Hello, I am currently trying to set up my Samba 3.0.4 testbox to be a PDC for a MS Windows XP Pro SP1 box. I am using the latest smbldap-tools from IDEALX and I have really REALLY tried to do things right. Followed their manual... I cleaned my setup three times today and started from scratch ... Managed to join my DOMAIN yesterday but right now no chance. Read TOSHARG, OReilly`s "Using Samba", browsed the web and the list-archives ... logs look fine, reg.patches applied, uid=0 used, machines and users in the same ou=Users ... Still the XP-box tells me "Access denied" ... -- Basic question: What is the current way to go? There are quite a few LDAP-PDC-HOWTOs out there, each differs a bit and none works for me ... -- I am aware of the fact that I am missing something which will seem clear to me AFTER I get pointed to it. That is the whole truth about learning, isn't it? thanks ... -- best regards, Stefan G. Weichinger
> logs look fine, reg.patches applied, uid=0 used, machines and users in > the same ou=Users ...You don't need ANY registry patches to run a Samba PDC. Perhaps your using some bits of stale documentation. I recommend using the two Samba PDF collections, and nothing else - too much out there is really horked up or just old.
> I am aware of the fact that I am missing something which will seem > clear to me AFTER I get pointed to it. That is the whole truth about > learning, isn't it? > > thanks ...Ok using 3.0.4 and the latest smbldap-tools and you've used smbldap-populate to populate your ldap tree Try this.. edit /etc/samba.smb.conf and comment out the root map ie; [root@Bob samba]# cat smbusers # Unix_name = SMB_name1 SMB_name2 ... #root = administrator admin nobody = guest pcguest smbguest then set the password for the 'Administrator' smbpasswd Administrator. smbldap-populate creates a user named 'Administrator' with a uid=0 John
Hello, Mittwoch, 19. Mai 2004, 01:35 I wrote: SGW> Managed to join my DOMAIN yesterday but right now no chance. Solved that ! After editing smb.conf for the Xth time I somehow had removed the "add user script"-line which I had earlier yanked in from the smbldap-tools-template. What an experience ;-) Things I still want to get clear about include: - Right now my XP-box has the registry changed (SignOrSeal ...) because I somewhere read about that. Necessary or not? (I will test that ...) - Should smbldap-populate get edited to create root with uidnumber=0? - Should smbldap-populate get edited to use the same ou-Container for Users AND Computers? These are things that could easily get included in the docs and this would prevent LDAP-PDC-starters from banging their heads against it ... thank you ! -- best regards, Stefan G. Weichinger mailto:monitor@oops.co.at