John Drescher dresche...@gmail.com wrote: On Thu, Mar 24, 2011 at 9:36 AM, Andres Tarallo atara...@acm.org wrote: 2011/3/23 Gaiseric Vandal gaiseric.van...@gmail.com: Did you try manually creating a unix user account for the samba machine? Does getent passwd show that machine? Yes, I've created a user account with smbldap-passwd. We can login through ssh and from console. Did you create the a account for the machine you are trying to add? John add machine script is in the conf, so manual creation should not be needed. What I was getting at is when that fails if you manually create the machine account and then adding the workstation to the domain works you will know where the problem is... In the first attempt to create the machine account the machine is created in LDAP. In the next attempt we see the script exitng with error level 9 (user exists) but we can't join it to the domain. Any ideas appreciated. Andrés -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Can't join Windows 7 Pro/XP to samba PDC
For a windows 7, I modify the following key in the windows registry : [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManWorkstation\Para meters] DNSNameResolutionRequired=dword: DomainCompatibilityMode=dword:0001 Some calls to check the SAMBA PDC : testparm -v nmblookup -B myboard __SAMBA__ nmblookup -M mygroup nmblookup -d 2 '*' findsmb smbclient -L myboard Uxxx smbclient //myboard/public -Uxxx Can send me your smb.conf to check. Gérard -Message d'origine- De : samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] De la part de Andres Tarallo Envoyé : mercredi 30 mars 2011 12:25 À : samba Objet : Re: [Samba] Can't join Windows 7 Pro/XP to samba PDC 2011/3/24 Chris Weiss cwe...@gmail.com: On Thu, Mar 24, 2011 at 8:40 AM, John Drescher dresche...@gmail.com wrote: On Thu, Mar 24, 2011 at 9:36 AM, Andres Tarallo atara...@acm.org wrote: 2011/3/23 Gaiseric Vandal gaiseric.van...@gmail.com: Did you try manually creating a unix user account for the samba machine? Does getent passwd show that machine? Yes, I've created a user account with smbldap-passwd. We can login through ssh and from console. Did you create the a account for the machine you are trying to add? John add machine script is in the conf, so manual creation should not be needed. better question is: does the machine account actually get created in the right place? Yes, tne machines account are created under the Computers OU, where samba should lookup them. As said before: we runned out of ideas. So your ideas are highly appreciated. Andrés PS: Did you see something wrong in our smb.conf.? Andrés -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba __ Information provenant d'ESET NOD32 Antivirus, version de la base des signatures de virus 5999 (20110330) __ Le message a été vérifié par ESET NOD32 Antivirus. http://www.eset.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Can't join Windows 7 Pro/XP to samba PDC
Gerard: Here is my smb.conf [global] workgroup = ARAMDA map to guest = Bad User passdb backend = ldapsam:ldap://localhost log level = 3 log file = /var/log/samba.log printcap name = cups add user script = ldapsmb -a -u %u delete user script = ldapsmb -d -u %u add group script = ldapsmb -a -g %g delete group script = ldapsmb -d -g %g add user to group script = ldapsmb -j -u %u -g %g delete user from group script = ldapsmb -j -u %u -g %g set primary group script = ldapsmb -m -u %u -gid %g add machine script = /usr/sbin/smbldap-useradd -t 0 -g 1515 -w %u logon path = \\%L\profiles\.msprofile logon drive = Z: logon home = \\%L\%U\.9xprofile domain logons = Yes os level = 65 preferred master = Yes domain master = Yes wins support = Yes ldap admin dn = cn=replicasamba,dc=aramda,dc=uy ldap group suffix = ou=Groups ldap idmap suffix = ou=Idmap ldap machine suffix = ou=Computers ldap passwd sync = yes ldap suffix = dc=aramda,dc=uy ldap ssl = no ldap user suffix = ou=People add share command = /var/lib/samba/scripts/modify_samba_config.pl delete share command = /var/lib/samba/scripts/modify_samba_config.pl usershare allow guests = Yes hosts allow = 127.0.0.1, 172.16.1. cups options = raw I will test your suggestions. Andrés 2011/3/30 Gérard Guével ggue...