Good day list,
I hope, you will pay attention to my small problem (big problem for me).
I'm totally new to samba, so I don't know exactly, where the problem
is. Situation - I need to setup samba as a domain controller (and
fast!). Server - openbsd 3.9, samba 3.0.21.
There are my configs:
smb.conf
-------------------------------------------------------------------------------------------
cat /etc/samba/smb.conf
[global]
workgroup = mydomain
passwd chat = *New*Password* %n\n*Re-enter*new*password* %n\n *Password*changed*
username map = /etc/samba/smbusers
syslog = 2
name resolve order = wins bcast hosts
add user script = /usr/sbin/useradd -m '%u'
delete user script = /usr/sbin/userdel -r '%u'
add group script = /usr/sbin/groupadd '%g'
delete group script = /usr/sbin/groupdel '%g'
add user to group script = /usr/sbin/usermod -G '%g' '%u'
add machine script = /usr/sbin/useradd -s /bin/false -d /var/lib/nobody
'%u'
logon script = scripts\login.bat
logon path logon drive = X:
domain logons = Yes
preferred master = Yes
wins support = Yes
printing = CUPS
[homes]
comment = Home Directories
valid users = %S
read only = No
browseable = No
[netlogon]
comment = Network Logon Service
path = /home/samba/data/%U
valid users = %S
read only = No
[stuff]
comment = All Stuff
path = /home/samba/data/stuff
;valid users = %G
read only = No
-------------------------------------------------------------------------------------------
cat /etc/samba/smbusers
root = Administrator
muchacha = Administrator
aur = aurk1
jus = jusk2
dal = dalk3
rom = romd1
mon = mond2
ant = antnb
-------------------------------------------------------------------------------------------
cat /etc/samba/smbpasswd
root:0:3EB2601FBF81B43923B0A8F6F116C5B1:89A8C23F1100C5D0483335155A6F3D6A:[U
]:LCT-447CCFDF:
aur:1002:49881D6221BF97DCAAD3B435B51404EE:7626426E298A56ED35661E77DA3B2FE9:[U
]:LCT-447CC8C1:
jus:1003:DE8890B4A1C7DDECAAD3B435B51404EE:51C7DE2EE1A936E86E56764F54E47C74:[U
]:LCT-447CC8C8:
dal:1004:E4C95B3CABC1DFF2AAD3B435B51404EE:C36BA0ADEC8116F037B1C5098D06C869:[U
]:LCT-447CC8CF:
rom:1005:4403416CEA8AEB15AAD3B435B51404EE:A263BBF7D9D8311DD09F43947A4A3032:[U
]:LCT-447CC8D7:
mon:1006:EFABEA5881F25971AAD3B435B51404EE:392E82C1805FAB45F933D66F7EEF6081:[U
]:LCT-447CC8DF:
So I think users are added. System users also exists. Looks like
everything is working, I mean every user can have their home
directories \\server\aur accessible with their password.
Common share is also available by those users passwords.
In the server I also can acces some dirs with the users:
smbclient -U aur //local/host/aur
Password:
Domain=[MYDOMAIN] OS=[UNIX] Server=[Samba 3.0.21b]
smb:\> ls
.
..
.cshrc
.login
........
smbstatus show me:
Samba version 3.0.21b
PID Username Group Machine
-------------------------------------------------------------------
15436 jus users arch1 (192.168.1.35)
18667 rom users arch3 (192.168.1.34)
Service pid machine Connected at
-------------------------------------------------------
stuff 15436 arch1 Wed May 31 05:42:45 2006
jus 15436 arch1 Wed May 31 05:42:51 2006
stuff 18667 arch3 Wed May 31 06:10:31 2006
No locked files
I need the domain controller, that users would be able to login. For
now, I can't log on to domain. I know, I missed understood something,
but I was trying to log into domain with all possible users, for
example aur, aurk1. Also, is it important windows computer name?
Also I've script
#!/bin/ksh
# Map Windows Domain Groups to UNIX groups
net groupmap modify ntgroup="Domain Admins" unixgroup=wheel
net groupmap modify ntgroup="Domain Users" unixgroup=users
net groupmap modify ntgroup="Domain Guests" unixgroup=nobody
# Add Functional Domain Groups
net groupmap add ntgroup="Architektai" unixgroup=users type=d
Please, give any advice, or just say what I'm missing here. I know, I
don't understand domain setup correctly, but I have no time for
reading all manual in samba.org.
I've also tried to as in example here:
http://us5.samba.org/samba/docs/man/Samba-Guide/small.html
But the result was the same:
Every time I try to log on to domain, I have this error:
"The user name could not be found."
testparm says, that role is ok:
testparm
Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
Processing section "[netlogon]"
Processing section "[stuff]"
Loaded services file OK.
WARNING: passdb expand explicit = yes is deprecated
Server role: ROLE_DOMAIN_PDC
Press enter to see a dump of your service definitions
Please, give any advice.
Thank you for you time.
--
Tautvydas
P.S. Sorry for my English.
