Chris Rutledge
2005-Apr-01 19:25 UTC
[Samba] Aliased interface/multi-smb on one machine + security = DOMAIN model
Hello all, Have a little trouble here. I've got a single machine with multiple instances of smb running attached to different services (for use with RedHat HA). Each instances is bound to it's own aliased IP using the machine's primary interface (eth0). I issue the `smbpasswd -j DOMAIN -r IP -c /etc/samba/smb.conf.Apache -U admin%pass` and `smbpasswd -j DOMAIN -r IP -c /etc/samba/smb.conf.FTP -U admin%pass`, however only the last config that I joined the domain with works, the first keeps prompting me for a password. Also neither of these instances register themselves with the WINS server, we had to manually enter a static entry, this is not a problem with the same configs (all same IP's) in the security = SERVER model. I'm running smb 2.2.12 on RedHat AS 2.1. Below are the config files, any help would be greatly appreciated..... /etc/samba/smb.conf.Apache ------------------------------------------------------------------------- [global] workgroup = PDCSERVER lock directory = /var/cache/samba/Apache pid directory = /var/cache/samba/Apache bind interfaces only = yes interfaces = 10.254.100.150 server string = Xisle Cluster Samba Server (Fear the Penguin) debug level = 1 security = DOMAIN password server = 192.192.192.130 domain master = no local master = no log file = /var/log/samba/log.%m max log size = 100 name resolve order = wins lmhosts bcast socket options = TCP_NODELAY dns proxy = No netbios name = smb-test-1 socket address = 10.254.100.150 wins server = 192.192.192.238 hosts allow = 192.192.192. 172.16. 192.168. 127. guest account = nobody encrypt passwords = yes domain logons = no ------------------------------------------------------------------------- /etc/samba/smb.conf.FTP ------------------------------------------------------------------------- [global] workgroup = PDCSERVER lock directory = /var/cache/samba/FTP pid directory = /var/cache/samba/FTP bind interfaces only = yes interfaces = 10.254.100.151 server string = Xisle Cluster Samba Server (Fear the Penguin) debug level = 1 security = DOMAIN password server = 192.192.192.130 domain master = no local master = no log file = /var/log/samba/log.%m max log size = 100 name resolve order = wins lmhosts bcast socket options = TCP_NODELAY dns proxy = No netbios name = smb-test-2 socket address = 10.254.100.151 wins server = 192.192.192.238 hosts allow = 192.192.192. 172.16. 192.168. 127. guest account = nobody encrypt passwords = yes domain logons = no ------------------------------------------------------------------------- Thanks for any help! Chris Rutledge crutledge@tgic.com <mailto:crutledge@tgic.com> The information contained in this email and any attachments may be privileged and/or confidential and protected from disclosure. It is intended solely for the use of the recipient(s) to whom it is addressed, or an employee or agent responsible for delivering this message to the intended recipient(s). You are hereby notified that any dissemination, distribution, copying or other use of this communication is strictly prohibited. If you have received this communication in error, please notify the sender by reply email and delete this email and all attachments from your system. Thank you.
Chris Rutledge
2005-Apr-01 19:31 UTC
[Samba] Aliased interface/multi-smb on one machine + security = DOMAIN model
After thinking about it, I ran a quick test and discovered that during the smbpasswd domain registration it uses the machines primary IP, not the alias per the config file...how do I tell smbpasswd to use a different IP when registering? - Chris -----Original Message----- From: samba-bounces+crutledge=tgic.com@lists.samba.org [mailto:samba-bounces+crutledge=tgic.com@lists.samba.org]On Behalf Of Chris Rutledge Sent: Friday, April 01, 2005 2:25 PM To: samba@lists.samba.org Subject: [Samba] Aliased interface/multi-smb on one machine + security DOMAIN model Hello all, Have a little trouble here. I've got a single machine with multiple instances of smb running attached to different services (for use with RedHat HA). Each instances is bound to it's own aliased IP using the machine's primary interface (eth0). I issue the `smbpasswd -j DOMAIN -r IP -c /etc/samba/smb.conf.Apache -U admin%pass` and `smbpasswd -j DOMAIN -r IP -c /etc/samba/smb.conf.FTP -U admin%pass`, however only the last config that I joined the domain with works, the first keeps prompting me for a password. Also neither of these instances register themselves with the WINS server, we had to manually enter a static entry, this is not a problem with the same configs (all same IP's) in the security = SERVER model. I'm running smb 2.2.12 on RedHat AS 2.1. Below are the config files, any help would be greatly appreciated..... /etc/samba/smb.conf.Apache ------------------------------------------------------------------------- [global] workgroup = PDCSERVER lock directory = /var/cache/samba/Apache pid directory = /var/cache/samba/Apache bind interfaces only = yes interfaces = 10.254.100.150 server string = Xisle Cluster Samba Server (Fear the Penguin) debug level = 1 security = DOMAIN password server = 192.192.192.130 domain master = no local master = no log file = /var/log/samba/log.