Richard Fox
2002-Oct-30 16:10 UTC
[Samba] PDC operation: "controller cannot be located" error
Hi all, I am running Samba 2.2.5 on a RedHat 7.3 system. I am attempting to establish this server (thor) as the PDC on my private network of (currently) 2 machines. The first machine I want to connect is an NT client, mercury. I followed instructions from various web resources, the PDC howto, etc and have this as my smb.conf file: [global] workgroup = THORDOMAIN netbios name = THOR server string = Samba PDC %v %h encrypt passwords = yes domain logons = yes logon script = netlogon.bat share modes = no os level = 64 local master = yes domain master = yes preferred master = yes domain admin group = @admins security = user smb passwd file = /etc/samba/smbpasswd hosts allow = 192.168.1., 127. max log size = 50 unix password sync = yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\n *Please*retype*new*password* %n\n *password*successfully*updated* logon home = \\%L\%u logon drive = H: logon path = \\%L\Profiles\%u # add user script = /usr/sbin/useradd -d /dev/null -g machines -s /bin/false -M %u [homes] comment = Home Directories path = %H writeable = Yes valid users = %S create mode = 0664 directory mode = 0775 [netlogon] comment = Network Logon Services path = /home/samba/netlogon read only = yes guest ok = no write list = @adm [Profiles] path = /home/samba/profiles browseable = No The netlogon and profiles dirs were created, permissions set. Netlogon.bat is in /usr/bin. I created an account for my NT box: # useradd -g machines -d /dev/null -s /bin/false mercury$ # passwd -l mercury$ # smbpasswd -a -m mercury When I try to logon to the domain from mercury I get an error msg on my NT box which says "the domain controller for this domain cannot be located." My log.smbd file says: [2002/10/30 10:20:28, 2] smbd/server.c:open_sockets(215) waiting for a connection [2002/10/30 10:46:23, 3] smbd/oplock.c:init_oplocks(1211) open_oplock_ipc: opening loopback UDP socket. [2002/10/30 10:46:23, 3] lib/util_sock.c:open_socket_in(813) bind succeeded on port 0 [2002/10/30 10:46:23, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(298) Linux kernel oplocks enabled [2002/10/30 10:46:23, 3] smbd/oplock.c:init_oplocks(1241) open_oplock ipc: pid = 3008, global_oplock_port = 32773 [2002/10/30 10:46:23, 3] lib/access.c:check_access(318) check_access: no hostnames in host allow/deny list. [2002/10/30 10:46:23, 0] lib/access.c:check_access(331) Denied connection from (65.241.90.144) [2002/10/30 10:46:23, 1] smbd/process.c:process_smb(869) Connection denied from 65.241.90.144 [2002/10/30 10:46:23, 3] smbd/sec_ctx.c:set_sec_ctx(313) setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0 [2002/10/30 10:46:23, 2] smbd/server.c:exit_server(461) Closing connections [2002/10/30 10:46:23, 3] smbd/connection.c:yield_connection(48) Yielding connection to [2002/10/30 10:46:23, 3] smbd/connection.c:yield_connection(61) yield_connection: tdb_delete for name failed with error Record does not exist. [2002/10/30 10:46:23, 3] smbd/server.c:exit_server(495) Server exit (connection denied) One part I do not understand is that it says Denied connection from (65.241.90.144) If this is an IP address, I have no idea who this connection attempt is from, I am on a private network with no mapping from our router. So this must be mercury trying to connect. Perhaps to someone with a deeper knowledge of samba this log file might point to a severe configuration error I may have, why mercury can't locate the PDC. Yes, the systems can ping eachother. Is my config file set up correctly? Your help is greatly appreciated. Rich