[Samba] nmblookup works by IP but not netbios name.

2011-07-02 Thread David Roid
Hello list,

The issue is as the topic says, following are details: the Samba server
running as ADS member, NBT enabled on Windows machines, no WINS. Windows
machines can find each other by 'nbtstat -a' but cannot find the Samba
server. The Samba server can't find neither Windows machines nor itself by
'nmblookup -a netbios-name', error message is could not open file
/var/lib/samba/unexpected.tdb...name_query failed to find name xxx; however
'nmblookup -A IP' does work for the Samba server. As a result, Windows
clients can't access Samba server through netbios name (DNS works fine
though, BTW).

Any hint?

Regards
-David
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] pdbedit password must change not following policy

2011-07-02 Thread Chris Smith
On Fri, Jul 1, 2011 at 7:57 PM, Chris Beach chr...@pintys.com wrote:
 [root@success]# pdbedit -P maximum password age
 account policy value for maximum password age is 90

At one time I used pdbedit to force a password change and that stopped
working. Apparently it was deprecated in favor of net sam set
pwdmustchangenow. I'm guessing the same thing happened to maximum
password age. Try using net sam policy set maximum password age
instead.

Chris
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] pdbedit password must change not following policy

2011-07-02 Thread John Drescher
 At one time I used pdbedit to force a password change and that stopped
 working. Apparently it was deprecated in favor of net sam set
 pwdmustchangenow. I'm guessing the same thing happened to maximum
 password age. Try using net sam policy set maximum password age
 instead.

He is using an ancient version of samba (3.0.10-1.4E) though so the
depreciation probably does not apply.

John
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] pdbedit password must change not following policy

2011-07-02 Thread TAKAHASHI Motonobu
On Fri, Jul 1, 2011 at 7:57 PM, Chris Beach chr...@pintys.com wrote:
  [root@success]# pdbedit -P maximum password age
  account policy value for maximum password age is 90
 
 At one time I used pdbedit to force a password change and that stopped
 working. Apparently it was deprecated in favor of net sam set
 pwdmustchangenow.

net sam set pwdmustchangenow was first introduced at Samba 3.0.25.

From: Chris Beach chr...@pintys.com
Date: Fri, 1 Jul 2011 19:57:26 -0400

 I've got a file server (named success) running Samba version
 3.0.10-1.4E. I've also got another file server (named happiness)
 running Samba version 3.3.15 and LDAP.

 I've got success pointed to happiness for LDAP in the smb.conf, and
 running a pdbedit -v user works, it shows the proper
 information...except for the password must expire, it seemingly
 ignores the policy that is set on success, ...
 [root@success]# pdbedit -P maximum password age
 account policy value for maximum password age is 90

The account policies in which maximum password age is included were
always stored at local account_policy.tdb before Samba 3.0.21. After
Samba 3.0.21, these are stored at LDAP when LDAP is used as passdb.

That's the problem, I think.

---
TAKAHASHI Motonobu mo...@samba.gr.jp
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] pdbedit password must change not following policy

2011-07-02 Thread Chris Smith
On Sat, Jul 2, 2011 at 9:27 AM, John Drescher dresche...@gmail.com wrote:
 He is using an ancient version of samba (3.0.10-1.4E) though so the
 depreciation probably does not apply.

Thanks. Missed that sorta - wasn't going to dig through the changelog
back to the stone ages.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win7 can't joint Samba domain?

2011-07-02 Thread Linda Walsh

Mike Eggleston wrote:

On Fri, 01 Jul 2011, John Drescher might have said:


We've been trying to get a newly loaded Win7 (64-bin) box to join our internal 
Samba domain. The error that keeps appearing is the win7 box can't find the 
domain controller and is looking for the registry keys NetpLoadParameters 
DNSNameResolutionRequired. We've set these registry keys before on other boxes, 
and have tried on this box, and stuff isn't working?

Any suggestions on what to try?


http://wiki.samba.org/index.php/Windows7

Also search for the samba mailing list trust issues with windows7
machines. In this you will find how to disable the machine password
updates.

John


John (and anyone else),

That link says the same registry keys we're trying to set. Attempting to
join the Samba domain is still failing with an error those registry keys
cannot be found. This same installation disk was used to install Win7
on another box and it worked just fine. I can't think of any changes. I
don't understand why the previous box and win7 worked and this new box
with win7 is failing.


	1) The Wiki page, I feel is unclear.  It uses CCS to stand for CurrentControlSet, 
i.e. put this in a .reg file and merge it from the desktop...



Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters]
DNSNameResolutionRequired=dword:
DomainCompatibilityMode=dword:0001



Have you looked at a wireshark trace?

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


Re: [Samba] Win7 can't joint Samba domain?

2011-07-02 Thread Mike Eggleston
On Sat, 02 Jul 2011, Linda Walsh might have said:

 Mike Eggleston wrote:
 On Fri, 01 Jul 2011, John Drescher might have said:
 
 We've been trying to get a newly loaded Win7 (64-bin) box to join our 
 internal Samba domain. The error that keeps appearing is the win7 box 
 can't find the domain controller and is looking for the registry keys 
 NetpLoadParameters DNSNameResolutionRequired. We've set these registry 
 keys before on other boxes, and have tried on this box, and stuff isn't 
 working?
 
 Any suggestions on what to try?
 
 http://wiki.samba.org/index.php/Windows7
 
 Also search for the samba mailing list trust issues with windows7
 machines. In this you will find how to disable the machine password
 updates.
 
 John
 
 John (and anyone else),
 
 That link says the same registry keys we're trying to set. Attempting to
 join the Samba domain is still failing with an error those registry keys
 cannot be found. This same installation disk was used to install Win7
 on another box and it worked just fine. I can't think of any changes. I
 don't understand why the previous box and win7 worked and this new box
 with win7 is failing.
 
   1) The Wiki page, I feel is unclear.  It uses CCS to stand for 
   CurrentControlSet, i.e. put this in a .reg file and merge it from the 
 desktop...
 
 
 Windows Registry Editor Version 5.00
 
 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters]
 DNSNameResolutionRequired=dword:
 DomainCompatibilityMode=dword:0001
 
 
   
   Have you looked at a wireshark trace?
 

This is fixed now. I don't understand why the first several attempts
failed. I had the installer use a Dell recovery DVD rather than a DVD
ISO I pulled from Microsoft. Anyway, things should be ready for the user
on Tuesday afternoon.

Mike
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba