[Samba] samba 3 mandrake rpms...where is net tool?

Buchan Milne bgmilne at cae.co.za
Fri Dec 5 21:10:27 GMT 2003


On Fri, 5 Dec 2003, Tim Jordan wrote:

> Hello,
> I have installed the latest samba rpms from your site.  I verified that
> winbind works properly and the getent issue is resolved.

Great!

> After starting the samba server I can browse out against the Windows
> network.  The samba server is a member server of an Active Directory
> domain.
> 
> Problem: windows clients on network can not browse to samba server.  I
> can ping, do dns lookups, and can see the box in network neighborhood
> from a windows client.  The samba server wants credentials to display
> shares.  I have tried root credentials, domain credentials, and local
> unix acct. credentials with no success.  I understand a guest account is
> used in this situation, which I have added to the local unix accounts.
> 
> Can you advise?
> 
> 
> 
> > # Global parameters
> > [global]
> >         workgroup = LABOR
> >         realm = LABOR.AK
> >         server string = Samba Server %v
> >         security = ADS

This line should be ok, but you may want to try without it:

> >         obey pam restrictions = Yes
> >         smb passwd file = /etc/samba/smbpasswd
> >         guest account = guest
> >         log file = /var/log/samba/log.%m
> >         max log size = 50
> >         name resolve order = wins lmhosts bcast
> >         socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
> >         printcap name = cups
> >         os level = 0
> >         preferred master = No
> >         local master = No
> >         domain master = No
> >         dns proxy = No
> >         wins server = 192.168.1.20
> >         idmap uid = 10000-20000
> >         idmap gid = 10000-20000
> >         template shell = /bin/bash

Please try commenting this line out:

> >         winbind use default domain = Yes
> >         printer admin = @Domain Admins
> >         printing = cups
> > 
> > [homes]
> >         comment = Home Directories
> >         read only = No
> >         browseable = yes

THis should not be necessary:
> >         guest ok = yes
> > 
> > [printers]
> >         comment = All Printers
> >         path = /var/spool/samba
> >         create mask = 0700
> >         guest ok = Yes
> >         printable = Yes
> >         print command = lpr-cups -P %p -o raw %s -r   # using client side printer drivers.
> >         browseable = No
> > 
> > [print$]
> >         path = /var/lib/samba/printers
> >         write list = @adm, root
> >         guest ok = Yes
> 
> 

The rest looks ok. Unfortunately I currently don't have a test network, so 
I can't verify working settings. You may want to turn logging up (level 3 
or 4) which should allow you to see what the problem is.

Regards,
Buchan


> 
> 
> 
> 
>  2003-12-02 at 23:21, Buchan Milne wrote:
> 
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA1
> > 
> > Tim Jordan wrote:
> > > Hello,
> > > I took your advice and installed Mandrake 9.2 then pulled down the rpms
> > > from your site.
> > > I have joined our Active Directory Domain with no problem.
> > > Kerberoes is working.
> > > I can use wbinfo3 -g -u to query domain groups and users but I can't
> > > seem to use getent for domain groups and users.
> > >
> > > Do I need to change a pam file to enable this?  I checked everything I
> > > know like verifying the nsswitch.conf is correct, libnss_winbind.so &
> > > libnss_winbind.so.2, is present...
> > >
> > > I have the following in my smb.conf
> > > idmap uid
> > > idmap gid
> > > winbind enum users
> > > winbind enum groups
> > > template homedir
> > > template shell
> > > winbind use default domain
> > >
> > > When viewing my samba server from a windows workstation it wants a
> > > username and password.  I take it this is because I'm missing something???
> > >
> > > Can you advise?
> > 
> > I think this is due to one error, the renaming of libnss_winbind.so and
> > libnss_winbind.so.2 to libnss_winbind3.so and libnss_winbind3.so.2
> > (which should work AFAIK). Others have reported that just linking
> > libnss_winbind.so.2 to libnss_winbin3.so.2, and changing all occurences
> > of winbind3 in /etc/nsswitch.conf to winbind should do the trick.
> > 
> > I have adjusted this in the new packages of 3.0.1pre3:
> > rpm -qlp
> > public_html/mandrake/9.2/samba-3.0.1/samba3-winbind-3.0.1-0.pre3.2mdk.i586.rpm
> > /etc/pam.d/system-auth-winbind
> > /etc/rc.d/init.d/winbind
> > /lib/libnss_winbind.so
> > /lib/libnss_winbind.so.2
> > /lib/security/pam_winbind.so
> > /usr/bin/wbinfo
> > /usr/sbin/winbind
> > /usr/sbin/winbindd
> > /usr/share/man/man1/wbinfo.1.bz2
> > /usr/share/man/man8/winbindd.8.bz2
> > 
> > So, this should not be necessary in future builds for Mandrake 9.2 and
> > older (in Mandrake 10 and on - as is the case in Mandrake cooker
> > already, samba-3.0.x will be called samba, and samba-2.2.x will be
> > called samba2 if we still ship it).
> > 
> > It may be easier just to use these packages (and feedback on them would
> > be good ...)
> > http://ranger.dnsalias.com/mandrake/9.2/samba-3.0.1/
> > 
> > Regards,
> > Buchan
> > 
> > 
> > - --
> > |--------------Another happy Mandrake Club member--------------|
> > Buchan Milne                Mechanical Engineer, Network Manager
> > Cellphone * Work            +27 82 472 2231 * +27 21 8828820x202
> > Stellenbosch Automotive Engineering         http://www.cae.co.za
> > GPG Key                   http://ranger.dnsalias.com/bgmilne.asc
> > 1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7
> > -----BEGIN PGP SIGNATURE-----
> > Version: GnuPG v1.2.3 (GNU/Linux)
> > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> > 
> > iD8DBQE/zZ0QrJK6UGDSBKcRAjwfAJ9I4PcOSp9simLK/oZkn7YwZBOQbACeP896
> > cvwy+qVkabL0ssKRz7beKwU=
> > =y/PH
> > -----END PGP SIGNATURE-----
> > 
> 

-- 
|----------------Registered Linux User #182071-----------------|
Buchan Milne                Mechanical Engineer, Network Manager
Cellphone * Work            +27 82 472 2231 * +27 21 8828820x121
Stellenbosch Automotive Engineering         http://www.cae.co.za
GPG Key                   http://ranger.dnsalias.com/bgmilne.asc
1024D/60D204A7 2919 E232 5610 A038 87B1 72D6 AC92 BA50 60D2 04A7


More information about the samba mailing list