Alberto Grajeda Chacon
2004-May-20 19:41 UTC
[Samba] logon server conflicts with server-level
Hello, please guys, any help will be appreciated. I have two linux servers (samba-3.0.2-6.3E) with RHEL 3E: Server one: Configured as logon server (network inside) The other server: with the user's accounts. (network dmz) The error message in "one": [root@linux root]# smbstatus -b Server's Role (logon server) conflicts with server-level security The "other" server has 3380 accounts in smbpasswd, and some accounts are not login correctly from the server "one". The server configuration in both cases: One: workgroup = grupotrabajo security = server hosts allow = 192.168.5. 127. password server = 10.1.1.7 ; password level = 8 ; username level = 8 ; encrypt passwords = yes ; smb passwd file = /etc/samba/smbpasswd ; local master = yes os level = 33 ; domain master = yes ; preferred master = yes domain logons = yes The other: workgroup = grupotrabajo security = user ; password level = 8 ; username level = 8 encrypt passwords = yes smb passwd file = /etc/samba/smbpasswd local master = yes os level = 64 domain master = yes preferred master = yes ; domain logons = yes
Gerald (Jerry) Carter
2004-May-20 21:09 UTC
[Samba] logon server conflicts with server-level
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Alberto Grajeda Chacon wrote: | Hello, please guys, any help will be appreciated. | | I have two linux servers (samba-3.0.2-6.3E) with RHEL 3E: | Server one: Configured as logon server (network inside) | The other server: with the user's accounts. (network dmz) | | The error message in "one": | [root@linux root]# smbstatus -b | Server's Role (logon server) conflicts with server-level security | | security = server ... | domain logons = yes Sorry but we won't support using these 2 parameters together. Security = server is just a bad idea anyway given the current support for security = [domain|ads] and using multiple Samba DCs. cheers, jerry -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFArR5RIR7qMdg1EfYRApSzAKC9h2qeKAYDH8OmfC6mu1z1CMDoYACgsPH0 5YAl1YRZpEpRdbu76xnOvHA=Q2pk -----END PGP SIGNATURE-----