similar to: Migrate from two domains to one

Hi all, I have two different domains. At one point I had them trusting eaach other but then I ruined it. Now I am trying to get them back. They both have LDAP backend. I need them bot to trust each other and be trusted by each other. Here are the steps I am following: 1. On each domain, create a computer account called the other domain: CORP: smbldap-useradd -ai FURN$ CORP:

Hi all, I need to migrate profiles from one running domain to another. I can't use the standard Windows Profile tools, because when I am a member of one domain, profiles for the other domain say "Account Unknown" and the Copy function is disabled. I can't get interdomain trusts working and have no responses to my email about that, so I am looking for another way to get

Hello, I have spent the afternoon learning how to configure my routers to allow directed-broadcast with an access list, so that I can allow two different domains on different subnets to trust each other. Now I can do a broadcast ping from either subnet to the other, and I can also do smbclient -L <remote_pdc> and get the shares, from one side. From the other side I cannot. Let me

Right now, I have all of my Samba stuff under ou=corp,dc=mycompany,dc=com. I have it this way because there used to also be ou=furn,dc=mycompany,dc=com with a different domain. Now that I only have one domain, I would like to move everything to dc=mycompany,dc=com. So I copy all of the subentries of ou=corp (ou=computers, ou=people, ou=grooups, and the sambaDomainName entries) to

While trying to solve my printer problem, I have come up with another question that Google is not helping me with. What happens to a print job after Samba submits it to Cups? Is it 'finished' even though Cups is still printing it? Is that why my users aren't seeing their print jobs, because Cups has already snatched them and Samba assumes they are done? I would much rather if

Hi all, I would like two Samba servers to be able to talk to each other via NetBIOS. The problem is that they are on two different subnets. I have enabled broadcast ping on the routers, and the servers can each ping the other subnet with no trouble. The two relevant IPs are 192.168.1.101 and 192.168.2.3. There is a T1 between two Cisco routers, and IP routing is all set up. Currently

Hi all, I've got one printer on our network where the drivers have to be installed locally. This has been a pain in the butt so far, and today is no different. I've got 10 users using this printer on Windows 2000. They are all administrators on their local machines. I installed the printer on each of their systems by browsing to \\server\, opening the Printers folder,

Hi all, I have gotten the 'profiles' command to work for NT and Win2K profiles very well. In Windows XP, I am able to change the 'owner' but not the 'group' SID. It gives no errors but it just doesn't change them. A snippet of the profile in question is below: furnsrv:/data/samba/profiles/jon # profiles NTUSER.DAT |grep S-1-5 Owner SID: S-1-5-32-544 Group

Hi, I'm a tad confused about something. I've got a production instance of Samba running. I am trying to get a test version running on the same box, with the same SID. Without the test server running, I used "net setlocalSID <oldsid>" (the net binary is the one for the new server). Then when I issued 'net getlocalsid' it returned it. I thought I was fine.

Hi, I've just moved a second Samba domain to LDAP -- it works great! However, the first domain is now dead in the water. It refuses to autenticate, and from the logs it looks like it's not find the SambaDomainName entry in the LDAP tree. Here is a diagram of how my LDAP tree is set up. dc=mycompany,dc=com |___ ou=computers |___ ou=people |___ ou=groups |___ sambaDomain=domain1 |___

Hi, I recently did a complete upgrade and reinstall of one of our Samba servers. No problem, I backed up all the data, the Samba configuration files, and the secrets.tdb. Just compiled 3.0.8 on the new server (which has the same hostname), copied the smb.conf to /usr/local/samba/lib and copied th secrets.tdb to /usr/local/samba/private. Started Samba, did 'net getlocalsid' and it

Hello Samba people, My goal is to upgrade our Samba 2.2.9 PDC to 3.0.6. 2.2.9 was installed from an RPM, but 3.0.6 is compiled from source. No special options except --with-prefix and other location-specific ones. We are using the typical smbpasswd back-end. So I have compiled and installed 3.0.6. I have tweaked the smb.conf to reflect what I believe are the new values for 3.x. The

I am using Samba PDC with OpenLDAP2 and smbldap-tools. As part of my logon.bat, I call a script called ifmember.exe. This script can list out the groups a user is a member of. It is reporting that my root user is a member of the group 'engr.' I don't know if this is a bug with ifmember.exe or if it's an issue in Samba or in LDAP. Here is some relevant data:

Not sure if this is where I should ask about this, but if I try to run any of the smbldap-* scripts, I get the following kind of output: oink:/usr/local/sbin # ./smbldap-populate Using builtin directory structure erreur LDAP: Can't contact master ldap server (IO::Socket::INET: Bad protocol 'tcp') at /usr/local/sbin//smbldap_tools.pm line 153. I feel like this must be from a typo

Hi all, I have been having the weirdest network browsing problems on my network the past week. Come to find out the wins.dat file got corrupted. Removing that file fixed everything. Because our systems typically have uptimes measured in months rather than days, and it is difficult for me to restart Samba except as a scheduled task (which I'm afraid to do because there are users who

OK, I just took my first non-root user live on my Samba 3.0.7 system. Printing is via cups, with drivers stored in the print$ share. This user is a local power user. She can add printers, or root can add them. Root can also print from them. If this user tries to print anything (a test page even) she gets a non-verbose error that looks like a permissions error. She can view the queues

I've got a WinXP machine that was configured for local profiles. I have now joined that machine to the domain, but when I try to log in as a user, it tries to use a roaming profile. Fine, that's what I want anyway. But it doesn't do the smart thing and copy the user's local profile to roaming -- it gives an error instead. OK, no problem, I will change the type. I log in as

Can someone verify that testparm in 3.0.7 always reports the [printers] share as browseable = no ? I think this is a bug in 3.0.7. It might be affecting smbclient listing of printer shares too. Misty

When I used smbldap-populate way back when I set up my LDAP server, I got two sambaDomainName objects in my LDAP tree -- one for the domain name (CORP) and one for the PDC Netbios name (CORPSRV). My Windows XP systems complain that they can't find the PDC for the domain CORPSRV. I am wondering if I even need the second sambaDomainName in LDAP at all. Any ideas? Misty

Our Samba server was recently the recipient of a major upgrade. I thought all the kinks were worked out, but apparently not. I think this is the first time I've tried to join a machine account to the domain since the upgrade. I've tried using smbldap-tools and also just using smbpasswd (I have my users in LDAP). I'll also say that 'net join' works just fine from my Samba