integrate Exchange 5.5 w/ SAMBA PDC
Henry Liao
hliao at calstatela.edu
Tue Feb 9 19:55:40 GMT 1999
Chad,
Thank you for the 5-minute info on your web site. I tried it
with 2.0.2 but still no dice. Here is a script of my test run. I am
getting an ERRSRV error and my NT server (has Exchange 5.5) doesn't
see it on the Network Neighborhood or map any network drive from SAMBA
PDC.
tree connect failed: ERRSRV - ERRbadpw (Bad password - name/password pair in a Tree Connect or Session Setup are invalid.)
My ultimate goal is to integrate MS Exchange 5.5 w/ a SAMBA
PDC, so exchange server will use SAMBA PDC for authentication. I have
tried the HEAD branch from the CVS source or SAMBA 2.0x w/ no luck.
I must be doing something wrong and/or the capability is not there
yet. Has any brave soul tried this yet?? TIA
-Henry Liao o
Network Systems Group )> Henry.Liao at calstatela.edu
Cal State Univ, Los Angeles ___./]___ http://www.calstatela.edu/staff/hliao
-----test run script on a Solaris 2.7 running SAMBA 2.0.2-----
Script started on Tue Feb 09 11:32:45 1999
edgemail:root> /bin/csh
edgemail#(/ )>cd samba/bin
/usr/local/samba/bin
edgemail#(/usr/local/samba/bin )>testparm
Load smb config files from /usr/local/samba/lib/smb.conf
Processing section "[homes]"
Processing section "[netlogon]"
Processing section "[Profiles]"
Processing section "[printers]"
Processing section "[public]"
Loaded services file OK.
Press enter to see a dump of your service definitions
# Global parameters
workgroup = NIS
netbios name = EDGEMAIL
netbios aliases =
server string = EDGEMAIL SAMBA Server
interfaces = 130.182.118.3/24
bind interfaces only = No
security = USER
encrypt passwords = Yes
update encrypted = No
use rhosts = No
map to guest = Never
null passwords = No
password server =
smb passwd file = /usr/local/samba/private/smbpasswd
hosts equiv =
root directory = /
passwd program = /bin/passwd
passwd chat = *old*password* %o\n *new*password* %n\n *new*password* %n\n *changed*
passwd chat debug = No
username map =
password level = 0
username level = 0
unix password sync = No
log level = 2
syslog = 1
syslog only = No
log file = /usr/local/samba/var/log.%m
max log size = 100
timestamp logs = Yes
protocol = NT1
read bmpx = Yes
read raw = Yes
write raw = Yes
nt smb support = Yes
nt pipe support = Yes
announce version = 4.2
announce as = NT
max mux = 50
max xmit = 65535
name resolve order = lmhosts host wins bcast
max packet = 65535
max ttl = 259200
max wins ttl = 518400
min wins ttl = 21600
time server = No
change notify timeout = 60
deadtime = 0
getwd cache = Yes
keepalive = 300
lpq cache time = 10
max disk size = 0
max open files = 10000
read prediction = No
read size = 16384
shared mem size = 1048576
socket options = TCP_NODELAY
stat cache size = 50
load printers = Yes
printcap name = lpstat
printer driver file = /usr/local/samba/lib/printers.def
strip dot = No
character set =
mangled stack = 50
coding system =
client code page = 850
stat cache = Yes
domain groups =
domain admin group =
domain guest group =
domain admin users =
domain guest users =
machine password timeout = 604800
add user script =
delete user script =
logon script = %U.bat
logon path = \\%N\%U\profiles
logon drive =
logon home = \\%N\%U
domain logons = Yes
os level = 0
lm announce = Auto
lm interval = 60
preferred master = Yes
local master = Yes
domain master = Yes
browse list = Yes
dns proxy = Yes
wins proxy = No
wins server =
wins support = Yes
kernel oplocks = Yes
ole locking compatibility = Yes
smbrun = /usr/local/samba/bin/smbrun
config file =
preload =
lock dir = /usr/local/samba/var/locks
default service =
message command =
dfree command =
valid chars =
remote announce = 130.182.118.255 130.182.7.255
remote browse sync = 130.182.118.255 130.182.118.21 130.182.118.8 130.182.7.2
socket address = 0.0.0.0
homedir map =
time offset = 0
unix realname = No
NIS homedir = No
panic action =
comment =
path =
alternate permissions = No
revalidate = No
username =
guest account = nobody
invalid users =
valid users =
admin users = hliao
read list =
write list =
force user =
force group =
read only = Yes
create mask = 0744
force create mode = 00
directory mask = 0755
force directory mode = 00
guest only = No
guest ok = No
only user = No
hosts allow = 130.182.118. 130.182.7. 127.
