Re: [Samba] Samba 3.0.0 RC1: Unable to find a suitable server
Pls send more details about connecting FC3 machine to ADS. Please visit http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.0 RC1: Unable to find a suitable server
Thanks for your update, it seems to be working now. log.winbindd shows following: [2003/09/08 11:43:59, 1] nsswitch/winbindd_util.c:add_trusted_domain(149) Added domain SAMBA30 SAMBA30.TEST Anyway, my problems with Kerberos 5 (I am using the MIT version and not Heimdal) and SMB signing (Windows 2003 Server?) still exist. I'll open two new threads for them, maybe we can resolve them as effectivly as the ads join bug. Thanks for your help! Cheers, Axel. Quoting Gerald (Jerry) Carter [EMAIL PROTECTED]: OK. I think we can handle this (no workgroup defined in smb.conf; only a realm) in the current SAMBA_3_0 cvs. I just checked in the fix so give the anonymous cvs tree a little bit of time to sync up before you update. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.0 RC1: Unable to find a suitable server
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 8 Sep 2003, Axel Suppantschitsch wrote: Anyway, my problems with Kerberos 5 (I am using the MIT version and not Heimdal) and SMB signing (Windows 2003 Server?) still exist. I'll open two new threads for them, maybe we can resolve them as effectivly as the ads join bug. Thanks for your help! What version of MIT? Have I asked you this? (sorry...it's all running together now). Does this apply to you? (from the 3.0.0rc2 WHATSNEW) MIT kerberos 1.3.1 supports the ARCFOUR-HMAC-MD5 encryption type which is neccessary for servers on which the administrator password has not been changed, or kerberos-enabled SMB connections to servers that require Kerberos SMB signing. Besides this one difference, either MIT or Heimdal Kerberos distributions are usable by Samba 3.0. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc You can never go home again, Oatman, but I guess you can shop there. --John Cusack - Grosse Point Blank (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE/XIK7IR7qMdg1EfYRAu5TAJ9AJ35dbxJfqiVBZLuUMItPJO4mDwCgr/gh j1oQhDRacL5Dj8T84HJbHeo= =J5JP -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.0 RC1: Unable to find a suitable server
Just updated and recompiled my cvs version. net ads join is working now, the samba server is added to Active Directory Users and Computers without any error. Anyway, I didn't get any Kerberos credentials during the join, so klist shows nothing afterwards. smbclient -k won't work, throwing session setup failed: NT_STATUS_OK. There is another problem with the winbindd, it won't start. Besides the failing SMB signing with my Win2003 Server, ads_connect still tries to connect to domain MYGROUP instead of connecting to my ADS. [2003/09/05 12:10:08, 1] nsswitch/winbindd.c:main(832) winbindd version CVS 3.0.0rc3 started. Copyright The Samba Team 2000-2003 [2003/09/05 12:10:09, 1] libsmb/smb_signing.c:signing_good(227) signing_good: SMB signature check failed on seq 1! [2003/09/05 12:10:09, 0] libsmb/clientgen.c:cli_receive_smb(121) SMB Signature verification failed on incoming packet! [2003/09/05 12:10:09, 1] libsmb/smb_signing.c:signing_good(227) signing_good: SMB signature check failed on seq 1! [2003/09/05 12:10:09, 0] libsmb/clientgen.c:cli_receive_smb(121) SMB Signature verification failed on incoming packet! [2003/09/05 12:10:09, 1] libsmb/smb_signing.c:signing_good(227) signing_good: SMB signature check failed on seq 1! [2003/09/05 12:10:09, 0] libsmb/clientgen.c:cli_receive_smb(121) SMB Signature verification failed on incoming packet! [2003/09/05 12:10:09, 1] nsswitch/winbindd_util.c:add_trusted_domain(142) Added domain MYGROUP [2003/09/05 12:10:10, 1] nsswitch/winbindd_ads.c:ads_cached_connection(66) ads_connect for domain MYGROUP failed: No such file or directory [2003/09/05 12:10:10, 1] nsswitch/winbindd_util.c:add_trusted_domains(199) scanning trusted domain list Any suggestions? Cheers, Axel. -Original Message- From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED] Sent: Donnerstag, 04. September 2003 21:47 To: Axel Suppantschitsch Cc: [EMAIL PROTECTED] Subject: RE: [Samba] Samba 3.0.0 RC1: Unable to find a suitable server I just checked in a fix for this into CVS. If you could test it as well that would be great. The change was to utils/net_ads.c cheers, jerry -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.0 RC1: Unable to find a suitable server
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Fri, 5 Sep 2003, Axel Suppantschitsch wrote:
Just updated and recompiled my cvs version. net ads join is working
now, the samba server is added to Active Directory Users and Computers
without any error. Anyway, I didn't get any Kerberos credentials during
the join, so klist shows nothing afterwards. smbclient -k won't work,
throwing session setup failed: NT_STATUS_OK.
The kerberos signing requires the MIT krb5 1.3.1 libs from what I
understand. It doesn't work with Heimdal yet i don't think.
Added domain MYGROUP
ads_connect for domain MYGROUP failed: No such file or directory
scanning trusted domain list
Patch attached.
cheers, jerry
--
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key http://www.plainjoe.org/gpg_public.asc
You can never go home again, Oatman, but I guess you can shop there.
--John Cusack - Grosse Point Blank (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/
iD8DBQE/WLWQIR7qMdg1EfYRAiuWAJ493kq3FDVPOkYk63W9I3TWtSHTUQCdFdik
NdP5DeLvL8KPZB/cv8oIIgc=
=LIwi
-END PGP SIGNATURE-
Index: nsswitch/winbindd_util.c
===
RCS file: /data/cvs/samba/source/nsswitch/winbindd_util.c,v
retrieving revision 1.73.2.33
diff -u -r1.73.2.33 winbindd_util.c
--- nsswitch/winbindd_util.c27 Aug 2003 22:05:52 - 1.73.2.33
+++ nsswitch/winbindd_util.c5 Sep 2003 16:10:27 -
@@ -81,6 +81,13 @@
{
struct winbindd_domain *domain;
char *contact_name;
+ char *alternative_name = NULL;
+
+ /* ignore alt_name if we are not in an AD domain */
+
+ if ( (lp_security() == SEC_ADS) alt_name *alt_name) {
+ alternative_name = alt_name;
+ }
/* We can't call domain_list() as this function is called from
init_domain_list() and we'll get stuck in a loop. */
@@ -89,9 +96,9 @@
strcasecmp(domain_name, domain-alt_name) == 0) {
return domain;
}
- if (alt_name *alt_name) {
- if (strcasecmp(alt_name, domain-name) == 0 ||
- strcasecmp(alt_name, domain-alt_name) == 0) {
+ if (alternative_name *alternative_name) {
+ if (strcasecmp(alternative_name, domain-name) == 0 ||
+ strcasecmp(alternative_name, domain-alt_name) == 0) {
return domain;
}
}
@@ -108,13 +115,13 @@
ZERO_STRUCTP(domain);
/* prioritise the short name */
- if (strchr_m(domain_name, '.') alt_name *alt_name) {
- fstrcpy(domain-name, alt_name);
+ if (strchr_m(domain_name, '.') alternative_name *alternative_name) {
+ fstrcpy(domain-name, alternative_name);
fstrcpy(domain-alt_name, domain_name);
} else {
fstrcpy(domain-name, domain_name);
- if (alt_name) {
- fstrcpy(domain-alt_name, alt_name);
+ if (alternative_name) {
+ fstrcpy(domain-alt_name, alternative_name);
}
}
@@ -261,7 +268,7 @@
/* Add ourselves as the first entry */
- domain = add_trusted_domain( lp_workgroup(), NULL, cache_methods, NULL);
+ domain = add_trusted_domain( lp_workgroup(), lp_realm(), cache_methods, NULL);
if (!secrets_fetch_domain_sid(domain-name, domain-sid)) {
DEBUG(1, (Could not fetch sid for our domain %s\n,
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.0 RC1: Unable to find a suitable server
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 5 Sep 2003, Gerald (Jerry) Carter wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 5 Sep 2003, Axel Suppantschitsch wrote: Just updated and recompiled my cvs version. net ads join is working now, the samba server is added to Active Directory Users and Computers without any error. Anyway, I didn't get any Kerberos credentials during the join, so klist shows nothing afterwards. smbclient -k won't work, throwing session setup failed: NT_STATUS_OK. The kerberos signing requires the MIT krb5 1.3.1 libs from what I understand. It doesn't work with Heimdal yet i don't think. Added domain MYGROUP ads_connect for domain MYGROUP failed: No such file or directory scanning trusted domain list Patch attached. This patch is incomplete. Hold on. Almost done. Sorry I sent it too soon. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE/WMIAIR7qMdg1EfYRAmGJAJsFT9hQuBPpM3d/4SKrWzYJgGg63wCfW4/1 nc2pXEaSC/oHImhaYyj4hN0= =cmn2 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.0 RC1: Unable to find a suitable server
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 5 Sep 2003, Gerald (Jerry) Carter wrote: Added domain MYGROUP ads_connect for domain MYGROUP failed: No such file or directory scanning trusted domain list Patch attached. This patch is incomplete. Hold on. Almost done. Sorry I sent it too soon. OK. I think we can handle this (no workgroup defined in smb.conf; only a realm) in the current SAMBA_3_0 cvs. I just checked in the fix so give the anonymous cvs tree a little bit of time to sync up before you update. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc You can never go home again, Oatman, but I guess you can shop there. --John Cusack - Grosse Point Blank (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD4DBQE/WM7pIR7qMdg1EfYRAki/AJifPhpT25pdKK1BQFvQ5x1d8rRFAKDFwq8D u3FVrgVb1fkJR/9o/e7q0A== =+k0b -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.0 RC1: Unable to find a suitable server
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 3 Sep 2003, Axel Suppantschitsch wrote: Is there any workaround for Bug #371? Otherwise I'm stuck with testing Samba 3.0's behaviour in my university's ADS environment 'til the release of RC3. I wonder that other people on the mailing list don't seem to experience that problem, as they got your RCx binaries working with ADS... BTW: There seems to be another problem with your RH9 RC2 binary besides bug #371, as ads_connect/ads_startup throws No such file or directory at the end of the not working net ads join process or is this connected to bug #371? [2003/09/03 10:32:32, 4] libsmb/namequery.c:get_dc_list(1289) get_dc_list: no servers found [2003/09/03 10:32:32, 1] utils/net_ads.c:ads_startup(176) ads_connect: No such file or directory [2003/09/03 10:32:32, 2] utils/net.c:main(711) return code = -1 [EMAIL PROTECTED] root]# I just checked in a fix for this into CVS. If you could test it as well that would be great. The change was to utils/net_ads.c cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc You can never go home again, Oatman, but I guess you can shop there. --John Cusack - Grosse Point Blank (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE/V5a6IR7qMdg1EfYRAjXCAKDNvSsDpnv+GVAnsx38YnragzTmFwCfaULo Q5lrmn4joOs89CZxVc0p4mU= =FyzI -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.0 RC1: Unable to find a suitable server
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 19 Aug 2003, Axel Suppantschitsch wrote: The most interesting part is: [2003/08/19 14:39:56, 6] libads/ldap.c:ads_find_dc(147) ads_find_dc: looking for domain 'WORKGROUP' [2003/08/19 14:39:56, 8] libsmb/namequery.c:get_sorted_dc_list(1215) get_sorted_dc_list: attempting lookup using [lmhosts wins host bcast] [2003/08/19 14:39:56, 10] libsmb/namequery.c:internal_resolve_name(989) internal_resolve_name: looking up WORKGROUP#1c Although ADS is configured ads_find_dc will search for the domain 'WORKGROUP' instead of searching for the realm 'SAMBA30.TEST'. Yeah. this is strange. I'll look into it (logged as bug 371). cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE/T4EbIR7qMdg1EfYRAiIvAKC4EnMSn/jlJbKocEdZLtKUDfPuHACg6053 iggT/uWc50Syq5SSP5JCwPY= =CNf7 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