@interfaceconcept.com: For a windows 7, I modify the following key in the windows registry : [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManWorkstation\Para meters] DNSNameResolutionRequired=dword: DomainCompatibilityMode=dword:0001 Some calls to check the SAMBA PDC : • testparm -v • nmblookup -B myboard __SAMBA__ • nmblookup -M mygroup • nmblookup -d 2 '*' • findsmb • smbclient -L myboard –Uxxx • smbclient //myboard/public -Uxxx Can send me your smb.conf to check. Gérard -Message d'origine- De : samba-boun...@lists.samba.org [mailto:samba-boun...@lists.samba.org] De la part de Andres Tarallo Envoyé : mercredi 30 mars 2011 12:25 À : samba Objet : Re: [Samba] Can't join Windows 7 Pro/XP to samba PDC 2011/3/24 Chris Weiss cwe...@gmail.com: On Thu, Mar 24, 2011 at 8:40 AM, John Drescher dresche...@gmail.com wrote: On Thu, Mar 24, 2011 at 9:36 AM, Andres Tarallo atara...@acm.org wrote: 2011/3/23 Gaiseric Vandal gaiseric.van...@gmail.com: Did you try manually creating a unix user account for the samba machine? Does getent passwd show that machine? Yes, I've created a user account with smbldap-passwd. We can login through ssh and from console. Did you create the a account for the machine you are trying to add? John add machine script is in the conf, so manual creation should not be needed. better question is: does the machine account actually get created in the right place? Yes, tne machines account are created under the Computers OU, where samba should lookup them. As said before: we runned out of ideas. So your ideas are highly appreciated. Andrés PS: Did you see something wrong in our smb.conf.? Andrés -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba __ Information provenant d'ESET NOD32 Antivirus, version de la base des signatures de virus 5999 (20110330) __ Le message a été vérifié par ESET NOD32 Antivirus. http://www.eset.com -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Can't join Windows 7 Pro/XP to samba PDC
2011/3/23 Gaiseric Vandal gaiseric.van...@gmail.com: Did you try manually creating a unix user account for the samba machine? Does getent passwd show that machine? Yes, I've created a user account with smbldap-passwd. We can login through ssh and from console. As said before, ideas appreciated. Andrés I don't have samba configured to automatically create unix user accounts or allocate ids in winbind, so I need to manually create unix accounts for users or machines. The ldap machine suffix in my setup has to be pointed to the same container as user accounts (or a sub OU of the user accounts.) I also use ldap for my unix (non-samba) accounts- ssh, nfs, linux clients etc, and I initially started with samba 3.0.x , so my setup decisions may be different from yours. On 03/23/2011 09:29 AM, Andres Tarallo wrote: Hi ! I have installed samba 3.5.4 on OpenSuSE 11.3. It's configured as a PDC with LDAP backend.The LDAP backend was populated with the help of smbldap-tools. Here is the global section of my smb.conf [global] workgroup = ARAMDA map to guest = Bad User passdb backend = ldapsam:ldap://localhost log level = 3 log file = /var/log/samba.log printcap name = cups add user script = ldapsmb -a -u %u delete user script = ldapsmb -d -u %u add group script = ldapsmb -a -g %g delete group script = ldapsmb -d -g %g add user to group script = ldapsmb -j -u %u -g %g delete user from group script = ldapsmb -j -u %u -g %g set primary group script = ldapsmb -m -u %u -gid %g add machine script = /usr/sbin/smbldap-useradd -t 0 -g 1515 -w %u logon path = \\%L\profiles\.msprofile logon drive = Z: logon home = \\%L\%U\.9xprofile domain logons = Yes os level = 65 preferred master = Yes domain master = Yes wins support = Yes ldap admin dn = cn=replicasamba,dc=aramda,dc=uy ldap group suffix = ou=Groups ldap idmap suffix = ou=Idmap ldap machine suffix = ou=Computers ldap passwd sync = yes ldap suffix = dc=aramda,dc=uy ldap ssl = no ldap user suffix = ou=People add share command = /var/lib/samba/scripts/modify_samba_config.pl delete share command = /var/lib/samba/scripts/modify_samba_config.pl usershare allow guests = Yes hosts allow = 127.0.0.1, 172.16.1. cups options = raw In the workstations with Windows 7 Pro, we try to join them to the domain. We get a message saying that can't join them. In samba.log we found this [2011/03/18 10:45:46.419648, 3] passdb/pdb_interface.c:348(pdb_default_create_user) _samr_create_user: Running the command `/usr/sbin/smbldap-useradd -t 0 -g 1515 -w cpd-sist03$' gave 0 [2011/03/18 10:45:46.421589, 3] passdb/pdb_interface.c:365(pdb_default_create_user) pdb_default_create_user: failed to create a new user structure: NT_STATUS_NO_SUCH_USER Any help appreciated, we seem to be in a dead end. Andrés -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Can't join Windows 7 Pro/XP to samba PDC
On Thu, Mar 24, 2011 at 9:36 AM, Andres Tarallo atara...@acm.org wrote: 2011/3/23 Gaiseric Vandal gaiseric.van...@gmail.com: Did you try manually creating a unix user account for the samba machine? Does getent passwd show that machine? Yes, I've created a user account with smbldap-passwd. We can login through ssh and from console. Did you create the a account for the machine you are trying to add? John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Can't join Windows 7 Pro/XP to samba PDC
On Thu, Mar 24, 2011 at 8:40 AM, John Drescher dresche...@gmail.com wrote: On Thu, Mar 24, 2011 at 9:36 AM, Andres Tarallo atara...@acm.org wrote: 2011/3/23 Gaiseric Vandal gaiseric.van...@gmail.com: Did you try manually creating a unix user account for the samba machine? Does getent passwd show that machine? Yes, I've created a user account with smbldap-passwd. We can login through ssh and from console. Did you create the a account for the machine you are trying to add? John add machine script is in the conf, so manual creation should not be needed. better question is: does the machine account actually get created in the right place? -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Can't join Windows 7 Pro/XP to samba PDC
On Thu, Mar 24, 2011 at 9:45 AM, Chris Weiss cwe...@gmail.com wrote: On Thu, Mar 24, 2011 at 8:40 AM, John Drescher dresche...@gmail.com wrote: On Thu, Mar 24, 2011 at 9:36 AM, Andres Tarallo atara...@acm.org wrote: 2011/3/23 Gaiseric Vandal gaiseric.van...@gmail.com: Did you try manually creating a unix user account for the samba machine? Does getent passwd show that machine? Yes, I've created a user account with smbldap-passwd. We can login through ssh and from console. Did you create the a account for the machine you are trying to add? John add machine script is in the conf, so manual creation should not be needed. What I was getting at is when that fails if you manually create the machine account and then adding the workstation to the domain works you will know where the problem is... John -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Can't join Windows 7 Pro/XP to samba PDC
Hi ! I have installed samba 3.5.4 on OpenSuSE 11.3. It's configured as a PDC with LDAP backend.The LDAP backend was populated with the help of smbldap-tools. Here is the global section of my smb.conf [global] workgroup = ARAMDA map to guest = Bad User passdb backend = ldapsam:ldap://localhost log level = 3 log file = /var/log/samba.log printcap name = cups add user script = ldapsmb -a -u %u delete user script = ldapsmb -d -u %u add group script = ldapsmb -a -g %g delete group script = ldapsmb -d -g %g add user to group script = ldapsmb -j -u %u -g %g delete user from group script = ldapsmb -j -u %u -g %g set primary group script = ldapsmb -m -u %u -gid %g add machine script = /usr/sbin/smbldap-useradd -t 0 -g 1515 -w %u logon path = \\%L\profiles\.msprofile logon drive = Z: logon home = \\%L\%U\.9xprofile domain logons = Yes os level = 65 preferred master = Yes domain master = Yes wins support = Yes ldap admin dn = cn=replicasamba,dc=aramda,dc=uy ldap group suffix = ou=Groups ldap idmap suffix = ou=Idmap ldap machine suffix = ou=Computers ldap passwd sync = yes ldap suffix = dc=aramda,dc=uy ldap ssl = no ldap user suffix = ou=People add share command = /var/lib/samba/scripts/modify_samba_config.pl delete share command = /var/lib/samba/scripts/modify_samba_config.pl usershare allow guests = Yes hosts allow = 127.0.0.1, 172.16.1. cups options = raw In the workstations with Windows 7 Pro, we try to join them to the domain. We get a message saying that can't join them. In samba.log we found this [2011/03/18 10:45:46.419648, 3] passdb/pdb_interface.c:348(pdb_default_create_user) _samr_create_user: Running the command `/usr/sbin/smbldap-useradd -t 0 -g 1515 -w cpd-sist03$' gave 0 [2011/03/18 10:45:46.421589, 3] passdb/pdb_interface.c:365(pdb_default_create_user) pdb_default_create_user: failed to create a new user structure: NT_STATUS_NO_SUCH_USER Any help appreciated, we seem to be in a dead end. Andrés -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Can't join Windows 7 Pro/XP to samba PDC
Did you try manually creating a unix user account for the samba machine? Does getent passwd show that machine? I don't have samba configured to automatically create unix user accounts or allocate ids in winbind, so I need to manually create unix accounts for users or machines. The ldap machine suffix in my setup has to be pointed to the same container as user accounts (or a sub OU of the user accounts.) I also use ldap for my unix (non-samba) accounts- ssh, nfs, linux clients etc, and I initially started with samba 3.0.x , so my setup decisions may be different from yours. On 03/23/2011 09:29 AM, Andres Tarallo wrote: Hi ! I have installed samba 3.5.4 on OpenSuSE 11.3. It's configured as a PDC with LDAP backend.The LDAP backend was populated with the help of smbldap-tools. Here is the global section of my smb.conf [global] workgroup = ARAMDA map to guest = Bad User passdb backend = ldapsam:ldap://localhost log level = 3 log file = /var/log/samba.log printcap name = cups add user script = ldapsmb -a -u %u delete user script = ldapsmb -d -u %u add group script = ldapsmb -a -g %g delete group script = ldapsmb -d -g %g add user to group script = ldapsmb -j -u %u -g %g delete user from group script = ldapsmb -j -u %u -g %g set primary group script = ldapsmb -m -u %u -gid %g add machine script = /usr/sbin/smbldap-useradd -t 0 -g 1515 -w %u logon path = \\%L\profiles\.msprofile logon drive = Z: logon home = \\%L\%U\.9xprofile domain logons = Yes os level = 65 preferred master = Yes domain master = Yes wins support = Yes ldap admin dn = cn=replicasamba,dc=aramda,dc=uy ldap group suffix = ou=Groups ldap idmap suffix = ou=Idmap ldap machine suffix = ou=Computers ldap passwd sync = yes ldap suffix = dc=aramda,dc=uy ldap ssl = no ldap user suffix = ou=People add share command = /var/lib/samba/scripts/modify_samba_config.pl delete share command = /var/lib/samba/scripts/modify_samba_config.pl usershare allow guests = Yes hosts allow = 127.0.0.1, 172.16.1. cups options = raw In the workstations with Windows 7 Pro, we try to join them to the domain. We get a message saying that can't join them. In samba.log we found this [2011/03/18 10:45:46.419648, 3] passdb/pdb_interface.c:348(pdb_default_create_user) _samr_create_user: Running the command `/usr/sbin/smbldap-useradd -t 0 -g 1515 -w cpd-sist03$' gave 0 [2011/03/18 10:45:46.421589, 3] passdb/pdb_interface.c:365(pdb_default_create_user) pdb_default_create_user: failed to create a new user structure: NT_STATUS_NO_SUCH_USER Any help appreciated, we seem to be in a dead end. Andrés -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