hosts deny =
status = Yes
max connections = 0
min print space = 0
strict sync = No
sync always = No
print ok = No
postscript = No
printing = sysv
print command = lp -c -d%p %s; rm %s
lpq command = lpstat -o%p
lprm command = cancel %p-%j
lppause command = lp -i %p-%j -H hold
lpresume command = lp -i %p-%j -H resume
queuepause command = lpc stop %p
queueresume command = lpc start %p
printer name =
printer driver = NULL
printer driver location =
default case = lower
case sensitive = No
preserve case = Yes
short preserve case = Yes
mangle case = No
mangling char = ~
hide dot files = Yes
delete veto files = No
veto files =
hide files =
veto oplock files =
map system = No
map hidden = No
map archive = Yes
mangled names = Yes
mangled map =
browseable = Yes
blocking locks = Yes
fake oplocks = No
locking = Yes
oplocks = Yes
strict locking = No
share modes = Yes
copy =
include =
exec =
postexec =
root preexec =
root postexec =
available = Yes
volume =
fstype = NTFS
set directory = No
wide links = Yes
follow symlinks = Yes
dont descend =
magic script =
magic output =
delete readonly = No
dos filetimes = No
dos filetime resolution = No
fake directory create times = No
[homes]
comment = Home Directories
read only = No
create mask = 0755
browseable = No
[netlogon]
comment = Network Logon Service
path = /usr/local/samba/lib/netlogon
guest ok = Yes
share modes = No
[Profiles]
comment = Windows User Profiles
path = /home/%U/profiles
read only = No
guest ok = Yes
browseable = No
[printers]
comment = All Printers
path = /usr/spool/samba
print ok = Yes
browseable = No
[public]
path = /a/public
read only = No
guest ok = Yes
edgemail#(/usr/local/samba/bin )>cd ../lib
edgemail#(/usr/local/samba/lib )>cat smb.conf
# This is the main Samba configuration file. You should read the
# smb.conf(5) manual page in order to understand the options listed
# here. Samba has a huge number of configurable options (perhaps too
# many!) most of which are not shown in this example
#
# Any line which starts with a ; (semi-colon) or a # (hash)
# is a comment and is ignored. In this example we will use a #
# for commentry and a ; for parts of the config file that you
# may wish to enable
#
# NOTE: Whenever you modify this file you should run the command "testparm"
# to check that you have not many any basic syntactic errors.
#
#======================= Global Settings =====================================
[global]
# workgroup = NT-Domain-Name or Workgroup-Name, eg: REDHAT4
netbios name = EDGEMAIL
workgroup = NIS
# server string is the equivalent of the NT Description field
server string = EDGEMAIL SAMBA Server
# This option is important for security. It allows you to restrict
# connections to machines which are on your local network. The
# following example restricts access to two C class networks and
# the "loopback" interface. For more examples of the syntax see
# the smb.conf man page
; hosts allow = 192.168.1. 192.168.2. 127.
hosts allow = 130.182.118. 130.182.7. 127.
