aradhana.prasad@wipro.com
2004-Aug-12 14:22 UTC
[Samba] Unable to see Samba server in network neighbourhood
Hi,
I am using samba-3.0.4. I am trying to connect to AD server which is a
2k-server machine and is also the KDC server.
My krb5.ini on the 2k server and /etc/krb5.conf on samba server look
like this
-------------------------------------------------
krb5.conf
-------------------------------------------------
[logging]
default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log
[libdefaults]
default_realm =SAMBADON.COM
default_etypes = des-cbc-crc des-cbc-md5
default_etypes_des = des-cbc-crc des-cbc-md5
dns_lookup_realm = false
dns_lookup_kdc = false
[realms]
SAMBADON.COM = {
kdc = 10.116.54.36
admin_server = 10.116.54.36
default_domain =SAMBADON
}
-------------------------------------------------
The smb.conf looks like this
-------------------------------------------------
smb.conf
-------------------------------------------------
[global]
#unix charset = LOCALE
workgroup = SAMBADON
netbios name = vinaypc
realm = SAMBADON.COM
encrypt passwords = yes
server string = Samba 3.0.2
security = ADS
encrypt passwords = Yes
password server = 2KADSERENG.SAMBADON.COM
username map = /etc/samba/smbusers
log level = 10
syslog = 0
log file = /var/log/samba/%m
max log size = 50
printcap name = CUPS
ldap ssl = no
idmap uid = 10000-20000
idmap gid = 10000-20000
#winbind enum users = yes
#winbind enum groups = yes
#winbind user default domain = yes
template primary group = "Domain Users"
template shell = /bin/bash
winbind separator = /
printing = cups
#map to guest = Bad User
#use spnego = yes
[homes]
comment = Home Directories
valid users = %S
read only = No
browseable = No
[printers]
comment = SMB Print Spool
path = /var/spool/samba
guest ok = Yes
printable = Yes
browseable = No
[print$]
comment = Printer Drivers
path = /var/lib/samba/drivers
admin users = root, Administrator
write list = root
-------------------------------------------------
I am able to successfully join the domain using the command
%bin/net ads join -U Administrator -d 10
-------------------------------------------------
log for net ads join command
-------------------------------------------------
[2004/08/12 19:28:26, 5] lib/debug.c:debug_dump_status(369)
INFO: Current debug levels:
all: True/10
tdb: False/0
printdrivers: False/0
lanman: False/0
smb: False/0
rpc_parse: False/0
rpc_srv: False/0
rpc_cli: False/0
passdb: False/0
sam: False/0
auth: False/0
winbind: False/0
vfs: False/0
idmap: False/0
quota: False/0
acls: False/0
[2004/08/12 19:28:26, 3] param/loadparm.c:lp_load(3877)
lp_load: refreshing parameters
[2004/08/12 19:28:26, 3] param/loadparm.c:init_globals(1307)
Initialising global parameters
[2004/08/12 19:28:26, 3] param/params.c:pm_process(566)
params.c:pm_process() - Processing configuration file
"/usr/local/samba3/lib/smb.conf"
[2004/08/12 19:28:26, 3] param/loadparm.c:do_section(3375)
Processing section "[global]"
doing parameter workgroup = SAMBADON
doing parameter netbios name = vinaypc
[2004/08/12 19:28:26, 4] param/loadparm.c:handle_netbios_name(2718)
handle_netbios_name: set global_myname to: VINAYPC
doing parameter realm = SAMBADON.COM
doing parameter encrypt passwords = yes
doing parameter server string = Samba 3.0.2
doing parameter security = ADS
doing parameter encrypt passwords = Yes
doing parameter password server = 2KADSERENG.SAMBADON.COM
doing parameter username map = /etc/samba/smbusers
doing parameter log level = 10
doing parameter syslog = 0
doing parameter log file = /var/log/samba/%m
doing parameter max log size = 50
doing parameter printcap name = CUPS
doing parameter ldap ssl = no
doing parameter idmap uid = 10000-20000
doing parameter idmap gid = 10000-20000
doing parameter template primary group = "Domain Users"
doing parameter template shell = /bin/bash
doing parameter winbind separator = /
doing parameter printing = cups
[2004/08/12 19:28:26, 4] param/loadparm.c:lp_load(3909)
pm_process() returned Yes
[2004/08/12 19:28:26, 7] param/loadparm.c:lp_servicenumber(4022)
lp_servicenumber: couldn't find homes
[2004/08/12 19:28:26, 10] param/loadparm.c:set_server_role(3818)
set_server_role: role = ROLE_DOMAIN_MEMBER
[2004/08/12 19:28:26, 5] lib/iconv.c:smb_register_charset(95)
Attempting to register new charset UCS-2LE
[2004/08/12 19:28:26, 5] lib/iconv.c:smb_register_charset(103)
Registered charset UCS-2LE
[2004/08/12 19:28:26, 5] lib/iconv.c:smb_register_charset(95)
Attempting to register new charset UTF8
[2004/08/12 19:28:26, 5] lib/iconv.c:smb_register_charset(103)
Registered charset UTF8
[2004/08/12 19:28:26, 5] lib/iconv.c:smb_register_charset(95)
Attempting to register new charset ASCII
[2004/08/12 19:28:26, 5] lib/iconv.c:smb_register_charset(103)
Registered charset ASCII
[2004/08/12 19:28:26, 5] lib/iconv.c:smb_register_charset(95)
Attempting to register new charset 646
[2004/08/12 19:28:26, 5] lib/iconv.c:smb_register_charset(103)
Registered charset 646
[2004/08/12 19:28:26, 5] lib/iconv.c:smb_register_charset(95)
Attempting to register new charset ISO-8859-1
[2004/08/12 19:28:26, 5] lib/iconv.c:smb_register_charset(103)
Registered charset ISO-8859-1
[2004/08/12 19:28:26, 5] lib/iconv.c:smb_register_charset(95)
Attempting to register new charset UCS2-HEX
[2004/08/12 19:28:26, 5] lib/iconv.c:smb_register_charset(103)
Registered charset UCS2-HEX
[2004/08/12 19:28:26, 5] lib/iconv.c:smb_register_charset(95)
Attempting to register new charset CP850
[2004/08/12 19:28:26, 5] lib/iconv.c:smb_register_charset(103)
Registered charset CP850
[2004/08/12 19:28:26, 5] lib/iconv.c:smb_register_charset(95)
Attempting to register new charset CP437
[2004/08/12 19:28:26, 5] lib/iconv.c:smb_register_charset(103)
Registered charset CP437
[2004/08/12 19:28:26, 5] lib/charcnv.c:charset_name(74)
Substituting charset 'ISO-8859-1' for LOCALE
