Hi Everybody,
Trying to solve the strange problems of samba over WAN I found something in the
logs that can be usefull.
When I try to see the trusting accounts on samba I receive the message:
dfbsa58:~# net rpc trustdom list
Password:
Trusted domains list:
TESTE-CE S-1-5-21-619649889-1864520048-1540833222
TESTE-MG S-1-5-21-555433511-900955293-314601362
Trusting domains list:
TESTE-MG
Unable to find a suitable server
domain controller is not responding
TESTE-CE
Unable to find a suitable server
domain controller is not responding
The strange thing is these 2 machines are working fine on the side of the wan
connection. looking for something diferent in the logs I found this message:
[2004/03/24 18:10:51, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(271)
dump_workgroups()
dump workgroup on subnet 10.1.0.58: netmask= 255.255.0.0:
GEPOR(3) current master browser = GEPOR05
GEBEM(2) current master browser = GEBEM06
TESTE-MATRIZ(1) current master browser = DFBSA58
DFBSA58 400c9b2b (Samba Server 3.0.7-Debian)
TRIGO 40009a03 (trigo server (Samba 2.2.3a-13 for Debian))
DFBSA66 40029007 ()
[2004/03/24 18:10:51, 4] nmbd/nmbd_workgroupdb.c:dump_workgroups(271)
dump_workgroups()
dump workgroup on subnet UNICAST_SUBNET: netmask= 0.0.0.0:
TESTE-MATRIZ(1) current master browser = UNKNOWN
DFBSA58 40099b2b (Samba Server 3.0.7-Debian)
Why, when samba looks over UNICAST_SUBNET it don?t find him self?
I believe this is one of my problems. Can you confirm?
My smb.conf is like this:
# Global parameters
[global]
workgroup = TESTE-MATRIZ
netbios name = dfbsa58
admin users= @"Domain Admins"
server string = Samba Server %v
security = user
encrypt passwords = true
min passwd length = 6
obey pam restrictions = No
ldap passwd sync = Yes
log level = 62
syslog = 0
log file = /var/log/samba/log.%m
max log size = 100000
time server = Yes
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
IPTOS_THROUGHPUT
name resolve order = wins lmhosts host bcast
remote announce = 10.1.0.58 10.21.0.8 10.51.0.8
remote browse sync = 10.1.0.58 10.21.0.8 10.51.0.8
mangling method = hash2
Dos charset = 850
Unix charset = ISO8859-1
logon script = logon.bat
logon drive = H:
logon home logon path
domain logons = Yes
os level = 65
preferred master = Yes
domain master = Yes
wins server = 10.1.0.61
passdb backend = ldapsam:ldap://127.0.0.1/
ldap admin dn = cn=admin,dc=company,dc=com,dc=br
ldap suffix = dc=matriz,dc=company,dc=com,dc=br
ldap group suffix = ou=grupos
ldap user suffix = ou=usuarios
ldap machine suffix = ou=maquinas
ldap idmap suffix = ou=Idmap
add user script = /usr/local/sbin/smbldap-useradd -m "%u"
ldap delete dn = Yes
#delete user script = /usr/local/sbin/smbldap-userdel "%u"
add machine script = /usr/local/sbin/smbldap-useradd -w "%u"
add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
#delete group script = /usr/local/sbin/smbldap-groupdel "%g"
add user to group script = /usr/local/sbin/smbldap-groupmod -m
"%u" "%g"
delete user from group script = /usr/local/sbin/smbldap-groupmod -x
"%u" "%g"
set primary group script = /usr/local/sbin/smbldap-usermod -g
"%g" "%u"
# printers configuration
printer admin = @"Print Operators"
load printers = Yes
create mask = 0640
directory mask = 0750
nt acl support = No
printing = cups
printcap name = cups
deadtime = 10
guest account = nobody
map to guest = Bad User
dont descend = /proc,/dev,/etc,/lib,/lost+found,/initrd
show add printer wizard = yes
; to maintain capital letters in shortcuts in any of the profile
folders:
preserve case = yes
short preserve case = yes
case sensitive = no
[homes]
comment = Pasta de %U, %u
read only = No
create mask = 0644
directory mask = 0775
browseable = No
[netlogon]
path = /home/netlogon/
browseable = No
read only = yes
[profiles]
path = /home/profiles
read only = no
create mask = 0600
directory mask = 0700
browseable = No
guest ok = Yes
profile acls = yes
csc policy = disable
# next line is a great way to secure the profiles
force user = %U
# next line allows administrator to access all profiles
valid users = %U "Domain Admins"
;[printers]
; comment = Network Printers
; printer admin = @"Print Operators"
; guest ok = yes
; printable = yes
; path = /home/spool/
; browseable = No
; read only = Yes
; printable = Yes
; print command = /usr/bin/lpr -P%p -r %s
; lpq command = /usr/bin/lpq -P%p
; lprm command = /usr/bin/lprm -P%p %j
;[print$]
; path = /home/printers
; guest ok = No
; browseable = Yes
; read only = Yes
; valid users = @"Print Operators"
; write list = @"Print Operators"
; create mask = 0664
; directory mask = 0775
[public]
comment = Pasta Publica
path = /home/public
browseable = Yes
guest ok = Yes
read only = No
directory mask = 0775
create mask = 0664
Thank?s in advance,
Gustavo