samba - Jun 2003 - Ghost Create account: procedure number out of range in Samba

Hello,

I would like to clone a Windows XP workstation that's part of a Samba 
domain using Norton Ghost.
In Ghost you need to create an account in the domain to be able to add your 
domain to the list of supported domains by the Norton Ghost console.

When I try to add such an account, I get this error message:

Unable to add DOMAIN to the list of supported domains,
The procedure number is out of range. Error code: 2147944145.

I use samba 2.2.8a and LDAP for authentication.
There's no problem with this authentication as everything else (logging in, 
adding machines to the domain,...) works fine.

Does anybody have an idea?

Thanks,

Werner Maes

I had that problem. I ended up making a regular administrator account for
Ghost and then telling the Ghost service to run under that account. Ghost
tries to set up it's own limited account on an NT domain with only the right
to add and remove machines to and from the domain, which (to my limited
knowledge, please correct me if I am wrong) Samba 2.x does not allow.

Once I did that, it worked fine.
My best,
Dan (former employee of Binary Research) Gapinski
----- Original Message -----
From: "werner maes" <werner.maes@cc.kuleuven.ac.be>
To: <samba@samba.org>
Sent: Monday, June 23, 2003 10:07 AM
Subject: [Samba] Ghost Create account: procedure number out of range in
Samba

> Hello,
>
> I would like to clone a Windows XP workstation that's part of a Samba
> domain using Norton Ghost.
> In Ghost you need to create an account in the domain to be able to add
your
> domain to the list of supported domains by the Norton Ghost console.
>
> When I try to add such an account, I get this error message:
>
> Unable to add DOMAIN to the list of supported domains,
> The procedure number is out of range. Error code: 2147944145.
>
> I use samba 2.2.8a and LDAP for authentication.
> There's no problem with this authentication as everything else (logging
in,
> adding machines to the domain,...) works fine.
>
> Does anybody have an idea?
>
> Thanks,
>
> Werner Maes
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>

Not to ask the annoying ?'s, but the server that you're working from is
indeed a member of the Samba domain (& not a separate domain/workgroup)?

Dan
  ----- Original Message ----- 
  From: werner maes 
  To: Dan Gapinski 
  Sent: Tuesday, June 24, 2003 10:45 AM
  Subject: Re: [Samba] Ghost Create account: procedure number out ofrange
inSamba


  Yes, that's right.

  Werner

  Dan Gapinski wrote:

So in your Ghost services properties, then your 'Log on as' entry looks
like
this:
domain\root
?
Thanks,
Dan
----- Original Message -----
From: "werner maes" <werner.maes@cc.kuleuven.ac.be>
To: "Dan Gapinski" <DanGapinski@qsi-r2.com>
Cc: <samba@samba.org>
Sent: Tuesday, June 24, 2003 10:12 AM
Subject: Re: [Samba] Ghost Create account: procedure number out ofrange
inSamba


  
domain admin group = root (in smb.conf)
I have defined the user 'root' in LDAP. On the client I added the domain
users to the administrators group. I try to run the services under this
root account on the domain but the services will only run under a local
system account and not under a domain account. That seems to be the
problem. With this user 'root' it is possible to manually join the
client
to the domain and to logon to the domain.

I've tried about everything but still no solution....
Still hoping though :-)

Werner Maes

At 09:39 24/06/2003, Dan Gapinski wrote:
    
I see - what type of domain account are you using? Your method is right
      
tho,
  
setting the services to run under a domain account. I just want you to be
absolutely sure that the account is administrator. If this is a test
environment, you could start by running the service as root, and see if
      
it
  
works then (though I would not do that in production).

Dan

----- Original Message -----
From: "werner maes" <werner.maes@cc.kuleuven.ac.be>
To: "Dan Gapinski" <DanGapinski@qsi-r2.com>
Cc: <samba@samba.org>
Sent: Tuesday, June 24, 2003 4:35 AM
Subject: Re: [Samba] Ghost Create account: procedure number out ofrange
inSamba


      
Sorry to bother you again but in my situation with LDAP authentication
        
it
  
doesn't seem to work.

I'll explain the configuration in detail.

