thr3ads.net - samba - [Samba] Samba PDC [Feb 2009]

If this information is useful, please help other people find it:
Share via:

Carl Parsons

2009-Feb-17 21:57 UTC

[Samba] Samba PDC

Hello

I have a Fedora 6 with samba 3.0.2465 working great as a PDC with Win98 
clients. The server has domain logon working and login scripts running I 
have made a second server to replace the first but after upgrading 
beyond Fedora 8 it no longer works. I can see shares with Vista64 
Business and XP Pro although they will not authenticate but  the win98 
boxes I get "the domain password you supplied is not correct or access 
to your server has been denied."

Any suggestions would be appreciated I have been working on this for 
ages and run out of idea's Perhaps I need to specify the char set which 
I might try I am not bothered about Vista or XP just win98.


Carl



# Samba config file created using SWAT
# from
# Date: 2009/02/04 17:26:57

[global]
        workgroup = DOMAIN
        server string = FEDORA %v on %h
        interfaces = 192.168.1.3/24
        log level = 10
        log file = /var/log/samba/samba.%m
        max log size = 50
        time server = Yes
        socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 
SO_RCVBUF=8192
        add user script = /usr/sbin/useradd -m '%u' -g users -G users
        delete user script = /usr/sbin/userdel -r %u
        add group script = /usr/sbin/groupadd %g
        delete group script = /usr/sbin/groupdel %g
        add user to group script = /usr/sbin/usernod -G %g %u
        add machine script = /usr/sbin/useradd -s /bin/false/ -d 
/var/lib/nobody %u
        logon script = %U.bat
        logon path = \\%N\profiles\%u
        domain logons = Yes
        os level = 65
        preferred master = Yes
        domain master = Yes
        dns proxy = No
        wins support = Yes
        idmap uid = 15000-20000
        idmap gid = 15000-20000
        template shell = /bin/bash
        winbind enum groups = No
        invalid users = bin, deamon, sys, man, postfix, mail, ftp
        admin users = @wheel
        hosts allow = 192.168.1., 127., 192.168.1.41
        printer name = Epson


[netlogon]
    path = /home/samba/netlogon
    valid users = root, @smbusers
    browseable = No

[profiles]
    path = /home/samba/profiles
    valid users = root, @smbusers
    read only = No
    create mask = 0700
    directory mask = 0700
    browseable = No

[homes]
    comment = Home Directories
    path = /home/%U
    force group = staff
    read only = No
    create mask = 0700
    directory mask = 0700
    browseable = No

[printers]
    comment = All Printers
    path = /var/spool/samba
    printable = Yes
    browseable = No

[public]
    comment = Public Stuff
    path = /home/public
    valid users = @staff
    force group = staff
    read only = No
    create mask = 0775
    directory mask = 0775
    guest ok = Yes

