Samba as a PDC

James Kreuziger jkreuzig at massun.peds.mc.uci.edu
Sat Mar 18 03:32:48 GMT 2000


Hello all,

I'm a novice samba user.  I have been testing 
samba as a possible central Windows file server 
for our lab(s).  I have a Sun Ultra 2 running 
Solaris 2.5.1, and Samba 2.0.6.  I downloaded the 
source and it compiled right up, no problems.

I set it up as security = user, encrypted passwords = yes, 
and was able to connect from my W95 box without any 
problems.  I then decided I might try and set it up 
as a PDC.  I have followed the directions in the 
"Using Samba" book, and I do understand the reasoning 
behind becoming a PDC (no reauthentication, client 
recieves a token, cutdown on network traffic).  
So it seems that the domain logon was working, and 
I got to my shares just like before.  

Now I jacked up log level = 4 so I could see what 
was going on.  I'm getting the impression from the 
log.smb that it is reauthenticating every time I 
try and access a share.  This is what I see:

[2000/03/17 19:15:42, 2] lib/access.c:check_access(258)
  Allowed connection from <my client>
[2000/03/17 19:15:42, 3] smbd/password.c:authorise_login(727)
  ACCEPTED: validated uid ok as non-guest
[2000/03/17 19:15:42, 3] smbd/service.c:make_connection(426)
  Connect path is /tmp
[2000/03/17 19:15:42, 3] lib/doscalls.c:dos_ChDir(336)
  dos_ChDir to /tmp
[2000/03/17 19:15:42, 3] smbd/service.c:make_connection(535)
  maspc6 (160.87.33.18) connect to service IPC$ as user <user name>
(uid=19992, gid=270) (pid 27105)

and later

[2000/03/17 19:18:09, 3] param/loadparm.c:lp_add_home(1525)
  adding home directory <user name> at <user home dir>
[2000/03/17 19:18:09, 3] smbd/password.c:setup_groups(197)
  <user name> is in 4 groups: 270, 430, 10, 420
[2000/03/17 19:18:09, 3] smbd/password.c:register_vuid(275)
  uid 19992 registered to name <user name>

Is this what one might expect to see at this log level 
for samba setup as a PDC?  I know I might just be nit picking,
but I have a boss that will ask if I can explain why this 
PDC thing is good.  I guess what I'm really after is what 
I should expect/not expect to see in the log files if 
the PDC is functioning properly.

I'm including a trimmed verion of my smb.conf below.

Sorry to ramble,

-Jim


*************************************************
Jim Kreuziger
Systems Manager
UCI Autism Research Project
jkreuzig at uci.edu
*************************************************

[global]
        workgroup = SIMPLE
        server string = Samba %v on (%L)
        security = user
        domain logons = yes
        encrypt passwords = Yes
        log level = 4
        name resolve order = wins hosts lmhosts bcast
        deadtime = 30
        keepalive = 120
        client code page = 437
        os level = 35
        preferred master = Yes
        domain master = Yes
        wins support = Yes
        guest account = samba
	invalid users = <removed>
        hosts allow = <removed>

[netlogon]
        comment = The domain logon service
        path = /projects/samba/logon
        public = no
        writeable = no
        browseable = no

[test]
        comment = For testing only, please
        path = /projects/samba/test
        read only = No

[users]
        comment = New Users Test
        path = /projects/samba/users
        read only = No

[homes]
        read only = No
        browseable = No



More information about the samba mailing list