I have a Samba 2.2.8a domain controller which is compiled and
        
configured
  
with LDAP support.
The user and machine accounts are defined in LDAP. I manually added an
Windows XP workstation
to the domain (no problems here) using a root account also defined in
        
LDAP.
      
Now I would like to clone this machine to other machines using Norton
        
Ghost
      
7.5. Therefore I have set up
a Ghost Multicast Server. Now when I use to Ghost Console on the
        
multicast
  
server and try to add our domain
to the list of supported domains in Ghost I get the error "Procedure
        
number
      
out of range".
On the Ghost Multicast Server there is the "ghost configuration
        
server"
  
service and on the client machine
there is the "ghost client agent" service. Both of these services only
start with a local system account.
These services do not run under a domain account. If I try to run them
under a domain account I get this
error message: "The service did not respond to the start or control
        
request
      
in a timely fashion".

Like I said, manually adding a machine to the domain gives no problems
        
with
      
the specified root account
in LDAP (see below, I did not include all attributes off course).
dn: uid=root, ou=xxx, o=xxx, c=xxx
objectClass: sambaAccount
uid: root
rid: 1000
uidNumber: 0
gidNumber: 0

Kind regards,

Werner Maes


At 15:20 23/06/2003, Dan Gapinski wrote:
        
Yes - sorry. I made a regular account for Ghost (which you could make
          
with
      
adduser or useradd or handcoding the passwd file) and added it to a
          
group
  
(in the groups file) that I called "admin". In smb.conf, I added a
          
line
  
that
      
went like this:
domain admin group = @admin

So that worked like a charm.
Hope that helps,
Dan
----- Original Message -----
From: "werner maes" <werner.maes@cc.kuleuven.ac.be>
To: "Dan Gapinski" <DanGapinski@qsi-r2.com>
Cc: <samba@samba.org>
Sent: Monday, June 23, 2003 2:21 PM
Subject: Re: [Samba] Ghost Create account: procedure number out of
          
range
  
inSamba


          
Hello Dan,

Thanks for yor reply !
But what exactly do you mean with "making a regular administrator
account for Ghost"?
Is it an entry in /etc/passwd or smbpasswd for "administrator"?
Could you give more specific details?

Kind regards,

Werner Maes

            
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

        
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

It is a separate domain logon server, see configuration below (relevant 
entries only).
Does it have to be a member of a Samba domain? (security = domain?)

[global]
         security = USER
         workgroup = DOMAIN
         netbios name = DOMAINSERVER
         interfaces = x.y.v.w/24
         logon script = scripts\%m.bat
         os level = 110
         preferred master = Yes
         local master = Yes
         domain master = True
         domain logons = Yes
         domain admin group = @root
         ldap server = x.y.v.z
         ldap port = 389
         ldap suffix = o=kuleuven,c=be
         ldap admin dn = cn=master,o=kuleuven,c=be

The ldap server is installed with openldap.

Werner

At 16:42 24/06/2003, Dan Gapinski wrote:
>Not to ask the annoying ?'s, but the server that you're working from
is
>indeed a member of the Samba domain (& not a separate domain/workgroup)?
>
>Dan
>----- Original Message -----
>From: <mailto:werner.maes@cc.kuleuven.ac.be>werner maes
>To: <mailto:DanGapinski@qsi-r2.com>Dan Gapinski
>Sent: Tuesday, June 24, 2003 10:45 AM
>Subject: Re: [Samba] Ghost Create account: procedure number out ofrange 
>inSamba
>
>Yes, that's right.
>
>Werner
>
>Dan Gapinski wrote:
>>
>>So in your Ghost services properties, then your 'Log on as'
entry looks like
>>
>>this:
>>
>>domain\root
>>
>>?
>>
>>Thanks,
>>
>>Dan
>>
>>----- Original Message -----
>>
>>From: "werner maes" 
>><mailto:werner.maes@cc.kuleuven.ac.be>><werner.maes@cc.kuleuven.ac.be>
>>
>>To: "Dan Gapinski"
<mailto:DanGapinski@qsi-r2.com>><DanGapinski@qsi-r2.com>
>>
>>Cc: <mailto:samba@samba.org>><samba@samba.org>
>>
>>Sent: Tuesday, June 24, 2003 10:12 AM
>>
>>Subject: Re: [Samba] Ghost Create account: procedure number out ofrange
>>
>>inSamba
>>
>>
>>
>>
>>>
>>>domain admin group = root (in smb.conf)
>>>
>>>I have defined the user 'root' in LDAP. On the client I
added the domain
>>>
>>>users to the administrators group. I try to run the services under
this
>>>
>>>root account on the domain but the services will only run under a
local
>>>
>>>system account and not under a domain account. That seems to be the
>>>
>>>problem. With this user 'root' it is possible to manually
join the client
>>>
>>>to the domain and to logon to the domain.
>>>
>>>
>>>I've tried about everything but still no solution....
>>>
>>>Still hoping though :-)
>>>
>>>
>>>Werner Maes
>>>
>>>
>>>At 09:39 24/06/2003, Dan Gapinski wrote:
>>>
>>>
>>>>
>>>>I see - what type of domain account are you using? Your method
is right
>>>>
>>>>
>>
>>tho,
>>
>>
>>>>
>>>>setting the services to run under a domain account. I just want
you to be
>>>>
>>>>absolutely sure that the account is administrator. If this is a
test
>>>>
>>>>environment, you could start by running the service as root, and
see if
>>>>
>>>>
>>
>>it
>>
>>
>>>>
>>>>works then (though I would not do that in production).
>>>>
>>>>
>>>>Dan
>>>>
>>>>
>>>>----- Original Message -----
>>>>
>>>>From: "werner maes" 
>>>><mailto:werner.maes@cc.kuleuven.ac.be><werner.maes@cc.kuleuven.ac.be>
>>>>
>>>>To: "Dan Gapinski"
<mailto:DanGapinski@qsi-r2.com><DanGapinski@qsi-r2.com>
>>>>
>>>>Cc: <mailto:samba@samba.org><samba@samba.org>
>>>>
>>>>Sent: Tuesday, June 24, 2003 4:35 AM
>>>>
>>>>Subject: Re: [Samba] Ghost Create account: procedure number out
ofrange
>>>>
>>>>inSamba
>>>>
>>>>
>>>>
>>>>
>>>>>
>>>>>Sorry to bother you again but in my situation with LDAP
authentication
>>>>>
>>>>>
>>
>>it
>>
>>
>>>>>
>>>>>doesn't seem to work.
>>>>>
>>>>>
>>>>>I'll explain the configuration in detail.
>>>>>
>>>>>
>>>>>I have a Samba 2.2.8a domain controller which is compiled
and
>>>>>
>>>>>
>>
>>configured
>>
>>
>>>>>
>>>>>with LDAP support.
>>>>>
>>>>>The user and machine accounts are defined in LDAP. I
manually added an
>>>>>
>>>>>Windows XP workstation
>>>>>
>>>>>to the domain (no problems here) using a root account also
defined in
>>>>>
>>>>>
>>>>
>>>>LDAP.
>>>>
>>>>
>>>>>
>>>>>Now I would like to clone this machine to other machines
using Norton
>>>>>
>>>>>
>>>>
>>>>Ghost
>>>>
>>>>
>>>>>
>>>>>7.5. Therefore I have set up
>>>>>
>>>>>a Ghost Multicast Server. Now when I use to Ghost Console on
the
>>>>>
>>>>>
>>
>>multicast
>>
>>
>>>>>
>>>>>server and try to add our domain
>>>>>
>>>>>to the list of supported domains in Ghost I get the error
"Procedure
>>>>>
>>>>>
>>>>
>>>>number
>>>>
>>>>
>>>>>
>>>>>out of range".
>>>>>
>>>>>On the Ghost Multicast Server there is the "ghost
configuration
>>>>>
>>>>>
>>
>>server"
>>
>>
>>>>>
>>>>>service and on the client machine
>>>>>
>>>>>there is the "ghost client agent" service. Both of
these services only
>>>>>
>>>>>start with a local system account.
>>>>>
>>>>>These services do not run under a domain account. If I try
to run them
>>>>>
>>>>>under a domain account I get this
>>>>>
>>>>>error message: "The service did not respond to the
start or control
>>>>>
>>>>>
>>>>
>>>>request
>>>>
>>>>
>>>>>
>>>>>in a timely fashion".
>>>>>
>>>>>
>>>>>Like I said, manually adding a machine to the domain gives
no problems
>>>>>
>>>>>
>>>>
>>>>with
>>>>
>>>>
>>>>>
>>>>>the specified root account
>>>>>
>>>>>in LDAP (see below, I did not include all attributes off
course).
>>>>>
>>>>>dn: uid=root, ou=xxx, o=xxx, c=xxx
>>>>>
>>>>>objectClass: sambaAccount
>>>>>
>>>>>uid: root
>>>>>
>>>>>rid: 1000
>>>>>
>>>>>uidNumber: 0
>>>>>
>>>>>gidNumber: 0
>>>>>
>>>>>
>>>>>Kind regards,
>>>>>
>>>>>
>>>>>Werner Maes
>>>>>
>>>>>
>>>>>
>>>>>At 15:20 23/06/2003, Dan Gapinski wrote:
>>>>>
>>>>>
>>>>>>
>>>>>>Yes - sorry. I made a regular account for Ghost (which
you could make
>>>>>>
>>>>>>
>>>>
>>>>with
>>>>
>>>>
>>>>>>
>>>>>>adduser or useradd or handcoding the passwd file) and
added it to a
>>>>>>
>>>>>>
>>
>>group
>>
>>
>>>>>>
>>>>>>(in the groups file) that I called "admin". In
smb.conf, I added a
>>>>>>
>>>>>>
>>
>>line
>>
>>
>>>>
>>>>that
>>>>
>>>>
>>>>>>
>>>>>>went like this:
>>>>>>
>>>>>>domain admin group = @admin
>>>>>>
>>>>>>
>>>>>>So that worked like a charm.
>>>>>>
>>>>>>Hope that helps,
>>>>>>
>>>>>>Dan
>>>>>>
>>>>>>----- Original Message -----
>>>>>>
>>>>>>From: "werner maes" 
>>>>>><mailto:werner.maes@cc.kuleuven.ac.be><werner.maes@cc.kuleuven.ac.be>
>>>>>>
>>>>>>To: "Dan Gapinski" 
>>>>>><mailto:DanGapinski@qsi-r2.com><DanGapinski@qsi-r2.com>
>>>>>>
>>>>>>Cc:
<mailto:samba@samba.org><samba@samba.org>
>>>>>>
>>>>>>Sent: Monday, June 23, 2003 2:21 PM
>>>>>>
>>>>>>Subject: Re: [Samba] Ghost Create account: procedure
number out of
>>>>>>
>>>>>>
>>
>>range
>>
>>
>>>>>>
>>>>>>inSamba
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>>
>>>>>>>Hello Dan,
>>>>>>>
>>>>>>>
>>>>>>>Thanks for yor reply !
>>>>>>>
>>>>>>>But what exactly do you mean with "making a
regular administrator
>>>>>>>
>>>>>>>account for Ghost"?
>>>>>>>
>>>>>>>Is it an entry in /etc/passwd or smbpasswd for
"administrator"?
>>>>>>>
>>>>>>>Could you give more specific details?
>>>>>>>
>>>>>>>
>>>>>>>Kind regards,
>>>>>>>
>>>>>>>
>>>>>>>Werner Maes
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>
>>>>>--
>>>>>
>>>>>To unsubscribe from this list go to the following URL and
read the
>>>>>
>>>>>instructions: 
>>>>><http://lists.samba.org/mailman/listinfo/samba>http://lists.samba.org/mailman/listinfo/samba
>>>>>
>>>>>
>>>>>
>>>
>>>--
>>>
>>>To unsubscribe from this list go to the following URL and read the
>>>
>>>instructions: 
>>><http://lists.samba.org/mailman/listinfo/samba>http://lists.samba.org/mailman/listinfo/samba
>>>
>>>
>>>
>>
>>
>>
>>
>>
>>