tail log.nmbd

[2009/02/17 21:31:54,  3] 
nmbd/nmbd_become_dmb.c:become_domain_master_query_success(223)
  become_domain_master_query_success():
  Our address (192.168.1.3) returned in query for name DOMAIN<1b> 
(domain master browser name) on subnet UNICAST_SUBNET.
  Continuing with domain master code.
[2009/02/17 21:31:54,  2] 
nmbd/nmbd_become_dmb.c:become_domain_master_stage1(178)
  become_domain_master_stage1: Becoming domain master browser for 
workgroup DBTECH on subnet UNICAST_SUBNET
[2009/02/17 21:31:54,  4] 
nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(170)
  find_workgroup_on_subnet: workgroup search for DBTECH on subnet 
UNICAST_SUBNET: found.
[2009/02/17 21:31:54,  3] 
nmbd/nmbd_become_dmb.c:become_domain_master_stage1(187)
  become_domain_master_stage1: go to first stage: register <1b> name
[2009/02/17 21:31:54,  3] nmbd/nmbd_namelistdb.c:add_name_to_subnet(250)
  add_name_to_subnet: Added netbios name DOMAIN<1b> with first IP 
192.168.1.3 ttl=259200 nb_flags=64 to subnet UNICAST_SUBNET
[2009/02/17 21:31:54,  6] 
nmbd/nmbd_nameregister.c:multihomed_register_one(322)
  Registering name DBTECH<1b> IP 192.168.1.3 with WINS server 127.0.0.1 
using tag '*'
[2009/02/17 21:31:54,  4] 
nmbd/nmbd_packets.c:initiate_multihomed_name_register_packet(359)
  initiate_multihomed_name_register_packet: sending registration for 
name DOMAIN<1b> IP 192.168.1.3 (bcast=No) to IP 127.0.0.1
[2009/02/17 21:31:54,  5] libsmb/nmblib.c:send_udp(824)
  Sending a packet of len 68 to (127.0.0.1) on port 137
[2009/02/17 21:31:54,  4] 
nmbd/nmbd_responserecordsdb.c:add_response_record(37)
  add_response_record: adding response record id:16407 to subnet 
UNICAST_SUBNET. num_records:14
[2009/02/17 21:31:54,  4] 
nmbd/nmbd_workgroupdb.c:find_workgroup_on_subnet(170)
  find_workgroup_on_subnet: workgroup search for DOMAIN on subnet 
192.168.1.3: found.
[2009/02/17 21:31:54, 10] 
nmbd/nmbd_sendannounce.c:announce_myself_to_domain_master_browser(381)
  announce_myself_to_domain_master_browser: t (1234906314) - 
last(1234906313) < 900
[2009/02/17 21:35:44,  0] nmbd/nmbd.c:main(849)
  nmbd version 3.2.8-0.26.fc10 started.
  Copyright Andrew Tridgell and the Samba Team 1992-2009
[2009/02/17 21:35:44,  5] lib/debug.c:debug_dump_status(407)
  INFO: Current debug levels:
    all: True/10
    tdb: False/0
    printdrivers: False/0
    lanman: False/0
    smb: False/0
    rpc_parse: False/0
    rpc_srv: False/0
    rpc_cli: False/0
    passdb: False/0
    sam: False/0
    auth: False/0
    winbind: False/0
    vfs: False/0
    idmap: False/0
    quota: False/0
    acls: False/0
    locking: False/0
    msdfs: False/0
    dmapi: False/0
    registry: False/0
  doing parameter log file = /var/log/samba/samba.%m
  doing parameter max log size = 50
  doing parameter time server = Yes
  doing parameter socket options = TCP_NODELAY IPTOS_LOWDELAY 
SO_SNDBUF=8192 SO_RCVBUF=8192
  doing parameter add user script = /usr/sbin/useradd -m '%u' -g users 
-G users
  doing parameter delete user script = /usr/sbin/userdel -r %u
  doing parameter add group script = /usr/sbin/groupadd %g
  doing parameter delete group script = /usr/sbin/groupdel %g
  doing parameter add user to group script = /usr/sbin/usernod -G %g %u
