[Samba-it] SAMBA3 e Windows2000 PDC trust

Giovanni Romanenghi giovanni at sorint.it
Mon Oct 20 16:23:01 MDT 2003


Ho aggiunto queste righe nel smb.conf
         #
         # WINBIND
         #
         winbind uid = 10000-20000
         winbind gid = 10000-20000
         winbind use default domain = Yes

ed ho fatto partire anche il demone winbind e il trust sembra funzionare. 
Per lo meno le funzioni che da un trust mi vengono fornite.

CIao Giovanni

At 14.30 20/10/2003, Giovanni Romanenghi wrote:
>Dimenticavo questo è il mio smb.conf
>[global]
>         workgroup = TESTIPLANET
>         netbios name = TEST
>         server string = DOMINIO  TEST
>         interfaces = 10.10.6.158
>         bind interfaces only = yes
>         preferred master = Yes
>         domain master = Yes
>         wins support = Yes
>         wins proxy = yes
>         domain logons = yes
>         local master = yes
>         encrypt passwords = yes
>         security = user
>         socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>         ldap suffix = o=domain,c=it
>         ldap machine suffix = ou=people,o=domain,c=it
>         ldap user suffix = ou=people,o=domain,c=it
>         ldap group suffix = ou=group
>         ldap admin dn = uid=sambauser,cn=config
>         ldap ssl = no
>         passdb backend =  ldapsam:ldap://10.10.5.160/ guest
>         passwd program = "/sambabin/samba/bin/ldapsync.pl -o %u"
>         passwd chat = *New*password* %n\n *Retype*new*password* %n\n 
> *modifying*
>         unix password sync = Yes
>         logon script = %G_%U.bat %G %U
>         log level = 0
>         logon home =
>         logon path =
>         admin users = @helpdesk
>         min password length = 5
>         wide links = no
>
>[netlogon]
>         path = /sambabin/samba/netlogon
>         comment = "Netlogon"
>         read only = yes
>
>[home]
>         comment = Cartelle Personali
>         path = /sambapriv
>         read only = No
>         create mask = 0777
>         directory mask = 0777
>         vfs object = recycle
>         recycle: repository = .recycle
>         recycle: version=True
>         recycle: touch=True
>         recycle: keeptree=True
>         recycle: noversion = *.doc|*.xls|*.ppt
>         recycle: exclude = *.tmp *.temp *.cache
>         recycle: maxsize = 0
>
>
>[gruppo]
>         comment = Cartelle Condivise dal gruppo
>         path = /sambapub
>         read only = No
>         create mask = 0777
>         directory mask = 0777
>         inherit acls = yes
>         vfs object = recycle
>         recycle: repository = .recycle
>         recycle: version=True
>         recycle: touch=True
>         recycle: keeptree=True
>         recycle: noversion = *.doc|*.xls|*.ppt
>         recycle: exclude = *.tmp *.temp *.cache
>         recycle: maxsize = 0
>
>
>At 14.27 20/10/2003, you wrote:
>>Io ho installato samba3 su solaris 8. Io vorrei fare un trust con windows 
>>2000 server (AD) mixed mode con il mio samba bidirezionale. Ho creato 
>>come da manuale l'account e windows 2000 riesce a fare il trust così come 
>>io con il comando net rpc trust establish domain mi da success.
>>
>>Il problema mio è che quando cerco di sfruttare questo trust ricevo nel 
>>log.smbd questo errore:
>>[2003/10/20 14:21:09, 0] 
>>auth/auth_domain.c:connect_to_domain_password_server(115)
>>   connect_to_domain_password_server: unable to setup the NETLOGON 
>> credentials to machine SERVICEDC1. Error was : NT_STATUS_UNSUCCESSFUL.
>>[2003/10/20 14:21:09, 0] auth/auth_domain.c:domain_client_validate(167)
>>   domain_client_validate: Domain password server not available.
>>
>>ed il trust non funziona.
>>Avete qualche idea?
>>Ciao Giovanni
>>
>>_______________________________________________
>>Samba-it mailing list
>>Samba-it at xsec.it
>>http://lists.xsec.it/mailman/listinfo/samba-it





More information about the samba-it mailing list