; hosts equiv = /usr/local/samba/lib/hosts.equiv
# If you want to automatically load your printer list rather
# than setting them up individually then you'll need this
; load printers = yes
# you may wish to override the location of the printcap file
; printcap name = /etc/printcap
# on SystemV system setting printcap name to lpstat should allow
# you to automatically obtain a printer list from the SystemV spool
# system
; printcap name = lpstat
# It should not be necessary to specify the print system type unless
# it is non-standard. Currently supported print systems include:
# bsd, sysv, plp, lprng, aix, hpux, qnx
; printing = bsd
# Uncomment this if you want a guest account, you must add this to /etc/passwd
# otherwise the user "nobody" is used
; guest account = pcguest
guest account = nobody
# this tells Samba to use a separate log file for each machine
# that connects
log file = /usr/local/samba/var/log.%m
# Put a capping on the size of the log files (in Kb).
max log size = 100
# Security mode. Most people will want user level security. See
# security_level.txt for details.
security = user
# Use password server option only with security = server
; password server = <NT-Server-Name>
# You may wish to use password encryption. Please read
# ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
# Do not enable this option unless you have read those documents
encrypt passwords = yes
# Using the following line enables you to customise your configuration
# on a per machine basis. The %m gets replaced with the netbios name
# of the machine that is connecting
; include = /usr/local/samba/lib/smb.conf.%m
# Most people will find that this option gives better performance.
# See speed.txt and the manual pages for details
socket options = TCP_NODELAY
# Configure Samba to use multiple interfaces
# If you have multiple network interfaces then you must list them
# here. See the man page for details.
; interfaces = 192.168.12.2/24 192.168.13.2/24
interfaces = 130.182.118.3/24
# Configure remote browse list synchronisation here
# request announcement to, or browse list sync from:
# a specific host or from / to a whole subnet (see below)
; remote browse sync = 192.168.3.25 192.168.5.255
; remote browse sync = 130.182.118.255 130.182.118.21 130.182.118.8
remote browse sync = 130.182.118.255 130.182.118.21 130.182.118.8 130.182.7.2
# Cause this host to announce itself to local subnets here
; remote announce = 192.168.1.255 192.168.2.44
; remote announce = 130.182.118.255 130.182.117.255 130.182.113.255 130.182.7.255
