similar to: Fwd: Cross-subnet browsing and VPN

Hello, I have spent the afternoon learning how to configure my routers to allow directed-broadcast with an access list, so that I can allow two different domains on different subnets to trust each other. Now I can do a broadcast ping from either subnet to the other, and I can also do smbclient -L <remote_pdc> and get the shares, from one side. From the other side I cannot. Let me

I have two domains which are on different subnets, connected by a routed OpenVPN tunnel. The domains trust each other. Domain A has the WINS server. Domain B is confused to use Domain A's WINS server. The VPN pushes the WINS server as part of its DHCP options as well. >From either domain, I am able to use smbclient to see the shares on the other domain's PDC. I have to specify -W

Hi all, I have been working on this for days to no avail. I am unable to join any machine to my domain. I think the server's machine password got corrupted but don't know how to change it. From the PDC, I try: oink:/usr/local/src/samba-3.0.12/source # net join PDC Password: Could not connect to server CORPSRV The username or password was not correct. From a member server, I try:

Hello Samba people, My goal is to upgrade our Samba 2.2.9 PDC to 3.0.6. 2.2.9 was installed from an RPM, but 3.0.6 is compiled from source. No special options except --with-prefix and other location-specific ones. We are using the typical smbpasswd back-end. So I have compiled and installed 3.0.6. I have tweaked the smb.conf to reflect what I believe are the new values for 3.x. The

Hi, I recently did a complete upgrade and reinstall of one of our Samba servers. No problem, I backed up all the data, the Samba configuration files, and the secrets.tdb. Just compiled 3.0.8 on the new server (which has the same hostname), copied the smb.conf to /usr/local/samba/lib and copied th secrets.tdb to /usr/local/samba/private. Started Samba, did 'net getlocalsid' and it

Is this setup possible? I am converting an old server to look on LDAP for its UNIX account info. I am able to auth in every way with a LDAP-only user (login, telnet, ssh, su). However, after adding the user with smbpasswd -a, the password doesn't work: [root@furnsrv log]# smbpasswd -a testuser New SMB password: Retype new SMB password: Added user testuser. [root@furnsrv log]# smbclient

Hi, I'm a tad confused about something. I've got a production instance of Samba running. I am trying to get a test version running on the same box, with the same SID. Without the test server running, I used "net setlocalSID <oldsid>" (the net binary is the one for the new server). Then when I issued 'net getlocalsid' it returned it. I thought I was fine.

When I used smbldap-populate way back when I set up my LDAP server, I got two sambaDomainName objects in my LDAP tree -- one for the domain name (CORP) and one for the PDC Netbios name (CORPSRV). My Windows XP systems complain that they can't find the PDC for the domain CORPSRV. I am wondering if I even need the second sambaDomainName in LDAP at all. Any ideas? Misty

Hi all, I would like two Samba servers to be able to talk to each other via NetBIOS. The problem is that they are on two different subnets. I have enabled broadcast ping on the routers, and the servers can each ping the other subnet with no trouble. The two relevant IPs are 192.168.1.101 and 192.168.2.3. There is a T1 between two Cisco routers, and IP routing is all set up. Currently

Hi all, I have two different domains. At one point I had them trusting eaach other but then I ruined it. Now I am trying to get them back. They both have LDAP backend. I need them bot to trust each other and be trusted by each other. Here are the steps I am following: 1. On each domain, create a computer account called the other domain: CORP: smbldap-useradd -ai FURN$ CORP:

Hi all, I have gotten the 'profiles' command to work for NT and Win2K profiles very well. In Windows XP, I am able to change the 'owner' but not the 'group' SID. It gives no errors but it just doesn't change them. A snippet of the profile in question is below: furnsrv:/data/samba/profiles/jon # profiles NTUSER.DAT |grep S-1-5 Owner SID: S-1-5-32-544 Group

Hello, Can someone tell me how to resolve the "winbindd: Exceeding 200 client connections, no idle connection found" error in my log.winbind? I see tons of them on a regular basis. samba-3.0.28,1 squid-2.6.18 FreeBSD 6.2-STABLE #1: Thu Mar 15 01:46:50 CDT 2007 Kind regards, Elvar

Hi all, I have two systems using Win98 and one using Win95. These three systems do not automatically execute their login scripts. I can map the network drives manually and tell them to reconnect at login, but I am wondering why they don't execute them. I can log in, browse to my netlogon share (if I make it browseable), and execute the script manually, and it works. Well, it mostly

Hi, I've just moved a second Samba domain to LDAP -- it works great! However, the first domain is now dead in the water. It refuses to autenticate, and from the logs it looks like it's not find the SambaDomainName entry in the LDAP tree. Here is a diagram of how my LDAP tree is set up. dc=mycompany,dc=com |___ ou=computers |___ ou=people |___ ou=groups |___ sambaDomain=domain1 |___

Hi all, I've got a share called [ACCOUNTING] with the following share definition: [ACCOUNTING] path = /data/samba/shares/Accounting valid users = @acct @"Domain Admins" browseable = yes public = no read only = no force group = acct Here is the permissions on the directory: oink:/data/samba/shares # ls -ld /data/samba/shares/Accounting drwxrwxr-x 9 root acct 4096 Nov 29 09:30

Not sure if this is where I should ask about this, but if I try to run any of the smbldap-* scripts, I get the following kind of output: oink:/usr/local/sbin # ./smbldap-populate Using builtin directory structure erreur LDAP: Can't contact master ldap server (IO::Socket::INET: Bad protocol 'tcp') at /usr/local/sbin//smbldap_tools.pm line 153. I feel like this must be from a typo

More info from scanning the rest of the debug output: [2005/04/04 09:15:45, 10] lib/util.c:dump_data(1995) [000] EE 05 00 00 03 10 00 00 00 94 00 00 00 03 00 00 ........ ........ [010] 00 7C 00 00 00 00 00 11 00 00 00 00 00 03 00 00 .|...... ........ [020] 00 00 00 00 00 11 4C 51 42 A8 62 00 00 2A 00 2A ......LQ B.b..*.* [030] 00 04 7A E5 76 15 00 00 00 00 00 00 00 15 00 00

Hi all, i have ACLs working fine on my PDC, but they do not work on a member server. Here is a summary of my set-up: I am using LDAP backend, with nss_ldap on all of my member servers. Samba 3.0.12pre1 on the PDC and Samba 3.0.14a on the member server. I have winbindd running on my member server, and it is pointing at LDAP as its backend. ?wbinfo -u and wbinfo -g both work. I am using

In short this is the problem. The XP Home machine called "misty" cannot see any other machines. It cannot see the Linux machines and it cannot see the XP Home machines or the XP Pro machine. In spite of this blindness it can map to all the XP machines and define so-called network places. But "misty" cannot map through the SAMBA protocal used by the Linux machines to make

Hi, I've been struggling with getting subnet browsing to work on my home network for some time and have decided to give it another go. This is my network configuration: Internet ----- Cisco SOHO97 (192.168.1.1) | | | +------------+ | +----------------+ | | | | | (192.168.1.5) (192.168.1.250)