samba - Feb 2004 - Rejoining domain after cluster failover

Hello. We're having issues running Samba 2.2.8-a1, on Solaris 8 (SPARC)
under Veritas VCS 3.5 clustering (HA active-passive).

Every time we have a cluster failover (we're testing), we have to re-join
the domain [ADS not NT] (e.g., 'smbpasswd -j XYZ -r XYZPDC
-UAdminRightsUser%password'). Otherwise, we cannot connect to the shares,
and 'wbinfo -t' returns 'Secret is bad'. Re-joining the domain
fixes the problem.

It's easily enough scripted, however I don't like the idea of having a
domain user's password with administrative rights in a text file.

Are there other ways (HOWTO pointers welcome), or do I have to upgrade to Samba
3.0.x and use the LDAP backend for SIDs?

Thanks in advance.

Ken Gotsch

My guess you have to upgrade to Samba 3 ?

I don't think you need, if you don't want to, use the LDAP backend for
 SIDs?

I have developed the Sun support agent for Samba on Sun Cluster (The
agent should work the same way). 
There is no problem with Samba 3 as ADS member when the you have failover
or a manully switch.

/Patrik


On Tue, 2004-02-10 at 22:54, gotschk@comcast.net wrote:
> Hello. We're having issues running Samba 2.2.8-a1, on Solaris 8 (SPARC)
under Veritas VCS 3.5 clustering (HA active-passive).
> 
> Every time we have a cluster failover (we're testing), we have to
re-join the domain [ADS not NT] (e.g., 'smbpasswd -j XYZ -r XYZPDC
-UAdminRightsUser%password'). Otherwise, we cannot connect to the shares,
and 'wbinfo -t' returns 'Secret is bad'. Re-joining the domain
fixes the problem.
> 
> It's easily enough scripted, however I don't like the idea of
having a domain user's password with administrative rights in a text file.
> 
> Are there other ways (HOWTO pointers welcome), or do I have to upgrade to
Samba 3.0.x and use the LDAP backend for SIDs?
> 
> Thanks in advance.
> 
> Ken Gotsch
-- 
"In a world without fences who needs Gates"
Patrik Gustavsson, Senior Technical Consultant
patrik.gustavsson@sun.com     Telephone: +46 60 671540
http://glen.sweden            Mobile: +46 70 3551040
SUN MICROSYSTEMS              Fax: +46 60 671550
--------------------------------------------------------------

I haven't implemented this myself but I would assume you need to have the
"private" directory either on a cluster shared disk or manually
syncronised on each cluster node. And also hard code the netbios name and ip
address that samba uses on all cluster nodes like,

[global]

	netbios name = mysambaserver
	interfaces = 192.168.10.10/24		#virtual ip address

	thanks Andy.

-----Original Message-----
From: samba-bounces+pubsyssamba=bbc.co.uk@lists.samba.org
[mailto:samba-bounces+pubsyssamba=bbc.co.uk@lists.samba.org]On Behalf Of
Patrik Gustavsson
Posted At: 11 February 2004 13:33
Posted To: Samba
Conversation: [Samba] Rejoining domain after cluster failover
Subject: Re: [Samba] Rejoining domain after cluster failover


My guess you have to upgrade to Samba 3 ?

I don't think you need, if you don't want to, use the LDAP backend for
 SIDs?

I have developed the Sun support agent for Samba on Sun Cluster (The
agent should work the same way). 
There is no problem with Samba 3 as ADS member when the you have failover
or a manully switch.

/Patrik


On Tue, 2004-02-10 at 22:54, gotschk@comcast.net wrote:
> Hello. We're having issues running Samba 2.2.8-a1, on Solaris 8 (SPARC)
under Veritas VCS 3.5 clustering (HA active-passive).
> 
> Every time we have a cluster failover (we're testing), we have to
re-join the domain [ADS not NT] (e.g., 'smbpasswd -j XYZ -r XYZPDC
-UAdminRightsUser%password'). Otherwise, we cannot connect to the shares,
and 'wbinfo -t' returns 'Secret is bad'. Re-joining the domain
fixes the problem.
> 
> It's easily enough scripted, however I don't like the idea of
having a domain user's password with administrative rights in a text file.
> 
> Are there other ways (HOWTO pointers welcome), or do I have to upgrade to
Samba 3.0.x and use the LDAP backend for SIDs?
> 
> Thanks in advance.
> 
> Ken Gotsch
-- 
"In a world without fences who needs Gates"
Patrik Gustavsson, Senior Technical Consultant
patrik.gustavsson@sun.com     Telephone: +46 60 671540
http://glen.sweden            Mobile: +46 70 3551040
SUN MICROSYSTEMS              Fax: +46 60 671550
--------------------------------------------------------------


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba