Christian Joensson
2004-Feb-09 09:11 UTC
[Samba] Help with making samba-3.0.0 PDC and adding a XP/Pro client (and domain user accounts)
I would like to understand how to make my samba-3.0.0 (-15, from Fedora Core 1) a PDC and how to make a XP/Pro box member of that domain and to add a domain user account, and eventually to ad a few more linux boxen as domain members into that domain. This is the output of the PDC box testparm (the PDC box has two eth interfaces, only eth1 (192.168.1.* and 127.0.0.1 should access the PDC): [root@fw samba]# testparm Load smb config files from /etc/samba/smb.conf Processing section "[homes]" Processing section "[netlogon]" Processing section "[profiles]" Processing section "[printers]" Loaded services file OK. Server role: ROLE_DOMAIN_PDC Press enter to see a dump of your service definitions # Global parameters [global] workgroup = J-SON server string = Samba Server %v interfaces = eth1, 127.0.0.1 obey pam restrictions = Yes root directory = / pam password change = Yes passwd program = /usr/bin/passwd %u passwd chat = *New*password* %n\\n *Retype*new*password* %n\\n *passwd:*al l*authentication*tokens*updated*successfully* unix password sync = Yes log file = /var/log/samba/%m.log max log size = 0 max xmit = 65535 name resolve order = lmhosts host wins bcast socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 hostname lookups = Yes logon script = logon.bat logon path = \\\\%N\\Profiles\\%u logon drive = H: domain logons = Yes os level = 33 preferred master = Yes domain master = Yes wins support = Yes ldap ssl = start tls socket address username = @domusers valid users = @domusers admin users = @domadm printer admin = chj hosts allow = 192.168.1., 127. printing = lprng [homes] comment = Home Directories path = /home/%u valid users = %S read only = No create mask = 0600 directory mask = 0700 browseable = No [netlogon] comment = Network Logon Service path = /home/netlogon write list = @domadm [profiles] path = /etc/samba/profiles read only = No create mask = 0600 directory mask = 0700 [printers] comment = All Printers path = /var/spool/samba printable = Yes browseable = No [root@fw samba]# and this is the output [root@fw samba]# net groupmap list System Operators (S-1-5-32-549) -> -1 Domain Admins (S-1-5-21-2459649847-1729203440-1916183762-512) -> domadm Domain Computers (S-1-5-21-2459649847-1729203440-1916183762-3025) -> machines Replicators (S-1-5-32-552) -> -1 Domain Guests (S-1-5-21-2459649847-1729203440-1916183762-514) -> -1 Guests (S-1-5-32-546) -> -1 Power Users (S-1-5-32-547) -> -1 Print Operators (S-1-5-32-550) -> -1 Administrators (S-1-5-32-544) -> -1 Domain Users (S-1-5-21-2459649847-1729203440-1916183762-513) -> domusers Account Operators (S-1-5-32-548) -> -1 Backup Operators (S-1-5-32-551) -> -1 Users (S-1-5-32-545) -> -1 [root@fw samba]# and domadm contains only one member, chj (that's me), and domusers a few users, machines contains two machines, luddes$ (the XP box) and calles$, a Fedora Core 1 linux box, supposed to become a domain member. /etc/samba/smbpasswd contains among others the ones in domadm and domusers as well as calles$ and luddes$, the two machines. I managed to add the XP box to the domain, but I can't add a domain user account, J-SON/chj. I get a trust problem, something like "couldn?t establish a trust relation between this workstation and the primary domain". (Windows XP Swedish).>From the log files, I can see these few "interesting" things:[2004/02/08 19:39:16, 1] nmbd/nmbd_incomingrequests.c:process_node_status_request(324) process_node_status_request: status request for name J-SON<1c> from IP 192.168.1.1 on subnet UNICAST_SUBNET - name not found. [2004/02/09 09:40:57, 0] smbd/service.c:make_connection_snum(620) Can't become connected user! Any help is appreciated. TIA, /ChJ
Maybe Matching Threads
- Samba 3.0.0 beta2 Aurora SPARC Linux rpm binary
- group mappings pitfalls in samba 3
- Shorewall on FC3?
- How do I control shorewall when src and dst ports are different? [Or, sunrpc problems]
- After Upgrading to rc4 (and still with 3.0.0) having Groupmap problems.