[Samba] Problems with Samba and W2K

[John H Terpstra]

On Tue, 7 Jul 2003, Keith Williams wrote:

> Dear Group,
> I have been working very hard for the last 3 days trying to get my W2K
> To join a Samba Domain. I have tried it seems like everything to do it
> and it won't go. I really think its something simple but I don't know
> how to fix it.
> The error I get is this one from W2k when trying to join the samba
> domain.
> ""The Following error occurred to join the domain smis".
> The account used is a computer account. Use your global user account or
> local user account to access this server."

You have specified that your want Samba to be a domain member. This means
that you mus have a Windows NT4 type domain controller already. In this
case Samba is not correctly configured since the domain logons will
conflict with the existing domain controller. "security = domain" means
the samba should join a domain controlled by another domain controller.

If it is your intent that Samba should BE the domain controller then you
must specify "security = user" and not "security = domain".

I suspect that you want samba to be the PDC. So set "security = domain"
and this should work much better.

- John T.

>
> Here is a copy of my SMB.CONF file for your review.
>
> [global]
> workgroup = SMIS
> netbios name = Linux_Server
> server string = Linux Server %v
>
> security = DOMAIN
> encrypt passwords = yes
> browsable = yes
> local master = yes
> domain master = yes
> os level = 99
> preferred master = yes
> domain logons = yes
> domain admin group = @ntadmins hosts allow = 192.168.1.100/24 127.0.0.1
> socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>
> log file = /var/log/samba/%m.log
> max log size = 0
>
> printcap = /etc/printcap
> load printers = yes
> printing = lprng
> use client driver = yes
>
> #========================= Share Definitions ========================
> [printers]
> comment = All Printers
> path = /var/spool/samba
> browsable = yes
> public = yes
> writable = no
> printable = yes
>
> [public]
> comment = A public share for vendor docs, etc.
> path = /usr/public
> public = yes
> create mask = 0755
> force directory mode = 0755
> writable = yes
>
> [temp]
> comment = A place to drop off temporary files
> path = /tmp
> public = yes
> create mask = 0755
> force directory mode = 0755
> writable = yes[global]
> workgroup = SMIS
> netbios name = Linux_Server
> server string = Linux Server %v
>
> security = DOMAIN
> encrypt passwords = yes
> browsable = yes
> local master = yes
> domain master = yes
> os level = 99
> preferred master = yes
> domain logons = yes
> domain admin group = @ntadmins hosts allow = 192.168.1.100/24 127.0.0.1
> socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
>
> log file = /var/log/samba/%m.log
> max log size = 0
>
> printcap = /etc/printcap
> load printers = yes
> printing = lprng
> use client driver = yes
>
> #========================= Share Definitions ========================
> [printers]
> comment = All Printers
> path = /var/spool/samba
> browsable = yes
> public = yes
> writable = no
> printable = yes
>
> [public]
> comment = A public share for vendor docs, etc.
> path = /usr/public
> public = yes
> create mask = 0755
> force directory mode = 0755
> writable = yes
>
> [temp]
> comment = A place to drop off temporary files
> path = /tmp
> public = yes
> create mask = 0755
> force directory mode = 0755
> writable = yes
>
> [docs]
> comment = Main Document Share for important Corporate Documents
> path = /doc
> public = yes
> create mask = 0755
> force directory mode = 0755
> writable = yes
>
> [home]
> comment = Home directory for %U
> path = /home/%U
> browsable = yes
> public = no
> hide dot files = yes
> writeable = yes
> create mask = 0755
> directory mask = 0755
> username = %U
>
> [docs]
> comment = Main Document Share for important Corporate Documents
> path = /doc
> public = yes
> create mask = 0755
> force directory mode = 0755
> writable = yes
>
> [home]
> comment = Home directory for %U
> path = /home/%U
> browsable = yes
> public = no
> hide dot files = yes
> writeable = yes
> create mask = 0755
> directory mask = 0755
> username = %U
>
>
> Now one note I need to add I have tried using , "user, Domain, Share" d
> for security settings none work.
> I have tried using the command to to add machine to Linux_Server and it
> comes up saying already added?
>
> If someone would kindly help me I would be appreciative.
>
> Thanks so much for your help here,
> ikw38
>
>
>

-- 
John H Terpstra
Email: jht at samba.org