remote announce = 130.182.118.255 130.182.7.255
# Browser Control Options:
# set local master to no if you don't want Samba to become a master
# browser on your network. Otherwise the normal election rules apply
; local master = no
local master = yes
# OS Level determines the precedence of this server in master browser
# elections. The default value should be reasonable
; os level = 33
; os level = 2
; log level = 2
# Domain Master specifies Samba to be the Domain Master Browser. This
# allows Samba to collate browse lists between subnets. Don't use this
# if you already have a Windows NT domain controller doing this job
domain master = yes
# Preferred Master causes Samba to force a local browser election on startup
# and gives it a slightly higher chance of winning the election
; preferred master = yes
preferred master = yes
# Use only if you have an NT server on your network that has been
# configured at install time to be a primary domain controller.
; domain controller = <NT-Domain-Controller-SMBName>
# Enable this if you want Samba to be a domain logon server for
# Windows95 workstations.
domain logons = yes
; domain sid=S-1-5-21-123-456-789
# if you enable domain logons then you may want a per-machine or
# per user logon script
# run a specific logon batch file per workstation (machine)
; logon script = %m.bat
# run a specific logon batch file per username
; logon script = %U.bat
# Where to store roving profiles (only for Win95 and WinNT)
# %L substitutes for this servers netbios name, %U is username
# You must uncomment the [Profiles] share below
; logon path = \\%L\Profiles\%U
logon home = \\%N\%U
logon path = \\%N\%U\profiles
logon script = %U.bat
# Windows Internet Name Serving Support Section:
# WINS Support - Tells the NMBD component of Samba to enable it's WINS Server
wins support = yes
# WINS Server - Tells the NMBD components of Samba to be a WINS Client
# Note: Samba can be either a WINS Server, or a WINS Client, but NOT both
; wins server = w.x.y.z
# WINS Proxy - Tells Samba to answer name resolution queries on
# behalf of a non WINS capable client, for this to work there must be
# at least one WINS Server on the network. The default is NO.
; wins proxy = yes
# DNS Proxy - tells Samba whether or not to try to resolve NetBIOS names
# via DNS nslookups. The built-in default for versions 1.9.17 is yes,
# this has been changed in version 1.9.18 to no.
; domain admin users = hliao,sysop,eyeh
; domain guest users = nobody
admin users = hliao
#============================ Share Definitions ==============================
[homes]
comment = Home Directories
browseable = no
read only = no
create mode = 0755
guest ok = no
writable = yes
# Un-comment the following and create the netlogon directory for Domain Logons
[netlogon]
comment = Network Logon Service
path = /usr/local/samba/lib/netlogon
guest ok = yes
writable = no
share modes = no
# Un-comment the following to provide a specific roving profile share
# the default is to use the user's home directory
[Profiles]
comment = Windows User Profiles
path = /home/%U/profiles
browseable = no
guest ok = yes
writeable = yes
# NOTE: If you have a BSD-style print system there is no need to
# specifically define each individual printer
[printers]
comment = All Printers
path = /usr/spool/samba
browseable = no
# Set public = yes to allow user 'guest account' to print
guest ok = no
writable = no
printable = yes
# This one is useful for people to share files
;[tmp]
; comment = Temporary file space
; path = /tmp
; read only = no
; public = yes
# A publicly accessible directory, but read only, except for people in
# the "staff" group
;[public]
; comment = Public Stuff
; path = /home/samba
; public = yes
; writable = yes
; printable = no
; write list = @staff
# Other examples.
#
# A private printer, usable only by fred. Spool data will be placed in fred's
# home directory. Note that fred must have write access to the spool directory,
# wherever it is.
;[fredsprn]
; comment = Fred's Printer
; valid users = fred
; path = /homes/fred
; printer = freds_printer
; public = no
; writable = no
; printable = yes
# A private directory, usable only by fred. Note that fred requires write
# access to the directory.
;[fredsdir]
; comment = Fred's Service
; path = /usr/somewhere/private
; valid users = fred
; public = no
; writable = yes
; printable = no
# a service which has a different directory for each machine that connects
# this allows you to tailor configurations to incoming machines. You could
# also use the %U option to tailor it by user name.
# The %m gets replaced with the machine name that is connecting.
;[pchome]
; comment = PC Directories
; path = /usr/pc/%m
; public = no
; writable = yes
# A publicly accessible directory, read/write to all users. Note that all files
# created in the directory by users will be owned by the default user, so
# any user with access can delete any other user's files. Obviously this
# directory must be writable by the default user. Another user could of course
# be specified, in which case all files would be owned by that user instead.
;[public]