  doing parameter add machine script = /usr/sbin/useradd -s /bin/false/ 
-d /var/lib/nobody %u
  doing parameter logon script = %U.bat
  doing parameter logon path = \\%N\profiles\%u
  doing parameter domain logons = Yes
  doing parameter os level = 65
  doing parameter preferred master = Yes
  doing parameter domain master = Yes
  doing parameter dns proxy = No
  doing parameter wins support = Yes
  doing parameter idmap uid = 15000-20000
  doing parameter idmap gid = 15000-20000
  doing parameter template shell = /bin/bash
  doing parameter winbind enum groups = No
  doing parameter invalid users = bin, deamon, sys, man, postfix, mail, ftp
  doing parameter admin users = @wheel
  doing parameter hosts allow = 192.168.1., 127., 192.168.1.41
  doing parameter printer name = Epson
[2009/02/17 21:35:44,  4] param/loadparm.c:lp_load_ex(8797)
  pm_process() returned Yes
[2009/02/17 21:35:44,  7] param/loadparm.c:lp_servicenumber(9002)
  lp_servicenumber: couldn't find homes
[2009/02/17 21:35:44, 10] param/loadparm.c:set_server_role(7975)
  set_server_role: role = ROLE_DOMAIN_PDC
[2009/02/17 21:35:44,  5] lib/iconv.c:smb_register_charset(104)
  Attempting to register new charset UCS-2LE
[2009/02/17 21:35:44,  5] lib/iconv.c:smb_register_charset(112)
  Registered charset UCS-2LE
[2009/02/17 21:35:44,  5] lib/iconv.c:smb_register_charset(104)
  Attempting to register new charset UTF-16LE
[2009/02/17 21:35:44,  5] lib/iconv.c:smb_register_charset(112)
  Registered charset UTF-16LE
[2009/02/17 21:35:44,  5] lib/iconv.c:smb_register_charset(104)
  Attempting to register new charset UCS-2BE
[2009/02/17 21:35:44,  5] lib/iconv.c:smb_register_charset(112)
  Registered charset UCS-2BE
[2009/02/17 21:35:44,  5] lib/iconv.c:smb_register_charset(104)
  Attempting to register new charset UTF-16BE
[2009/02/17 21:35:44,  5] lib/iconv.c:smb_register_charset(112)
  Registered charset UTF-16BE
[2009/02/17 21:35:44,  5] lib/iconv.c:smb_register_charset(104)
  Attempting to register new charset UTF8
[2009/02/17 21:35:44,  5] lib/iconv.c:smb_register_charset(112)
  Registered charset UTF8
[2009/02/17 21:35:44,  5] lib/iconv.c:smb_register_charset(104)
  Attempting to register new charset UTF-8
[2009/02/17 21:35:44,  5] lib/iconv.c:smb_register_charset(112)
  Registered charset UTF-8
[2009/02/17 21:35:44,  5] lib/iconv.c:smb_register_charset(104)
  Attempting to register new charset ASCII
[2009/02/17 21:35:44,  5] lib/iconv.c:smb_register_charset(112)
  Registered charset ASCII
[2009/02/17 21:35:44,  5] lib/iconv.c:smb_register_charset(104)
  Attempting to register new charset 646
[2009/02/17 21:35:44,  5] lib/iconv.c:smb_register_charset(112)
  Registered charset 646
[2009/02/17 21:35:44,  5] lib/iconv.c:smb_register_charset(104)
  Attempting to register new charset ISO-8859-1
[2009/02/17 21:35:44,  5] lib/iconv.c:smb_register_charset(112)
  Registered charset ISO-8859-1
[2009/02/17 21:35:44,  5] lib/iconv.c:smb_register_charset(104)
  Attempting to register new charset UCS2-HEX
[2009/02/17 21:35:44,  5] lib/iconv.c:smb_register_charset(112)
  Registered charset UCS2-HEX
[2009/02/17 21:35:44,  5] lib/charcnv.c:charset_name(82)
  Substituting charset 'UTF-8' for LOCALE
[2009/02/17 21:35:44,  5] lib/charcnv.c:charset_name(82)


-- 
PinGNU Systems Ltd
A company registered in England and Wales
Registered office: 6 Flackdale Road, Hilton, Cambs, PE28 9NY
Registered company number: 4176338
Landline: 01480 831607
Mobile  07709 935666

Miguel Medalha

2009-Feb-17 23:58 UTC

head link

[Samba] Samba PDC

> I have a Fedora 6 with samba 3.0.2465 working great as a PDC with 
> Win98 clients. The server has domain logon working and login scripts 
> running I have made a second server to replace the first but after 
> upgrading beyond Fedora 8 it no longer works. I can see shares with 
> Vista64 Business and XP Pro although they will not authenticate but  
> the win98 boxes I get "the domain password you supplied is not correct
> or access to your server has been denied."
>
>I am not sure if this applies to your case or to the samba version you 
quote, but recently the defaults for parameters "client lanman auth"
and
"lanman auth" have been changed from "Yes" to
"No". Disabling this
option will also disable the |client plaintext auth| option.

Please consult the smb.conf man page for these parameters.

Carl Parsons

2009-Feb-18 10:49 UTC

head link

[Samba] Samba PDC

Hello

THANK YOU  I never even thought to look there that must be the problem 
seems obvious now.  It is still not working but this maybe something I 
have done since.

Feb 18 10:41:37 canada winbindd[2705]: [2009/02/18 10:41:37,  0] 
libsmb/namequery.c:saf_store(75)
Feb 18 10:41:37 canada winbindd[2705]:   saf_store: refusing to store 0 
length domain or servername!
Feb 18 10:41:47 canada winbindd[2705]: [2009/02/18 10:41:47,  0] 
libsmb/clientgen.c:cli_receive_smb(165)
Feb 18 10:41:47 canada winbindd[2705]:   Receiving SMB: Server stopped 
responding
Feb 18 10:41:47 canada smbd[2829]: [2009/02/18 10:41:47,  0] 
lib/util_sock.c:matchname(1749)
Feb 18 10:41:47 canada smbd[2829]:   matchname: host name/address 
mismatch: ::ffff:192.168.1.3 != canada.localdomain
Feb 18 10:41:47 canada smbd[2829]: [2009/02/18 10:41:47,  0] 
lib/util_sock.c:get_peer_name(1870)
Feb 18 10:41:47 canada smbd[2829]:   Matchname failed on 
canada.localdomain ::ffff:192.168.1.3

Tried to turn off ipv6 but seem to still have failed. Security is not a 
problem either just getting the logon scripts to work.

Carl




Miguel Medalha wrote:>
>> I have a Fedora 6 with samba 3.0.2465 working great as a PDC with 
>> Win98 clients. The server has domain logon working and login scripts 
>> running I have made a second server to replace the first but after 
>> upgrading beyond Fedora 8 it no longer works. I can see shares with 
>> Vista64 Business and XP Pro although they will not authenticate but  
>> the win98 boxes I get "the domain password you supplied is not 
>> correct or access to your server has been denied."
>>
>>
> I am not sure if this applies to your case or to the samba version you 
> quote, but recently the defaults for parameters "client lanman
auth"
> and "lanman auth" have been changed from "Yes" to
"No". Disabling this
> option will also disable the |client plaintext auth| option.
>
> Please consult the smb.conf man page for these parameters.
>
>

-- 
PinGNU Systems Ltd
A company registered in England and Wales
Registered office: 6 Flackdale Road, Hilton, Cambs, PE28 9NY
Registered company number: 4176338
Landline: 01480 831607
Mobile  07709 935666

Carl Parsons

2009-Feb-18 11:58 UTC

head link

[Samba] Samba PDC

Hi

Yes it is working I just added the following not sure if they are all 
needed but at last it is working for Win98 Clients and Samba Version 
3.2.8-0.26.fc10.

        lanman auth = Yes
        ntlm auth = No
        lm announce = Yes
        client lanman auth = Yes

Carl

Thanks again once I am hoping to get ldap and PDC BDC working for Fedora 
10 will post on http://www.pingun.org
> Miguel Medalha wrote:
>>
>>> I have a Fedora 6 with samba 3.0.2465 working great as a PDC with 
>>> Win98 clients. The server has domain logon working and login
scripts
>>> running I have made a second server to replace the first but after 
>>> upgrading beyond Fedora 8 it no longer works. I can see shares with
>>> Vista64 Business and XP Pro although they will not authenticate but
>>> the win98 boxes I get "the domain password you supplied is not
>>> correct or access to your server has been denied."
>>>
>>>
>> I am not sure if this applies to your case or to the samba version 
>> you quote, but recently the defaults for parameters "client lanman
>> auth" and "lanman auth" have been changed from
"Yes" to "No".
>> Disabling this option will also disable the |client plaintext auth| 
>> option.
>>
>> Please consult the smb.conf man page for these parameters.
>>
>>
>
>

-- 
PinGNU Systems Ltd
A company registered in England and Wales
Registered office: 6 Flackdale Road, Hilton, Cambs, PE28 9NY
Registered company number: 4176338
Landline: 01480 831607
Mobile  07709 935666

Apparently Analagous Threads

Search for more seemingly similar threads

samba - Feb 2009 - Samba PDC

[Samba] Samba PDC

[Samba] Samba PDC

[Samba] Samba PDC

[Samba] Samba PDC

Apparently Analagous Threads