samba - Jan 2006 - Samba 3.0.14 - very puzzling domain browsing problems

Hi again, all:

I followed Adam's advice and investigated the transmission of broadcast
packets to the Samba PDC.

Using a packet injector, tcpdump and Ethereal, I was able to determine
that broadcasts are both going out onto the network and being received
at the PDC, in both UDP and TCP formats.

Again, using this configuration

[global]
domain master = yes
local master = yes
preferred master = yes
os level = 65

No workstations are able to browse the network. I should qualify this --
opening Network Neighborhood produces no errors, but no hosts appear in
the window.

We tried configuring the Samba PDC to use WINS, turned off all the
workstations on the network but two, and configured one of the
workstations to point to the WINS server at the Samba PDC's IP address.

Again, an empty Network Neighborhood window.

And yet -- the wins.dat file is populated with hosts, as is the
browse.dat. Still -- nobody can browse.

We're extremely puzzled by this and at a loss how to proceed...

any ideas?

-Stephen-

Anthony Messina wrote:
> something simple, perhaps too simple...
> 
> this once happened to me and i realized it was that the workgroup name
> that i had specified in samba was not the same as the one in windows, or
> that i had not joined the proper domain.
> 
> or
> 
> is your windows computer set up to use the right wins server?
Alas, I wish it were this simple.

The domain in question is definitely consistent between workstations and
the PDC -- as I noted in a previous post, if the OS level is set to 0
and the domain, preferred and local master are set to "no", one of the
Windows machines becomes the domain master browser and suddenly
workstations appear in the browse list.

I'm determined to find the cause of this problem, whatever it takes.
I've followed the Samba how-to and everything should be working, but
obviously I'm missing something somewhere...

Here's my smb.conf:

###############################################################################
# GLOBAL PARAMETERS
###############################################################################

[global]
# NOTE: change these parameters to suit your business
workgroup = HEDLIN-LAUDER
netbios name = PDC
passdb backend = ldapsam:ldap://ldap.hedlinlauder.com/
ldap admin dn = cn=samba,ou=dsa,dc=hedlinlauder,dc=com
ldap suffix = dc=hedlinlauder,dc=com
# interface list should be specified for machines with > 1 interface
;interfaces = <IP1>,<IP2>,...

###############################################################################
# NOTE: You should not have to change any of the other GLOBAL PARAMETERS
#       beyond this point, as long as you are building a PDC without WINS
#       using cups for printing. You may need to change the SHARE
DEFINITIONS
#       (see below) however.
###############################################################################

server string = Samba Server %v
domain logons = yes
os level = 65
domain master = yes
preferred master = yes
local master = yes
wins support = yes
time server = yes
name resolve order = wins bcast lmhosts

logon script = %U.bat
logon drive = H:
logon path = \\%L\Profiles\%U
;logon home = \\%L\%U\.profile

# ldap configuration
ldap group suffix = ou=Group
ldap user suffix = ou=People
ldap machine suffix = ou=Hosts
ldap idmap suffix = ou=Idmap
ldap ssl = start_tls
ldap delete dn = yes
add user script = /usr/sbin/smbldap-useradd -a -m "%u"
delete user script = /usr/sbin/smbldap-userdel "%u"
add machine script = /usr/sbin/smbldap-useradd -w "%u"
add group script = /usr/sbin/smbldap-groupadd -p "%g"
delete group script = /usr/sbin/smbldap-groupdel "%g"
add user to group script = /usr/sbin/smbldap-groupmod -m "%u"
"%g"
delete user from group script = /usr/sbin/smbldap-groupmod -x "%u"
"%g"
set primary group script = /usr/sbin/smbldap-usermod -g "%g"
"%u"

# printers configuration
printer admin = @"Print Operators"
load printers = yes
create mask = 0640
directory mask = 0750
printing = cups
printcap name = cups
deadtime = 10

# other
guest account = nobody
map to guest = Bad User
show add printer wizard = yes
preserve case = yes
short preserve case = yes
case sensitive = no
enable privileges = yes
username map = /etc/samba/smbusers
security = user
encrypt passwords = yes
obey pam restrictions = no
ldap passwd sync = yes
log level = 2
syslog = 0
log file = /var/log/samba/log.%m
max log size = 5000
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
Dos charset = 850
Unix charset = ISO8859-1

-Stephen-

Are you sure nmbd is running?
Did you query the wins server by using:
nmblookup -U IPADDR_OF_WINS_SERVER -R WORKSTATION_NAME_TO_ASK_FOR
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 190 bytes
Desc: not available
Url :
http://lists.samba.org/archive/samba/attachments/20060120/6f939456/attachment.bin