; path = /usr/somewhere/else/public
; public = yes
; only guest = yes
; writable = yes
; printable = no
# The following two entries demonstrate how to share a directory so that two
# users can place files there that will be owned by the specific users. In this
# setup, the directory should be writable by both users and should have the
# sticky bit set on it to prevent abuse. Obviously this could be extended to
# as many users as required.
;[myshare]
; comment = Mary's and Fred's stuff
; path = /usr/somewhere/shared
; valid users = mary fred
; public = no
; writable = yes
; printable = no
; create mask = 0765
[public]
path = /a/public
public = yes
; only guest = yes
writable = yes
printable = no
browseable = yes
edgemail#(/usr/local/samba/lib )>cd ../private
edgemail#(/usr/local/samba/private )>cat smbpasswd
EXCHANGE$:61001:D307B2351E87800017306D272A9441BB:B01939617C167DFBE37D3A22D9BF8861:[W ]:LCT-36C078F2:
ASSET$:61003:4D7E4C604112C960AAD3B435B51404EE:6510A46013FF324E735C64228EC5B059:[W ]:LCT-36C078F2:
CIRCUS$:61005:2E85509B18961412AAD3B435B51404EE:919A7D00C9570CCF878DD5E08B0157D9:[W ]:LCT-36C078F2:
PLUTO$:61006:D2C66974B9C3D9F4AAD3B435B51404EE:8DDD5EE55C7D5BFD6DAC4C04421B8C1F:[W ]:LCT-36C078F2:
CLOWN$:61002:2A1EE97E6A4F8BFAAAD3B435B51404EE:AD0CEBEC10C29E2A596F502C5E4D1227:[W ]:LCT-36C078F2:
EDGEMAIL$:61007:27C4242F916F1866F500944B53168930:CE10AE705601AD969ACFDE33DA69E677:[W ]:LCT-36C078F2:
NIS$:61008:0B60F97DB227B081AAD3B435B51404EE:1F55C8D149A357B39A55E66287C2B7A6:[W ]:LCT-36C078F2:
NIS2$:61009:2186D2A00FB182C4AAD3B435B51404EE:F10C913D435C60D0AE4B157FB1BE67AD:[W ]:LCT-36C078F2:
hliao:99:0D43A9552C1361DD9C5014AE4718A7EE:BFDD15F02CACB392283F05152DF52D30:[U ]:LCT-36C078F7:
eyeh:51111:E1479D95ADEB99E517306D272A9441BB:7988F188B70CC265D8705757C0E21256:[U ]:LCT-36C078FA:
seng:10122:3C92959E453B56DB17306D272A9441BB:9F5481507F64642CBD05A8A9C1F5A32E:[U ]:LCT-36C078FF:
edgemail#(/usr/local/samba/private )>egrep -i exchange /etc/passwd /etc/shadow
/etc/passwd:EXCHANGE$:x:61001:60001:exchange:/dev/null:/bin/false
/etc/shadow:EXCHANGE$:NP:6445::::::
edgemail#(/usr/local/samba/private )>sed '/EXCHANGE/d' smbpasswd > 1
edgemail#(/usr/local/samba/private )>mv 1 smbpasswd
edgemail#(/usr/local/samba/private )>cat smbpasswd
ASSET$:61003:4D7E4C604112C960AAD3B435B51404EE:6510A46013FF324E735C64228EC5B059:[W ]:LCT-36C078F2:
CIRCUS$:61005:2E85509B18961412AAD3B435B51404EE:919A7D00C9570CCF878DD5E08B0157D9:[W ]:LCT-36C078F2:
PLUTO$:61006:D2C66974B9C3D9F4AAD3B435B51404EE:8DDD5EE55C7D5BFD6DAC4C04421B8C1F:[W ]:LCT-36C078F2:
CLOWN$:61002:2A1EE97E6A4F8BFAAAD3B435B51404EE:AD0CEBEC10C29E2A596F502C5E4D1227:[W ]:LCT-36C078F2:
EDGEMAIL$:61007:27C4242F916F1866F500944B53168930:CE10AE705601AD969ACFDE33DA69E677:[W ]:LCT-36C078F2:
NIS$:61008:0B60F97DB227B081AAD3B435B51404EE:1F55C8D149A357B39A55E66287C2B7A6:[W ]:LCT-36C078F2:
NIS2$:61009:2186D2A00FB182C4AAD3B435B51404EE:F10C913D435C60D0AE4B157FB1BE67AD:[W ]:LCT-36C078F2:
hliao:99:0D43A9552C1361DD9C5014AE4718A7EE:BFDD15F02CACB392283F05152DF52D30:[U ]:LCT-36C078F7:
eyeh:51111:E1479D95ADEB99E517306D272A9441BB:7988F188B70CC265D8705757C0E21256:[U ]:LCT-36C078FA:
seng:10122:3C92959E453B56DB17306D272A9441BB:9F5481507F64642CBD05A8A9C1F5A32E:[U ]:LCT-36C078FF:
edgemail#(/usr/local/samba/private )>egrep -i exchange /etc/passwd /etc/shadow
/etc/passwd:EXCHANGE$:x:61001:60001:exchange:/dev/null:/bin/false
/etc/shadow:EXCHANGE$:NP:6445::::::
edgemail#(/usr/local/samba/private )>smbpasswd -a -m EXCHANGE
Added user EXCHANGE$.
