similar to: RE: Samba PDCs/BDCs and Trusts WAS: auth to two diff PDCs? (succe ss, sort of)

Steven Langasek wrote: > Having one PDC and two BDCs also gives you greater > fault-tolerance than > having three domains with a single PDC each. > > Samba+LDAP can give you this fault tolerance; it can't give you trust > relationships today, without a lot of finagling. > > Steve Langasek > postmodern programmer > Steve: I understand the role of/need for the

With a single server, settings "security = server" and "password server = pdc1 pdc2', I can successfully authenticate against two entirely different PDCs depending on which order I put the two machines in the 'password server' list. Is there someway of forcing clients from either domain to authenticate against the 'right' pdc, regardless of the order in the

OK, I think I've hit a misfeature in samba 3.0(release, Debian/sid) when it comes to using both Samba BDCs and domain trusts. It seems that the domain trust password is stored in the secrets.pdb on the server establishing the trust. This, obviously doesn't facilitate BDCs exercising the trust relationship, or being at all accessable from workstations on the other side of the trust. I

Hi @ll, as i had setup a vpn ( openvpn ) and have wins browse working nice between the 2 subnets i wanted to setup a interdomain trust. I did smbpasswd -a -i ... the trustaccount was created. but net rpc trustdom establish robowarp results in [2004/02/04 02:58:09, 0] utils/net_rpc.c:rpc_trustdom_establish(1789) Couldn't find domain controller for domain ROBOWARP for sure i checked all

People, I have one PDC and a BDC on the matrix side and two BDCs on the branch office. I don't know if it is a problem. Anybody could help me? PDC # net rpc testjoin get_schannel_session_key: could not fetch trust account password for domain 'DOMAIN_NAME' net_rpc_join_ok: failed to get schannel session key from server PDC for domain DOMAIN_NAME. Error was

Hello, I have a rather experimental question to ask. I know that under standard circumstances, that you cannot have multiple PDC for a single domain, as they will conflict with each other. I am dealing with a case of a school district, where there are multiple buildings.There are T-1s that tie together each of the buildings, then a bonded T-1 grants access to the internet through the main admin

The interesting part is that PAM nor the SMB auth plugin for Apache requires you to be a member of the domain. However, the caveat with pam_smb_auth is that you have to have a unix account for every windows user you want to authenticate. I guess the behavior I'm trying to achieve is the one achieved with the Apache plugin: 1) Doesn't require you to be a member of the domain 2)

Greetings! I have the following configuration: Two PDCs (Samba 3.0.21b) with Fedora Core 4: PDC1 and PDC2. PDC1 trusts PDC2, respectively PDC2 is trusted to PDC1. I join an XP workstation to PDC2. After restart i can see both domains in the login screen domain combo box. I can logon to PDC2 , but not to PDC1, since the

I have a problem with machine trust accounts breaking in a purely Samba controlled domain. I have one master Samba server acting as a PDC, and three slave servers in different networks. The UNIX user account information is updated by means of NIS, and smbpasswd gets rsync'ed to the slave servers whenever there is a change in the file. All this works without problems at all times. When I

James: (Again someone correct me if I'm wrong) PAM allows local access to the Samba machine as well as authenticating Samba users. Winbind *only* allows for Samba access. This is why I chose *not* to use PAM in my setup. I don't want normal users to have local logon access to *MY* servers. <evil grin> With Winbind, you don't need PAM at all. If you're planning on

We're about to start migrating from Windows NT 4.0 to a Samba controlled setup. I've got a question about the functionality of the Samba PDCs and BDCs. In my Windows setup I have three domains that are defined by geographic locations. Each of these domains "trusts" the other. In Samba 2.2.7, I can't have the trusts, so I'm looking at creating one giant domain that

Hello, I'm Nicol?s from Uruguay, I work in ASSE (public health services), the enterprise has lots of buildings all over my country, more than 100, with thousands of employees and PCs. Until now there is no "network configuration" in PCs (no network users, etc) and I'm trying to solve that out. I started working with samba about one year ago (I've been learning a lot), I

Hi, For normal readers you kn ow already my setup, but for those new here, I have a Samba4 PDC and two BDCs one a samba4 and the other a W2k8 R2 machine. Yesterday we had problems with our upstream service provider and my PDC (Backend BIND 9 DLZ) went down for some hours, as you might guess my whole AD was down due to the fact that the main DNS was down. I would like youi to point me or tell

Sorry if this is a FAQ but I have tried searching the web and both samba3 books but I can't find the answer. I would like to use a single LDAP server (openldap) to authenticate multiple Samba3 PDCs serving different domains to authenticate Windows XP clients. Ideally I would like an XP client to appear in both domains and the user to get different profiles depending on which domain they

> IIRC the client should contact the PDC (domain<0x1b>). But can you > check the logs and see if the clients are trying to change it on > domain<0x1c> (any DC)? Thanks. Can you give me any hints on how to find such information in the log files? My log level is 5, and I can find some password change messages in the logs, but I don't know how to check if they are looking

hello, I'd like to setup domain authentication purely based on Samba Domain Controllers. Each subnet would have its own BDC (with security = domain option), forwarding smb requests to the PDC (located on the backbone), ie authentication, shares.. My PDC is LDAP based, all that part is ok, win98 workstations successfully log into the PDC. I use idealx smbldap tools, that seem to work fine. I

Hi, I?ve setup a Samba 2.0.5a on a SuSe 6.2 based Linux 2.2.10. I?m trying to integrate the server into our NT domain SF-DOM as described in samba/textdocs/DOMAIN_MEMBER.txt . The described procedures work, but access as domain user is impossible. In the logfile I get: [1999/09/14 11:18:31, 2] smbd/server.c:main(716) Changed root to / [1999/09/14 11:18:31, 2] smbd/reply.c:reply_special(96)

James: I use Winnind to authenticate users from the Windows PDC - I have no UNIX users. Have you looked at this? I've got an informal HOWTO if you'd like it. Thanks, Kevin L. Collins, MCSE Systems Manager Nesbitt Engineering, Inc. > -----Original Message----- > From: James Lamanna [mailto:jamesl@appliedminds.net] > Sent: Thursday, November 07, 2002 2:16 PM > To:

Hello, I am trying to figure out how to implement a samba domain in a number of remote offices around the world with partly bad and often interrupted WAN connections/VPNs. The goal is to administer the directory from the central data center. My obvious choice would be to set up a central server with SAMBA+OpenLDAP+smbldap-tools and in each remote office a SAMBA server with OpenLDAP as a

I have a PDC named GOMER w/ IP of 10.8.3.37 and a BDC named BLDG2 w/ ip of 10.8.7.2. when someone on the 10.8.7.x network using the WINS server of 10.8.7.2 logs in and out, their roaming profile is stored on the PDC. is there any way to have the roaming profile stored on the BDC?, because I will have other 10.8.x.x networks and some of these remote sites will be using DSL and I don't