Mario Codeniera
2015-Oct-14 04:07 UTC
[Samba] upgrade Samba3 to Samb4 NT4 DC and got no currently logon servers
Hi, Hope can someone give insights or what to do next, regarding with issue encountered regarding with the upgrade of Samba3 to Samba4 NT4-style domain with OpenLDAP backend. It seems the upgrade went well as I could join the domain on the Windows 7 workstations, except adding still the registry mentioned on the link: https://wiki.samba.org/index.php/Required_settings_for_NT4-style_domains and issuing the command> net sam rights grant ulipon SeMachineAccountPrivilege (where ulipon > is a user for joining the domain)As it generate error like "The join operation was not successful.This could be because an existing computer account having name "timawa-PC" was previously created using a different set of credentials. Use a different computer name or contact your system administrator to remove any stale conflicting account. The error was: Access denied." But when I restarted the workstation, it keeps displaying *"There are no currently logon servers available to service the logon request.*" once login as a domain. This is my query how to overcome this issue. If I put the (as we are planning it to upgrade our Windows 7 to Windows 10) in the smb.conf> max protocol = NT1"The trust relationship between this workstation and the primary domain failed." The logs I got related to printers, it seems no other error: 2015/10/14 16:26:38, 0] ../source3/smbd/server.c:1189(main)> smbd version 4.1.12 started. > Copyright Andrew Tridgell and the Samba Team 1992-2013 > [2015/10/14 16:26:38.641701, 0, pid=3337, effective(0, 0), real(0, 0)] > ../source3/smbd/server.c:1269(main) > standard input is not a socket, assuming -D option > [2015/10/14 16:26:49.539468, 0, pid=3338, effective(0, 0), real(0, 0)] > ../lib/util/become_daemon.c:136(daemon_ready) > STATUS=daemon 'smbd' finished starting up and ready to serve > connectionsFailed to fetch record! > STATUS=daemon 'smbd' finished starting up and ready to serve > connectionsUnable to connect to CUPS server localhost:631 - Transport > endpoint is not connected > STATUS=daemon 'smbd' finished starting up and ready to serve > connectionsfailed to retrieve printer list: NT_STATUS_UNSUCCESSFUL > [2015/10/14 16:27:49.610194, 0, pid=3364, effective(0, 0), real(0, 0)] > ../source3/printing/print_cups.c:151(cups_connect) > Unable to connect to CUPS server localhost:631 - Transport endpoint is > not connected > [2015/10/14 16:27:49.610979, 0, pid=3339, effective(0, 0), real(0, 0)] > ../source3/printing/print_cups.c:528(cups_async_callback) > failed to retrieve printer list: NT_STATUS_UNSUCCESSFUL > [2015/10/14 16:40:50.371719, 0, pid=3487, effective(0, 0), real(0, 0)] > ../source3/printing/print_cups.c:151(cups_connect) > Unable to connect to CUPS server localhost:631 - Transport endpoint is > not connected > [2015/10/14 16:40:50.372301, 0, pid=3339, effective(0, 0), real(0, 0)] > ../source3/printing/print_cups.c:528(cups_async_callback) > failed to retrieve printer list: NT_STATUS_UNSUCCESSFUL > [2015/10/14 16:46:32.046063, 0, pid=3339, effective(0, 0), real(0, 0)] > ../lib/util/pidfile.c:153(pidfile_unlink) > Failed to delete pidfile /run/smbd.pid. Error was No such file or > directory > [2015/10/14 16:46:32, 0] ../source3/smbd/server.c:1189(main) > smbd version 4.1.12 started. > Copyright Andrew Tridgell and the Samba Team 1992-2013 > [2015/10/14 16:46:32.092789, 0, pid=3594, effective(0, 0), real(0, 0)] > ../source3/smbd/server.c:1269(main) > standard input is not a socket, assuming -D option > [2015/10/14 16:46:43.108807, 0, pid=3595, effective(0, 0), real(0, 0)] > ../lib/util/become_daemon.c:136(daemon_ready) > STATUS=daemon 'smbd' finished starting up and ready to serve > connectionsFailed to fetch record! > STATUS=daemon 'smbd' finished starting up and ready to serve > connectionsUnable to connect to CUPS server localhost:631 - Transport > endpoint is not connected > STATUS=daemon 'smbd' finished starting up and ready to serve > connectionsfailed to retrieve printer list: NT_STATUS_UNSUCCESSFUL > [2015/10/14 16:47:43.177001, 0, pid=3616, effective(0, 0), real(0, 0)] > ../source3/printing/print_cups.c:151(cups_connect) > Unable to connect to CUPS server localhost:631 - Transport endpoint is > not connected > [2015/10/14 16:47:43.177547, 0, pid=3596, effective(0, 0), real(0, 0)] > ../source3/printing/print_cups.c:528(cups_async_callback) > failed to retrieve printer list: NT_STATUS_UNSUCCESSFULIt will display all the users/groups using getent / id <user> via cli.> getent group > getent passwdBy the way I am using: CentOS Linux release 7.1.1503 (Core) samba-4.1.12-23.el7_1.x86_64 openldap-2.4.39-7.el7.centos.x86_64 smb.conf [global] workgroup = LUMAD netbios name = samba-ldapsam deadtime = 10 log level = 1 log file = /var/log/samba/log.%m max log size = 5000 debug pid = yes debug uid = yes syslog = 0 utmp = yes security = user domain logons = yes os level = 64 logon path logon home logon drive logon script passdb backend = ldapsam:"ldap://lumad.sandbox.local/" ldap ssl = no ldap admin dn = cn=admin,dc=lumad,dc=sandbox,dc=local ldap delete dn = no ## Sync UNIX password with Samba password ## Method 1: ldap password sync = yes ## Method 2: ;ldap password sync = no ;unix password sync = yes ;passwd program = /usr/sbin/smbldap-passwd -u '%u' ;passwd chat = "Changing *\nNew password*" %n\n "*Retype new password*" %n\n" ldap suffix = dc=lumad,dc=sandbox,dc=local ldap user suffix = ou=users ldap group suffix = ou=groups ldap machine suffix = ou=computers ldap idmap suffix = ou=idmap add user script = /usr/sbin/smbldap-useradd -m '%u' -t 1 rename user script = /usr/sbin/smbldap-usermod -r '%unew' '%uold' delete user script = /usr/sbin/smbldap-userdel '%u' set primary group script = /usr/sbin/smbldap-usermod -g '%g' '%u' add group script = /usr/sbin/smbldap-groupadd -p '%g' delete group script = /usr/sbin/smbldap-groupdel '%g' add user to group script = /usr/sbin/smbldap-groupmod -m '%u' '%g' delete user from group script = /usr/sbin/smbldap-groupmod -x '%u' '%g' add machine script = /usr/sbin/smbldap-useradd -w '%u' -t 1 Dos charset = CP932 Unix charset = UTF-8 [homes] comment = Home Directories browseable = yes writable = yes #[printers] # comment = All Printers # path = /var/spool/samba # printable = Yes # print ok = Yes # browseable = No [netlogon] comment = Network Logon Service path = /var/lib/samba/netlogon browseable = No writable = No [Profiles] path = /var/lib/samba/profiles create mask = 0755 directory mask = 0755 writable = Yes [sambashare] writeable = yes browseable = yes path = /sambashare Thanks, Mario