Richard Horton
2002-Oct-24 08:43 UTC
[Samba] Samba PDC and XP Pro Problem. (Not signorseal - fixed that one some time ago)
Hi, This is a simple query and may well have been answered in the mailing list archives but my searching can't find an answer to my specific problem. My PDC is Samba 2.2.3 on Redhat 7.3, clients are a mix of Win 2k and XP Pro laptops. The Win 2k laptops work fine (all service packs applied) and allow any domain user to log on to any of the 2k laptops. However the XP laptops if I try logging on as a user other than the normal user for that laptop then no dice - I get a can not find domain controller error. All the XP laptops have had the signorseal fix applied, and I'm not using roaming profiles so that's not the issue (or might be on hindsight... does XP allow a domain user to log on without a server side profile?) The PDC configuration is shown below:- # Samba config file created using SWAT # from 10.0.0.26 (10.0.0.26) # Date: 2002/10/09 08:27:32 # Global parameters [global] workgroup = ENGINEERING server string = KECRYPT INTERNAL SERVER interfaces = eth0 127.0.0.1 bind interfaces only = Yes encrypt passwords = Yes passwd program = /usr/bin/passwd %u passwd chat = *password* %n\n *password* %n\n *successful* username level = 5 unix password sync = No log level = 2 syslog = 2 log file = /var/log/samba/log.smbd printcap name = lpstat domain admin group = @smbadm add user script = /usr/sbin/useradd -d /dev/null -g machines -c '%u machine account' -s /bin/false -M %u logon script = scripts\startup.cmd logon drive = h: logon home = \\%N\%u\xphome domain logons = Yes os level = 65 preferred master = True domain master = True wins support = Yes admin users = @smbadm printer admin = @smbadm [homes] read only = No create mask = 0700 directory mask = 0700 browseable = No locking = No [common] path = /home/common force group = smbusers read only = No create mask = 0760 directory mask = 0770 [installer] path = /home/install force group = smbusers read only = No create mask = 0760 directory mask = 0770 [netlogon] path = /usr/local/samba/netlogon force group = smbusers browseable = No [laserjet] comment = HP Laserjet 4050TN path = /tmp printable = Yes -- Richard Horton KeCrypt Limited (http://www.kecrypt.com), Tel: +44 (0) 1438 791026 Fax: +44 (0) 1438 791086 Mob: +44 (0) 7789 007785 --- Avast: Outbound message checked to be virus-free Date and time of the test: 24/10/2002 09:42:46 Virus database (VPS) date: 10/10/2002 Avast! antivirus by Alwil Software
Bradley W. Langhorst
2002-Oct-24 13:12 UTC
[Samba] Samba PDC and XP Pro Problem. (Not signorseal - fixed that one some time ago)
On Thu, 2002-10-24 at 04:42, Richard Horton wrote:> My PDC is Samba 2.2.3 on Redhat 7.3, clients are a mix of Win 2k and XP > Pro laptops.there are some bugs in 2.2.3 that were fixed in subsequent releases 2.2.6 looks to be very good - maybe worth upgrading (probably won't fix your problem though)> However the XP laptops > if I try logging on as a user other than the normal user for that laptop > then no dice - I get a can not find domain controller error. All the XP > laptops have had the signorseal fix applied, and I'm not using roaming > profiles so that's not the issue (or might be on hindsight... does XP > allow a domain user to log on without a server side profile?)yes it does does the other user actually have an account on the domain? are you sure that the "normal user" is actually logging into the domain? (ie that user is not in the local password database) that's the only thing i can think of that might be your problem.> log file = /var/log/samba/log.smbdtry making this log file = /var/log/samba/log.smbd.%m and show what happens when the machine in question fails to log in.> logon home = \\%N\%u\xphomethis share seems to be missing - probably not a problem since you're not using roaming profiles...> [netlogon] > path = /usr/local/samba/netlogon > force group = smbusers > browseable = Nothis looks a little suspicious to me... are you sure that your new user has permission on this share?