[2004/08/12 19:28:26, 5] lib/charcnv.c:charset_name(74)
Substituting charset 'ISO-8859-1' for LOCALE
[2004/08/12 19:28:26, 5] lib/charcnv.c:charset_name(74)
Substituting charset 'ISO-8859-1' for LOCALE
[2004/08/12 19:28:26, 5] lib/charcnv.c:charset_name(74)
Substituting charset 'ISO-8859-1' for LOCALE
[2004/08/12 19:28:26, 5] lib/charcnv.c:charset_name(74)
Substituting charset 'ISO-8859-1' for LOCALE
[2004/08/12 19:28:26, 5] lib/charcnv.c:charset_name(74)
Substituting charset 'ISO-8859-1' for LOCALE
[2004/08/12 19:28:26, 5] lib/charcnv.c:charset_name(74)
Substituting charset 'ISO-8859-1' for LOCALE
[2004/08/12 19:28:26, 5] lib/charcnv.c:charset_name(74)
Substituting charset 'ISO-8859-1' for LOCALE
[2004/08/12 19:28:26, 5] lib/charcnv.c:charset_name(74)
Substituting charset 'ISO-8859-1' for LOCALE
[2004/08/12 19:28:26, 5] lib/charcnv.c:charset_name(74)
Substituting charset 'ISO-8859-1' for LOCALE
[2004/08/12 19:28:26, 5] lib/charcnv.c:charset_name(74)
Substituting charset 'ISO-8859-1' for LOCALE
[2004/08/12 19:28:26, 5] lib/charcnv.c:charset_name(74)
Substituting charset 'ISO-8859-1' for LOCALE
[2004/08/12 19:28:26, 5] lib/charcnv.c:charset_name(74)
Substituting charset 'ISO-8859-1' for LOCALE
[2004/08/12 19:28:26, 5] lib/charcnv.c:charset_name(74)
Substituting charset 'ISO-8859-1' for LOCALE
[2004/08/12 19:28:26, 5] lib/charcnv.c:charset_name(74)
Substituting charset 'ISO-8859-1' for LOCALE
[2004/08/12 19:28:26, 5] lib/charcnv.c:charset_name(74)
Substituting charset 'ISO-8859-1' for LOCALE
[2004/08/12 19:28:26, 5] lib/charcnv.c:charset_name(74)
Substituting charset 'ISO-8859-1' for LOCALE
[2004/08/12 19:28:26, 5] lib/charcnv.c:charset_name(74)
Substituting charset 'ISO-8859-1' for LOCALE
[2004/08/12 19:28:26, 5] lib/charcnv.c:charset_name(74)
Substituting charset 'ISO-8859-1' for LOCALE
[2004/08/12 19:28:26, 5] lib/charcnv.c:charset_name(74)
Substituting charset 'ISO-8859-1' for LOCALE
[2004/08/12 19:28:26, 5] lib/util.c:init_names(270)
Netbios name list:-
my_netbios_names[0]="VINAYPC"
[2004/08/12 19:28:26, 2] lib/interface.c:add_interface(79)
added interface ip=10.116.52.73 bcast=10.116.52.255
nmask=255.255.255.0
Administrator's password:
[2004/08/12 19:28:33, 6] libads/ldap.c:ads_find_dc(146)
ads_find_dc: looking for realm 'SAMBADON.COM'
[2004/08/12 19:28:33, 8] libsmb/namequery.c:get_sorted_dc_list(1401)
get_sorted_dc_list: attempting lookup using [ads]
[2004/08/12 19:28:33, 10] libsmb/namequery.c:internal_resolve_name(1013)
internal_resolve_name: looking up 2KADSERENG.SAMBADON.COM#20
[2004/08/12 19:28:33, 5] lib/gencache.c:gencache_init(59)
Opening cache file at /usr/local/samba3/var/locks/gencache.tdb
[2004/08/12 19:28:33, 10] lib/gencache.c:gencache_get(262)
Returning valid cache entry: key = NBT/2KADSERENG.SAMBADON.COM#20,
value = 10.116.54.36:0, timeout = Thu Aug 12 19:33:33 2004
[2004/08/12 19:28:33, 5] libsmb/namecache.c:namecache_fetch(201)
name 2KADSERENG.SAMBADON.COM#20 found.
[2004/08/12 19:28:33, 10]
libsmb/namequery.c:remove_duplicate_addrs2(319)
remove_duplicate_addrs2: looking for duplicate address/port pairs
[2004/08/12 19:28:33, 4] libsmb/namequery.c:get_dc_list(1375)
get_dc_list: returning 1 ip addresses in an ordered list
[2004/08/12 19:28:33, 4] libsmb/namequery.c:get_dc_list(1377)
get_dc_list: 10.116.54.36:389
[2004/08/12 19:28:33, 5] libads/ldap.c:ads_try_connect(56)
ads_try_connect: trying ldap server '10.116.54.36' port 389
[2004/08/12 19:28:33, 3] libads/ldap.c:ads_connect(218)
Connected to LDAP server 10.116.54.36
[2004/08/12 19:28:33, 3] libads/ldap.c:ads_server_info(2027)
got ldap server name 2kadsereng@SAMBADON.COM, using bind path:
dc=SAMBADON,dc=COM
[2004/08/12 19:28:33, 4] libads/ldap.c:ads_server_info(2035)
time offset is -65 seconds
[2004/08/12 19:28:33, 4] libads/sasl.c:ads_sasl_bind(447)
Found SASL mechanism GSS-SPNEGO
[2004/08/12 19:28:33, 3] libads/sasl.c:ads_sasl_spnego_bind(204)
got OID=1 2 840 48018 1 2 2
[2004/08/12 19:28:33, 3] libads/sasl.c:ads_sasl_spnego_bind(204)
got OID=1 2 840 113554 1 2 2
[2004/08/12 19:28:33, 3] libads/sasl.c:ads_sasl_spnego_bind(204)
got OID=1 2 840 113554 1 2 2 3
[2004/08/12 19:28:33, 3] libads/sasl.c:ads_sasl_spnego_bind(204)
got OID=1 3 6 1 4 1 311 2 2 10
[2004/08/12 19:28:33, 3] libads/sasl.c:ads_sasl_spnego_bind(211)
got principal=2kadsereng$@SAMBADON.COM
[2004/08/12 19:28:33, 1] libsmb/clikrb5.c:ads_krb5_mk_req(305)
krb5_cc_get_principal failed (No credentials cache found)
[2004/08/12 19:28:33, 3] libsmb/clikrb5.c:ads_cleanup_expired_creds(243)
Ticket in ccache[MEMORY:net_ads] expiration Fri, 13 Aug 2004 05:27:28
GMT
[2004/08/12 19:28:33, 10] libsmb/clikrb5.c:ads_krb5_mk_req(330)
Ticket (2kadsereng$@SAMBADON.COM) in ccache (MEMORY:net_ads) is valid
until: (Fri, 13 Aug 2004 05:27:28 GMT - 1092355048)
[2004/08/12 19:28:33, 10] libsmb/clikrb5.c:get_krb5_smb_session_key(442)
Got KRB5 session key of length 8
[2004/08/12 19:28:33, 0] libads/ldap.c:ads_add_machine_acct(1006)
Host account for vinaypc already exists - modifying old account
[2004/08/12 19:28:33, 5] libads/ldap_utils.c:ads_do_search_retry(55)
Search for (objectclass=*) gave 1 replies
[2004/08/12 19:28:33, 3] libads/ldap.c:ads_workgroup_name(2122)
Found alternate name 'SAMBADON' for realm 'SAMBADON.COM'
[2004/08/12 19:28:33, 10] intl/lang_tdb.c:lang_tdb_init(134)
lang_tdb_init: /usr/local/samba3/lib/en_US.msg: No such file or
directory
Using short domain name -- SAMBADON
Joined 'VINAYPC' to realm 'SAMBADON.COM'
[2004/08/12 19:28:33, 2] utils/net.c:main(792)
return code = 0
-------------------------------------------------
After doing the above I do the following
% smbd -D
% nmbd -D
% winbindd -B
Now if I go to the win 2k server, where I am logged in as the
Administrator and run //samba-server, I am able to access the shares.
Problem
-------
I am unable to see the samba machine in the network neighborhood under
the domain that I join.
I have been trying this for quite some time; have followed the official
how to collection provided along with the samba-3.0.4 code, but I am not
getting any success. If anybody could please point out the mistake I am
making or any other configuration that needs to be done or give any kind
of pointers, I would be really grateful.
Thanks in advance,
Best Regards...Aradhana
Confidentiality Notice
The information contained in this electronic message and any attachments to this
message are intended
for the exclusive use of the addressee(s) and may contain confidential or
privileged information. If
you are not the intended recipient, please notify the sender at Wipro or
Mailadmin@wipro.com immediately
and destroy all copies of this message and any attachments.
Reasonably Related Threads
Wisdom of the Ancients
