[Samba] (no subject)

[Pappas, Bill]

What are the proper sequence/steps to:

(1) Join a Samba server to a WIN2K AD domain where two domains reside with a two way trust.  I am running 2.2.8a with winbind on RH Advanced Server.

	- Should smbd or nmbd be running when I run smbpasswd -j DOMAIN -r PDC -U AdminUserType%password?
	- Should I add the machine to the domain first via Windows Active Direcotry Users and Computers interface before running the smbpassword command above?

(2) Make wbinfo --sequence see all domains as CONNECTED?  Right now I am running into several scenarios that I cannot reproduce with any consistency.

a.  wbinfo --sequence
DOMAINA DISCONNECTED
DOMAINB CONNECTED
DOMAINC DISCONNECTED

b.  wbinfo --sequence
DOMAINA DISCONNECTED
DOMAINB DISCONNECTED
DOMAINC CONNECTED

c.  wbinfo --sequence
DOMAINA CONNECTED
DOMAINB CONNECTED
DOMAINC CONNECTED

Also, even when I can get wbinfo --sequence to see every domain as CONNECTED, getent group will list groups from all three domains, but some groups are missing....but if I go to Windows Active Directory Users and Computers GUI, these missing groups show up.


What am I missing here?




Here is my smb.conf file.

# Samba config file created using SWAT
# from 199.76.2.87 (199.76.2.87)
# Date: 2003/06/11 12:38:30

# Global parameters
[global]
   workgroup = CBT
   server string = Advance Server Samba Test Bed
   security = DOMAIN
   encrypt passwords = Yes
   password server = sjmemdc05
   smb passwd file = /usr/local/samba/private/smbpasswd
   log file = /usr/local/samba/var/log.%m
   max log size = 50
   preferred master = No
   local master = No
   domain master = No
   dns proxy = No
   wins server = 10.1.1.203
   winbind uid = 10000-65000
   winbind gid = 10000-65000
   template shell = /bin/bash
   winbind separator = +

[printers]
   comment = All Printers
   path = /usr/spool/samba
   printable = Yes
   browseable = No

[public]
   comment = Public Stuff
   path = /home/
   read only = No
   available = No

[TestShare]
   path = /home/testshare
   read only = No
   create mask = 0700
   security mask = 0700
   directory mask = 0700
   directory security mask = 0700


Bill P