Password changed for user EXCHANGE$
edgemail#(/usr/local/samba/private )>!cat
cat smbpasswd
ASSET$:61003:4D7E4C604112C960AAD3B435B51404EE:6510A46013FF324E735C64228EC5B059:[W ]:LCT-36C078F2:
CIRCUS$:61005:2E85509B18961412AAD3B435B51404EE:919A7D00C9570CCF878DD5E08B0157D9:[W ]:LCT-36C078F2:
PLUTO$:61006:D2C66974B9C3D9F4AAD3B435B51404EE:8DDD5EE55C7D5BFD6DAC4C04421B8C1F:[W ]:LCT-36C078F2:
CLOWN$:61002:2A1EE97E6A4F8BFAAAD3B435B51404EE:AD0CEBEC10C29E2A596F502C5E4D1227:[W ]:LCT-36C078F2:
EDGEMAIL$:61007:27C4242F916F1866F500944B53168930:CE10AE705601AD969ACFDE33DA69E677:[W ]:LCT-36C078F2:
NIS$:61008:0B60F97DB227B081AAD3B435B51404EE:1F55C8D149A357B39A55E66287C2B7A6:[W ]:LCT-36C078F2:
NIS2$:61009:2186D2A00FB182C4AAD3B435B51404EE:F10C913D435C60D0AE4B157FB1BE67AD:[W ]:LCT-36C078F2:
hliao:99:0D43A9552C1361DD9C5014AE4718A7EE:BFDD15F02CACB392283F05152DF52D30:[U ]:LCT-36C078F7:
eyeh:51111:E1479D95ADEB99E517306D272A9441BB:7988F188B70CC265D8705757C0E21256:[U ]:LCT-36C078FA:
seng:10122:3C92959E453B56DB17306D272A9441BB:9F5481507F64642CBD05A8A9C1F5A32E:[U ]:LCT-36C078FF:
EXCHANGE$:61001:D307B2351E87800017306D272A9441BB:B01939617C167DFBE37D3A22D9BF8861:[W ]:LCT-36C08DDB:
edgemail#(/usr/local/samba/private )>/etc/init.d/sambaserver stop
Stopping Samba SMB server.
edgemail#(/usr/local/samba/private )>/etc/init.d/samba.server start
Starting Samba SMB server.
#
# press <enter> on the password prompt, and gives me error
#
edgemail#(/usr/local/samba/private )>smbclient -L edgemail
Added interface ip=130.182.118.3 bcast=130.182.118.255 nmask=255.255.255.0
Password:
tree connect failed: ERRSRV - ERRbadpw (Bad password - name/password pair in a Tree Connect or Session Setup are invalid.)
#
# enter passwd for eyeh, and it gives me output
#
edgemail#(/usr/local/samba/private )>smbclient -L edgemail -U eyeh
Added interface ip=130.182.118.3 bcast=130.182.118.255 nmask=255.255.255.0
Password:
Sharename Type Comment
--------- ---- -------
HOME Disk home
IPC$ IPC Remote IPC
Server Comment
--------- -------
EDGEMAIL NB server on edgemail
Workgroup Master
--------- -------
ATS LIANG
CSLA-NIS CIRCUS
NIS2 EXCHANGE
REALAV STREAMER
WORKGROUP DU2
#
# enter passwd for eyeh, and it gives me output, again
#
edgemail#(/usr/local/samba/private )>smbclient -L edgemail -U eyeh
Added interface ip=130.182.118.3 bcast=130.182.118.255 nmask=255.255.255.0
Password:
Sharename Type Comment
--------- ---- -------
HOME Disk home
IPC$ IPC Remote IPC
Server Comment
--------- -------
EDGEMAIL EDGEMAIL SAMBA Server
Workgroup Master
--------- -------
ATS LIANG
CSLA-NIS CIRCUS
NIS EDGEMAIL
NIS2 EXCHANGE
REALAV STREAMER
WORKGROUP DU2
edgemail#(/usr/local/samba/bin )>.
edgemail#(/usr/local/samba/bin )>edgemail:root> ^D
script done on Tue Feb 09 11:36:23 1999
More information about the samba-ntdom
mailing list