[Samba] One domain w/ multiple subnets. Do a "join" for each subnet?
fmaior at bigfoot.com
Thu Feb 21 13:50:10 GMT 2002
Darin DeCounter wrote:
> We've got Samba 2.2.2 up and running fine on an RS/6000 (AIX) machine w/ NT
> authentication. We have one domain w/ multiple subnets, and need users on
> these different subnets to have access to the shares on this machine.
> We've tested from a different subnet than the one we originally ran
> smbpasswd on, and it fails (prompting for the passwd to the share...when it
> works fine from the original subnet). I've seen the debug for smbpasswd
> when it's issued and it DOES make reference to the subnet address that we
> run it from.
> So my question is...do we need to run the join (smbpasswd) from a machine
> that's on each different subnet that we want to hit the shares from??? I
> didn't know if this is how it's done since all the subnets are on the same
> domain. Thanks for any suggestions.
> Darin DeCounter
> Atex Assistant System Administrator
> Las Vegas Review-Journal
> ddecounter at lvrj.com
It should not be happening if you have one ethernet card for each subnet
on your RS6k. I assume you are configured as a RS6k with one eth card,
conected to routers/gateways like Cisco that routes packets between the
If that is the case, you may not have the routers/gateways configured to
pass netbeui/netbios thru. I believe the problem is that, because the
protocols used for authentication on Win world are not routeable. Try
sniffing packets with one sniffer at the subnet where the workstation is
and another at the RS6k. Probably the packets are being sent by the
workstation, but the router/gateway is blocking then and they are never
getting to the server.
For cisco routers, you must have an internal command ran in order to
permit passing those packets. I do not know about other routers.
May be there is a number of parameters that you can try on the smb.conf
in order to set communication between the subnets. They are the "remote
announce" and "remote browse sync". I believe the key is to know for
sure wich machine is the Workgroup master browser on the subnet where
your RS6k is not, and remote announce and synchronize should point from
the Samba/RS6k to the master browser on the other subnet.
If you have a Linux there, you can set it up to be the master browser.
If there is an NW Server or Workstation there, I believe you can try to
hack some registry entries to make sure THAT machine will be the master
Infokeep Informatica Ltda
fmaior at bigfoot.com
More information about the samba