[Samba] can't join a 2000 domain

[Thomas Klettke]

To rule out any blocks from ipchains (or iptables for the newer versions of
RedHat) run "service ipchains stop" ("service iptables stop") before you try
to connect with samba. If you can connect then, review your firewall
settings before restarting your firewall.

Thomas Klettke
thomask at aesbus.com
Network Administrator
Aesbus Knowledge Solutions
Houston, TX 77069

"The instructions said to use Windows 98 or better, so I installed RedHat."


-----Original Message-----
From: samba-admin at lists.samba.org [mailto:samba-admin at lists.samba.org]On
Behalf Of Maurice GL
Sent: Tuesday, April 09, 2002 11:31 AM
To: MBlanchard at grandaire.com
Cc: samba at lists.samba.org
Subject: RE: [Samba] can't join a 2000 domain


Thanks for your suggestion Michael, but that did not work for me. I also
found out that the command:

smbclient -L MYSERVER

returns:

Error connecting to IP_OF_MYSERVER
Connection to MYSERVER failed

So I am back to square 0.

MGL


>From: "Blanchard, Michael" <MBlanchard at grandaire.com>
>To: <samba at lists.samba.org>
>Subject: RE: [Samba] can't join a 2000 domain
>Date: Tue, 9 Apr 2002 11:52:48 -0400
>
>Oopsie, forgot to sent it to the list :)
>
>Don't know about ipchains, but "smbpasswd -j -r MYSERVER -U
>DOMAINADMINACCOUNT worked for me.
>
>-----Original Message-----
>From: Maurice GL [mailto:looking4urlp at hotmail.com]
>Sent: Tuesday, April 09, 2002 11:47 AM
>To: samba at lists.samba.org
>Subject: [Samba] can't join a 2000 domain
>
>
>Hello everyone,
>
>I configured and installed samba 2.2.3a on my Red Hat 7.2 server, and I
>want
>the server to join a domain for authentication. I have already done that
>
>using RH 6.2 and samba 2.2.2 but now I am experiencing some
>difficulties.
>
>My smb.conf file says:
>
>[global]
>         workgroup = MYDOMAIN
>         netbios name = AMAROK
>         server string = Samba Server on AMAROK
>         interfaces = eth0
>         security = DOMAIN
>         encrypt passwords = Yes
>         password server = MYSERVER
>
>When I use the command:
>
>smbpasswd -j MyDomain
>
>I get the following answer:
>
>fetch_domain_sid: unable to connect to SMB server on machine MyServer.
>Error
>was : SUCCESS - 0.
>Failed to get domain SID. Unable to join domain MYDOMAIN.
>
>I am unsure about the meaning of the error message: It says Error was:
>SUCCESS. Which I find a  bit deceiving!
>
>I can connect to my shares from my win machine because I created an
>entry
>for myself in the smbpasswd file, giving the same password I use to
>authenticate to the W2K domain, but authentication is done at the samba
>server level, I want authentication from the domain controller.
>
>Another bit of information: When I installed my RH server, I selected
>medium
>security and that installed some ipchains rules that blocked off access
>to
>swat. I had to rework the rules to allow me to connect to swat. Maybe
>there
>are some other rules that prevent access to ports 137 to 139 that I have
>not
>spotted yet.





_________________________________________________________________
Chat with friends online, try MSN Messenger: http://messenger.msn.com


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba