[Samba] Ghost Create account: procedure number out ofrange inSamba

werner maes werner.maes at cc.kuleuven.ac.be
Wed Jun 25 07:51:28 GMT 2003 

It is a separate domain logon server, see configuration below (relevant 
entries only).
Does it have to be a member of a Samba domain? (security = domain?)

[global]
         security = USER
         workgroup = DOMAIN
         netbios name = DOMAINSERVER
         interfaces = x.y.v.w/24
         logon script = scripts\%m.bat
         os level = 110
         preferred master = Yes
         local master = Yes
         domain master = True
         domain logons = Yes
         domain admin group = @root
         ldap server = x.y.v.z
         ldap port = 389
         ldap suffix = o=kuleuven,c=be
         ldap admin dn = cn=master,o=kuleuven,c=be

The ldap server is installed with openldap.

Werner

At 16:42 24/06/2003, Dan Gapinski wrote:
>Not to ask the annoying ?'s, but the server that you're working from is 
>indeed a member of the Samba domain (& not a separate domain/workgroup)?
>
>Dan
>----- Original Message -----
>From: <mailto:werner.maes at cc.kuleuven.ac.be>werner maes
>To: <mailto:DanGapinski at qsi-r2.com>Dan Gapinski
>Sent: Tuesday, June 24, 2003 10:45 AM
>Subject: Re: [Samba] Ghost Create account: procedure number out ofrange 
>inSamba
>
>Yes, that's right.
>
>Werner
>
>Dan Gapinski wrote:
>>
>>So in your Ghost services properties, then your 'Log on as' entry looks like
>>
>>this:
>>
>>domain\root
>>
>>?
>>
>>Thanks,
>>
>>Dan
>>
>>----- Original Message -----
>>
>>From: "werner maes" 
>><mailto:werner.maes at cc.kuleuven.ac.be>><werner.maes at cc.kuleuven.ac.be>
>>
>>To: "Dan Gapinski" <mailto:DanGapinski at qsi-r2.com>><DanGapinski at qsi-r2.com>
>>
>>Cc: <mailto:samba at samba.org>><samba at samba.org>
>>
>>Sent: Tuesday, June 24, 2003 10:12 AM
>>
>>Subject: Re: [Samba] Ghost Create account: procedure number out ofrange
>>
>>inSamba
>>
>>
>>
>>
>>>
>>>domain admin group = root (in smb.conf)
>>>
>>>I have defined the user 'root' in LDAP. On the client I added the domain
>>>
>>>users to the administrators group. I try to run the services under this
>>>
>>>root account on the domain but the services will only run under a local
>>>
>>>system account and not under a domain account. That seems to be the
>>>
>>>problem. With this user 'root' it is possible to manually join the client
>>>
>>>to the domain and to logon to the domain.
>>>
>>>
>>>I've tried about everything but still no solution....
>>>
>>>Still hoping though :-)
>>>
>>>
>>>Werner Maes
>>>
>>>
>>>At 09:39 24/06/2003, Dan Gapinski wrote:
>>>
>>>
>>>>
>>>>I see - what type of domain account are you using? Your method is right
>>>>
>>>>
>>
>>tho,
>>
>>
>>>>
>>>>setting the services to run under a domain account. I just want you to be
>>>>
>>>>absolutely sure that the account is administrator. If this is a test
>>>>
>>>>environment, you could start by running the service as root, and see if
>>>>
>>>>
>>
>>it
>>
>>
>>>>
>>>>works then (though I would not do that in production).
>>>>
>>>>
>>>>Dan
>>>>
>>>>
>>>>----- Original Message -----
>>>>
>>>>From: "werner maes" 
>>>><mailto:werner.maes at cc.kuleuven.ac.be><werner.maes at cc.kuleuven.ac.be>
>>>>
>>>>To: "Dan Gapinski" <mailto:DanGapinski at qsi-r2.com><DanGapinski at qsi-r2.com>
>>>>
>>>>Cc: <mailto:samba at samba.org><samba at samba.org>
>>>>
>>>>Sent: Tuesday, June 24, 2003 4:35 AM
>>>>
>>>>Subject: Re: [Samba] Ghost Create account: procedure number out ofrange
>>>>
>>>>inSamba
>>>>
>>>>
>>>>
>>>>
>>>>>
>>>>>Sorry to bother you again but in my situation with LDAP authentication
>>>>>
>>>>>
>>
>>it
>>
>>
>>>>>
>>>>>doesn't seem to work.
>>>>>
>>>>>
>>>>>I'll explain the configuration in detail.
>>>>>
>>>>>
>>>>>I have a Samba 2.2.8a domain controller which is compiled and
>>>>>
>>>>>
>>
>>configured
>>
>>
>>>>>
>>>>>with LDAP support.
>>>>>
>>>>>The user and machine accounts are defined in LDAP. I manually added an
>>>>>
>>>>>Windows XP workstation
>>>>>
>>>>>to the domain (no problems here) using a root account also defined in
>>>>>
>>>>>
>>>>
>>>>LDAP.
>>>>
>>>>
>>>>>
>>>>>Now I would like to clone this machine to other machines using Norton
>>>>>
>>>>>
>>>>
>>>>Ghost
>>>>
>>>>
>>>>>
>>>>>7.5. Therefore I have set up
>>>>>
>>>>>a Ghost Multicast Server. Now when I use to Ghost Console on the
>>>>>
>>>>>
>>
>>multicast
>>
>>
>>>>>
>>>>>server and try to add our domain
>>>>>
>>>>>to the list of supported domains in Ghost I get the error "Procedure
>>>>>
>>>>>
>>>>
>>>>number
>>>>
>>>>
>>>>>
>>>>>out of range".
>>>>>
>>>>>On the Ghost Multicast Server there is the "ghost configuration
>>>>>
>>>>>
>>
>>server"
>>
>>
>>>>>
>>>>>service and on the client machine
>>>>>
>>>>>there is the "ghost client agent" service. Both of these services only
>>>>>
>>>>>start with a local system account.
>>>>>
>>>>>These services do not run under a domain account. If I try to run them
>>>>>
>>>>>under a domain account I get this
>>>>>
>>>>>error message: "The service did not respond to the start or control
>>>>>
>>>>>
>>>>
>>>>request
>>>>
>>>>
>>>>>
>>>>>in a timely fashion".
>>>>>
>>>>>
>>>>>Like I said, manually adding a machine to the domain gives no problems
>>>>>
>>>>>
>>>>
>>>>with
>>>>
>>>>
>>>>>
>>>>>the specified root account
>>>>>
>>>>>in LDAP (see below, I did not include all attributes off course).
>>>>>
>>>>>dn: uid=root, ou=xxx, o=xxx, c=xxx
>>>>>
>>>>>objectClass: sambaAccount
>>>>>
>>>>>uid: root
>>>>>
>>>>>rid: 1000
>>>>>
>>>>>uidNumber: 0
>>>>>
>>>>>gidNumber: 0
>>>>>
>>>>>
>>>>>Kind regards,
>>>>>
>>>>>
>>>>>Werner Maes
>>>>>
>>>>>
>>>>>
>>>>>At 15:20 23/06/2003, Dan Gapinski wrote:
>>>>>
>>>>>
>>>>>>
>>>>>>Yes - sorry. I made a regular account for Ghost (which you could make
>>>>>>
>>>>>>
>>>>
>>>>with
>>>>
>>>>
>>>>>>
>>>>>>adduser or useradd or handcoding the passwd file) and added it to a
>>>>>>
>>>>>>
>>
>>group
>>
>>
>>>>>>
>>>>>>(in the groups file) that I called "admin". In smb.conf, I added a
>>>>>>
>>>>>>
>>
>>line
>>
>>
>>>>
>>>>that
>>>>
>>>>
>>>>>>
>>>>>>went like this:
>>>>>>
>>>>>>domain admin group = @admin
>>>>>>
>>>>>>
>>>>>>So that worked like a charm.
>>>>>>
>>>>>>Hope that helps,
>>>>>>
>>>>>>Dan
>>>>>>
>>>>>>----- Original Message -----
>>>>>>
>>>>>>From: "werner maes" 
>>>>>><mailto:werner.maes at cc.kuleuven.ac.be><werner.maes at cc.kuleuven.ac.be>
>>>>>>
>>>>>>To: "Dan Gapinski" 
>>>>>><mailto:DanGapinski at qsi-r2.com><DanGapinski at qsi-r2.com>
>>>>>>
>>>>>>Cc: <mailto:samba at samba.org><samba at samba.org>
>>>>>>
>>>>>>Sent: Monday, June 23, 2003 2:21 PM
>>>>>>
>>>>>>Subject: Re: [Samba] Ghost Create account: procedure number out of
>>>>>>
>>>>>>
>>
>>range
>>
>>
>>>>>>
>>>>>>inSamba
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>>
>>>>>>>Hello Dan,
>>>>>>>
>>>>>>>
>>>>>>>Thanks for yor reply !
>>>>>>>
>>>>>>>But what exactly do you mean with "making a regular administrator
>>>>>>>
>>>>>>>account for Ghost"?
>>>>>>>
>>>>>>>Is it an entry in /etc/passwd or smbpasswd for "administrator"?
>>>>>>>
>>>>>>>Could you give more specific details?
>>>>>>>
>>>>>>>
>>>>>>>Kind regards,
>>>>>>>
>>>>>>>
>>>>>>>Werner Maes
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>
>>>>>--
>>>>>
>>>>>To unsubscribe from this list go to the following URL and read the
>>>>>
>>>>>instructions: 
>>>>><http://lists.samba.org/mailman/listinfo/samba>http://lists.samba.org/mailman/listinfo/samba
>>>>>
>>>>>
>>>>>
>>>
>>>--
>>>
>>>To unsubscribe from this list go to the following URL and read the
>>>
>>>instructions: 
>>><http://lists.samba.org/mailman/listinfo/samba>http://lists.samba.org/mailman/listinfo/samba
>>>
>>>
>>>
>>
>>
>>
>>
>>
>>

More information about the samba mailing list