%m max log size = 100 name resolve order = wins lmhosts bcast socket options = TCP_NODELAY dns proxy = No netbios name = smb-test-1 socket address = 10.254.100.150 wins server = 192.192.192.238 hosts allow = 192.192.192. 172.16. 192.168. 127. guest account = nobody encrypt passwords = yes domain logons = no ------------------------------------------------------------------------- /etc/samba/smb.conf.FTP ------------------------------------------------------------------------- [global] workgroup = PDCSERVER lock directory = /var/cache/samba/FTP pid directory = /var/cache/samba/FTP bind interfaces only = yes interfaces = 10.254.100.151 server string = Xisle Cluster Samba Server (Fear the Penguin) debug level = 1 security = DOMAIN password server = 192.192.192.130 domain master = no local master = no log file = /var/log/samba/log.%m max log size = 100 name resolve order = wins lmhosts bcast socket options = TCP_NODELAY dns proxy = No netbios name = smb-test-2 socket address = 10.254.100.151 wins server = 192.192.192.238 hosts allow = 192.192.192. 172.16. 192.168. 127. guest account = nobody encrypt passwords = yes domain logons = no ------------------------------------------------------------------------- Thanks for any help! Chris Rutledge crutledge@tgic.com <mailto:crutledge@tgic.com> The information contained in this email and any attachments may be privileged and/or confidential and protected from disclosure. It is intended solely for the use of the recipient(s) to whom it is addressed, or an employee or agent responsible for delivering this message to the intended recipient(s). You are hereby notified that any dissemination, distribution, copying or other use of this communication is strictly prohibited. If you have received this communication in error, please notify the sender by reply email and delete this email and all attachments from your system. Thank you. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Chris Rutledge
2005-Apr-04 12:40 UTC
[Samba] Aliased interface/multi-smb on one machine + security = DOMAIN model
Thanks, but these aliased hosts already are in DNS, so I don't think that is the issue. Everything I do doesn't seem to change which IP smbpasswd uses to bind to the PDC when joining the domain. Here is the machine's IP layout...... eth0 Link encap:Ethernet HWaddr 00:0B:CD:0F:1E:B1 inet addr:10.254.100.100 Bcast:10.254.255.255 Mask:255.255.0.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:55377 errors:0 dropped:0 overruns:0 frame:0 TX packets:55214 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:5964315 (5.6 Mb) TX bytes:5527609 (5.2 Mb) Interrupt:11 eth0:0 Link encap:Ethernet HWaddr 00:0B:CD:0F:1E:B1 inet addr:10.254.100.150 Bcast:10.255.255.255 Mask:255.0.0.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) Interrupt:11 eth0:1 Link encap:Ethernet HWaddr 00:0B:CD:0F:1E:B1 inet addr:10.254.100.151 Bcast:10.255.255.255 Mask:255.0.0.0 UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 RX packets:0 errors:0 dropped:0 overruns:0 frame:0 TX packets:0 errors:0 dropped:0 overruns:0 carrier:0 collisions:0 txqueuelen:1000 RX bytes:0 (0.0 b) TX bytes:0 (0.0 b) Interrupt:11 The 2 SMB services in question are using the aliased interfaces, however when I issue the smbpasswd -j/with options it uses 10.254.100.100 to bind with the PDC. Thanks, Chris -----Original Message----- From: samba-bounces+crutledge=tgic.com@lists.samba.org [mailto:samba-bounces+crutledge=tgic.com@lists.samba.org]On Behalf Of Tony Earnshaw Sent: Friday, April 01, 2005 4:11 PM To: samba@lists.samba.org Subject: RE: [Samba] Aliased interface/multi-smb on one machine + security = DOMAIN model Chris Rutledge:> After thinking about it, I ran a quick test and discovered that > during the smbpasswd domain registration it uses the machines > primary IP, not the alias per the config file...how do I tell > smbpasswd to use a different IP when registering?Separate host/ip combo in /etc/hosts or DNS for each? That's what I do for something completely different. Actually I use DNS, including PTR records. [...] --Tonni -- mail: tonye@billy.demon.nl http://www.billy.demon.nl -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba The information contained in this email and any attachments may be privileged and/or confidential and protected from disclosure. It is intended solely for the use of the recipient(s) to whom it is addressed, or an employee or agent responsible for delivering this message to the intended recipient(s). You are hereby notified that any dissemination, distribution, copying or other use of this communication is strictly prohibited. If you have received this communication in error, please notify the sender by reply email and delete this email and all attachments from your system. Thank you.