Re: [Samba] domain master list - cross subnet?

2005-04-29 Thread Alexander Lazarevich
I'll rephrase the question:
Does anyone, using samba 3 as a PDC master browser on a subnet, see 
other subnet's on the WAN?

For instance, if your subnet is dude.udump.edu, can your samba master 
browse list see the windows domain chick.udump.edu (assuming it exists)?

If I just know it's possible, then I know I'm doing something wrong.
Thanks,
Alex
On Thu, 28 Apr 2005, Alexander Lazarevich wrote:
samba-3.0.10-1.4E on RHEL4-AS. I've got a test domain setup and working just 
fine. Windows XP clients are authenticating just fine. The only problem I 
have so far is my domain browser list is not correct. I can see everything in 
my subnet fine, but can't see anything outside my subnet. This is different 
than my NT4 domain, who's browse list shows me every domain within the larger 
campus domain (WAN), which are a lot of domains outside of my subnet. So my 
question is, how do I get my samba domain browse list to behave like my NT4 
domain browse list does and get the list from the WAN?

Is a samba domain master browser supposed to be able to get browse lists from 
accross subnets? If not, is there any way to force a samba domain to collect 
browse lists from outside it's subnet? We have many users who need to access 
domains outside our subnets, and they need to be able to browse to it.

My samba is the master browser and there is no other domain master in the 
X-TEST domain. Anyway, os level=65 should take care of that even if there 
were.

I've also read chapter 9 of the samba how to, and I'm doing everything in 
there according to plan, I think. The thing that scares me is: Failing a 
complete restart, the only other thing you can do is wait until the entry 
times out and is then flushed from the list. This may take a long time on 
some networks (perhaps moths). Ouch. I hope I don't have to wait a month for 
nmbd to collect the browse list from all the WINS hosts on campus???

Additional info: we don't have a WINS server on our subnet, we point all our 
clients to a two WINS servers, both outside of our subnet, and that works 
fine with NT4 and samba domains.

Here is my smb.conf global:
[global]
  workgroup = X-TEST
  username map = /etc/samba/smbusers
  map to guest = Bad User
  logon drive = z:
  logon path =
  logon script = x-test-logon.bat
  security = user
  encrypt passwords = yes
  server string = X-TEST Samba Domain
  netbios name = xxx-x
  add machine script = /usr/sbin/useradd  -c Machine -d /var/lib/nobody -s 
/bin/false %m
  domain master = yes
  domain logons = yes
  local master = yes
  preferred master = yes
  wins server = XXX.XXX.XXX.XXX (a wins server on a different subnet)
  hosts allow = XXX.XXX XXX.XXX (allowing IP's from campus wide subnets)
  os level = 65
  log level = 3
  max log size = 0
  log file = /var/log/samba/XXX-X-samba.log

Thanks!
Alex
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] domain master list - cross subnet?

2005-04-29 Thread Tony Earnshaw
fre, 29.04.2005 kl. 20.31 skrev Alexander Lazarevich:

 Does anyone, using samba 3 as a PDC master browser on a subnet, see 
 other subnet's on the WAN?

Yes.

 For instance, if your subnet is dude.udump.edu, can your samba master 
 browse list see the windows domain chick.udump.edu (assuming it exists)?

Yes

 If I just know it's possible, then I know I'm doing something wrong.

It's possible. I don't want any inter-subnet contact whatsoever and it's
all incidental, but domain-1's browser on 192.168.2.0/24 sees the
domain-2's PDC master bowser on 192.168.0.0/24 - both Samba 3.0.11
machines. Both are wins servers.

How? I dunno, they just do. I'd rather they didn't, I don't really want
them to.

--Tonni

-- 
Nothing sucksseeds like a pigeon without a beak ...

mail: [EMAIL PROTECTED]
http://www.billy.demon.nl
 
They'll love us, won't they? They feed us, don't they? ...

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


Re: [Samba] domain master list - cross subnet?

2005-04-29 Thread Alexander Lazarevich
On Sat, 30 Apr 2005, Tony Earnshaw wrote:
fre, 29.04.2005 kl. 20.31 skrev Alexander Lazarevich:
Does anyone, using samba 3 as a PDC master browser on a subnet, see
other subnet's on the WAN?
Yes.
For instance, if your subnet is dude.udump.edu, can your samba master
browse list see the windows domain chick.udump.edu (assuming it exists)?
Yes
If I just know it's possible, then I know I'm doing something wrong.
It's possible. I don't want any inter-subnet contact whatsoever and it's
all incidental, but domain-1's browser on 192.168.2.0/24 sees the
domain-2's PDC master bowser on 192.168.0.0/24 - both Samba 3.0.11
machines. Both are wins servers.
How? I dunno, they just do. I'd rather they didn't, I don't really want
them to.
There is a local security policy on windows clients that forces the client 
NOT to be in the browse list. I don't think samba PDC's can do machine 
policies, so you can't set it there. Hopefully you don't have 10K PC's.

Hope that helps.
Alex
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] domain master list - cross subnet?

2005-04-28 Thread Alexander Lazarevich
samba-3.0.10-1.4E on RHEL4-AS. I've got a test domain setup and working 
just fine. Windows XP clients are authenticating just fine. The only 
problem I have so far is my domain browser list is not correct. I can see 
everything in my subnet fine, but can't see anything outside my subnet. 
This is different than my NT4 domain, who's browse list shows me every 
domain within the larger campus domain (WAN), which are a lot of domains 
outside of my subnet. So my question is, how do I get my samba domain 
browse list to behave like my NT4 domain browse list does and get the 
list from the WAN?

Is a samba domain master browser supposed to be able to get browse lists 
from accross subnets? If not, is there any way to force a samba domain to 
collect browse lists from outside it's subnet? We have many users who need 
to access domains outside our subnets, and they need to be able to browse 
to it.

My samba is the master browser and there is no other domain master in the 
X-TEST domain. Anyway, os level=65 should take care of that even if there 
were.

I've also read chapter 9 of the samba how to, and I'm doing everything in 
there according to plan, I think. The thing that scares me is: Failing a 
complete restart, the only other thing you can do is wait until the entry 
times out and is then flushed from the list. This may take a long time on 
some networks (perhaps moths). Ouch. I hope I don't have to wait a month 
for nmbd to collect the browse list from all the WINS hosts on campus???

Additional info: we don't have a WINS server on our subnet, we point all 
our clients to a two WINS servers, both outside of our subnet, and that 
works fine with NT4 and samba domains.

Here is my smb.conf global:
[global]
   workgroup = X-TEST
   username map = /etc/samba/smbusers
   map to guest = Bad User
   logon drive = z:
   logon path =
   logon script = x-test-logon.bat
   security = user
   encrypt passwords = yes
   server string = X-TEST Samba Domain
   netbios name = xxx-x
   add machine script = /usr/sbin/useradd  -c Machine -d /var/lib/nobody 
-s /bin/false %m
   domain master = yes
   domain logons = yes
   local master = yes
   preferred master = yes
   wins server = XXX.XXX.XXX.XXX (a wins server on a different subnet)
   hosts allow = XXX.XXX XXX.XXX (allowing IP's from campus wide subnets)
   os level = 65
   log level = 3
   max log size = 0
   log file = /var/log/samba/XXX-X-samba.log

Thanks!
Alex
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba