similar to: Basic questions regarding Samba capabilities

Andrew Barlett wrote: > > Domain trusts (in terms of us being a PDC trusting other DCs) are > currenetly a work in progress. We hope to have it finished for Samba > 3.0. > > However, why do you need domain trusts? (There are lots of > good answers > to this question, but make sure you do have one of the answers). > > Samba 2.2 has always supported being a member

We're about to start migrating from Windows NT 4.0 to a Samba controlled setup. I've got a question about the functionality of the Samba PDCs and BDCs. In my Windows setup I have three domains that are defined by geographic locations. Each of these domains "trusts" the other. In Samba 2.2.7, I can't have the trusts, so I'm looking at creating one giant domain that

hi, until now (about 1 year ago) i was working only with samba3+ldap PDC, but in near future my company enlarge his network with 6 new branchs spreaded all oever the country and i must build a scalable network with Samba-3 PDCs and BDCs, implement LDAP replication and multiple LDAP backends, all this over some VPNs(ipsec) . so, can tell me anyone how work the relationship beetwen a samba3-ldap

People, I have one PDC and a BDC on the matrix side and two BDCs on the branch office. I don't know if it is a problem. Anybody could help me? PDC # net rpc testjoin get_schannel_session_key: could not fetch trust account password for domain 'DOMAIN_NAME' net_rpc_join_ok: failed to get schannel session key from server PDC for domain DOMAIN_NAME. Error was

hi, it's me again =) i'm using openldap v2.2 and samba v3(.0.4) i wonder, if i don't use winbind, do i really need the parameter "idmap backend = " in smb.conf on PDCs/BDCs ??? those machines find their SID/UID/GID via "passdb backend =" don't they? thx -- "Matrix - more than a vision"

Hi: Can anybody point me to some guidelines about SMB network design or give some advice? Samba HOWTOs are very detailed recipes, but I need some general tips, like if we are serving fish or pasta tonight :-) This is the situation: a WAN with 20 offices with 2 to 30 people in each, plus a headquarter with 50 people, plus the databases and central file servers. The organization grew up on a NT4

Hi there, I would like to know how Samba / Windows determines which domain controller should handle a logon request, and whether there is a way I can affect the process. Here's the situation: I have a school installation running a Samba domain, with a PDC (1.1GHz Celeron, 256 MB RAM) and one BDC (much smaller, 366 with 64 MB RAM), both with RedHat 7.1 and Samba 2.2.5. There are about 80

Hey gang, I've managed to get samba servers working as PDCs/BDCs with LDAP backend for replication. Working fine. Here's my problems: 1) A new machine will not join the domain on the first attempt. Apparently samba creates the machine account but can't authenticate it. I have attempt to join a second time for it to authenticate and succeed. This isn't that big of a deal,

Dear Help, We are currently running Samba 3.0.22 on a distributed network/domain as a PDC (primary domain controller) and several as BDCs (Backup domain controllers) in our branch offices located around the country. At this point, the PDC is set up in our corporate office (where I'm located) and users have no trouble authenticating (via logging into windows and accessing shares) and also

Hola folks, After a few years of slowly phasing in various Linux and BSD platforms, the company I work for is willing to take a hard look at replacing its existing Windows NT domain controllers with a Linux/Samba combination. We only have about sixty people in our main office, but most of my experience is with smaller deployments. I'm not looking for step-by-step instructions, that's

Hi List(s) I'm in the process of configuring a new PDC using Samba 2.2.5. At the present time we have 9 other Samba PDCs in nonconnected sites. In the next few months, these sites will become part of a WAN and we're looking to migrate authentication for these servers to a single box, for obvious administration benefits. The client base is primarily Win2k, SP2 & SP3. Now I'm

Hello I makeing a Domain Controller with Samba (v3.0.33) and LDAP (v2.4). I will install a PDC in the headquarter and a BDC in the subsidiary of the company that I work. The PDC and the BDC will have his own LDAP data base. I just install the PDC without problems and my next step is to install the BDC. I configured the LDAP that work in multi master mode. I made some test and the LDAP works

I've got a somewhat special domain (servers only, no clients, for unified passwords stored in ldap and unix passwords are in there too), and I'm looking at my directory and there are a few things I don't quite understand, or that I need some clarification on.. 1) these "Domain Admins" and "Domain Guests" and "Domain Computers" groups.. do they NEED

Hi there, I have a really ugly problem, which, as I know is partially selfmade. But to the problem: I have five servers running samba-2.2.3a-12 (latest Debian Woody release) which are controlled by one master server. All of the five servers act as pdc for an own nt-domain. Now to keep the administrative work as low as possible I have this one master server. Via this server we/our customer

Hello I have a network setup with one Samba PDC and two Samba BDCs separated by routers (ref http://www.cybersource.com.au/users/mikef/samba/). In this test environment the Samba servers all use the master OpenLDAP server on the PDC, but the production system will have OpenLDAP servers (using master-slave replication) on all Samba servers. I can't get the Windows XP client to change a

Consider the following scenario: - a single OpenLDAP server, with a single instance of the object class sambaDomain and a single SID: dn: sambaDomainName=myserver,ou=samba,dc=example,dc=com objectClass: sambaDomain sambaDomainName: MYGROUP sambaSID: S-1-2-3 - multiple Samba servers, each with the following configuration: security = user workgroup = MYGROUP Is this a valid

Steven Langasek wrote: > Having one PDC and two BDCs also gives you greater > fault-tolerance than > having three domains with a single PDC each. > > Samba+LDAP can give you this fault tolerance; it can't give you trust > relationships today, without a lot of finagling. > > Steve Langasek > postmodern programmer > Steve: I understand the role of/need for the

Hi All! Thanks to all of you that responded to my previous posts. I've gotten a lot more info now than I used to have! But I still have questions. The biggest right now is: Is there a way build up a Samba PDC as a direct replacement for an existing Windows NT 4.0 PDC? All the material I've found to date is written from a standpoint of creating a new domain as you create the Samba

I have a problem with machine trust accounts breaking in a purely Samba controlled domain. I have one master Samba server acting as a PDC, and three slave servers in different networks. The UNIX user account information is updated by means of NIS, and smbpasswd gets rsync'ed to the slave servers whenever there is a change in the file. All this works without problems at all times. When I

Hello, At my school, the Domain logons are handled for all students through a collection of Domain Controllers. Our WebTeam maintains a Linux server, and in the past has had it set up as a Samba PDC through which they can log in and access their files on the webserver through shares. The webteam no longer uses Windows 98 computers, and has moved to XP computers. The problem here is that XP joins a