[Samba] Ghost Create account: procedure number out ofrange inSamba

Dan Gapinski DanGapinski at qsi-r2.com
Wed Jun 25 14:17:17 GMT 2003


I'm sorry - I meant the Ghost server - is that a member of the Samba domain?
I think that Ghost 7.5 can "walk" across trusted domains, but I am not sure
that is possible in Samba. Anyone else care to comment?

Dan

----- Original Message -----
From: "werner maes" <werner.maes at cc.kuleuven.ac.be>
To: "Dan Gapinski" <DanGapinski at qsi-r2.com>
Cc: <samba at samba.org>
Sent: Wednesday, June 25, 2003 2:51 AM
Subject: Re: [Samba] Ghost Create account: procedure number out ofrange
inSamba


> It is a separate domain logon server, see configuration below (relevant
> entries only).
> Does it have to be a member of a Samba domain? (security = domain?)
>
> [global]
>          security = USER
>          workgroup = DOMAIN
>          netbios name = DOMAINSERVER
>          interfaces = x.y.v.w/24
>          logon script = scripts\%m.bat
>          os level = 110
>          preferred master = Yes
>          local master = Yes
>          domain master = True
>          domain logons = Yes
>          domain admin group = @root
>          ldap server = x.y.v.z
>          ldap port = 389
>          ldap suffix = o=kuleuven,c=be
>          ldap admin dn = cn=master,o=kuleuven,c=be
>
> The ldap server is installed with openldap.
>
> Werner
>
> At 16:42 24/06/2003, Dan Gapinski wrote:
> >Not to ask the annoying ?'s, but the server that you're working from is
> >indeed a member of the Samba domain (& not a separate domain/workgroup)?
> >
> >Dan
> >----- Original Message -----
> >From: <mailto:werner.maes at cc.kuleuven.ac.be>werner maes
> >To: <mailto:DanGapinski at qsi-r2.com>Dan Gapinski
> >Sent: Tuesday, June 24, 2003 10:45 AM
> >Subject: Re: [Samba] Ghost Create account: procedure number out ofrange
> >inSamba
> >
> >Yes, that's right.
> >
> >Werner
> >
> >Dan Gapinski wrote:
> >>
> >>So in your Ghost services properties, then your 'Log on as' entry looks
like
> >>
> >>this:
> >>
> >>domain\root
> >>
> >>?
> >>
> >>Thanks,
> >>
> >>Dan
> >>
> >>----- Original Message -----
> >>
> >>From: "werner maes"
> >><mailto:werner.maes at cc.kuleuven.ac.be>><werner.maes at cc.kuleuven.ac.be>
> >>
> >>To: "Dan Gapinski"
<mailto:DanGapinski at qsi-r2.com>><DanGapinski at qsi-r2.com>
> >>
> >>Cc: <mailto:samba at samba.org>><samba at samba.org>
> >>
> >>Sent: Tuesday, June 24, 2003 10:12 AM
> >>
> >>Subject: Re: [Samba] Ghost Create account: procedure number out ofrange
> >>
> >>inSamba
> >>
> >>
> >>
> >>
> >>>
> >>>domain admin group = root (in smb.conf)
> >>>
> >>>I have defined the user 'root' in LDAP. On the client I added the
domain
> >>>
> >>>users to the administrators group. I try to run the services under this
> >>>
> >>>root account on the domain but the services will only run under a local
> >>>
> >>>system account and not under a domain account. That seems to be the
> >>>
> >>>problem. With this user 'root' it is possible to manually join the
client
> >>>
> >>>to the domain and to logon to the domain.
> >>>
> >>>
> >>>I've tried about everything but still no solution....
> >>>
> >>>Still hoping though :-)
> >>>
> >>>
> >>>Werner Maes
> >>>
> >>>
> >>>At 09:39 24/06/2003, Dan Gapinski wrote:
> >>>
> >>>
> >>>>
> >>>>I see - what type of domain account are you using? Your method is
right
> >>>>
> >>>>
> >>
> >>tho,
> >>
> >>
> >>>>
> >>>>setting the services to run under a domain account. I just want you to
be
> >>>>
> >>>>absolutely sure that the account is administrator. If this is a test
> >>>>
> >>>>environment, you could start by running the service as root, and see
if
> >>>>
> >>>>
> >>
> >>it
> >>
> >>
> >>>>
> >>>>works then (though I would not do that in production).
> >>>>
> >>>>
> >>>>Dan
> >>>>
> >>>>
> >>>>----- Original Message -----
> >>>>
> >>>>From: "werner maes"
> >>>><mailto:werner.maes at cc.kuleuven.ac.be><werner.maes at cc.kuleuven.ac.be>
> >>>>
> >>>>To: "Dan Gapinski"
<mailto:DanGapinski at qsi-r2.com><DanGapinski at qsi-r2.com>
> >>>>
> >>>>Cc: <mailto:samba at samba.org><samba at samba.org>
> >>>>
> >>>>Sent: Tuesday, June 24, 2003 4:35 AM
> >>>>
> >>>>Subject: Re: [Samba] Ghost Create account: procedure number out
ofrange
> >>>>
> >>>>inSamba
> >>>>
> >>>>
> >>>>
> >>>>
> >>>>>
> >>>>>Sorry to bother you again but in my situation with LDAP
authentication
> >>>>>
> >>>>>
> >>
> >>it
> >>
> >>
> >>>>>
> >>>>>doesn't seem to work.
> >>>>>
> >>>>>
> >>>>>I'll explain the configuration in detail.
> >>>>>
> >>>>>
> >>>>>I have a Samba 2.2.8a domain controller which is compiled and
> >>>>>
> >>>>>
> >>
> >>configured
> >>
> >>
> >>>>>
> >>>>>with LDAP support.
> >>>>>
> >>>>>The user and machine accounts are defined in LDAP. I manually added
an
> >>>>>
> >>>>>Windows XP workstation
> >>>>>
> >>>>>to the domain (no problems here) using a root account also defined in
> >>>>>
> >>>>>
> >>>>
> >>>>LDAP.
> >>>>
> >>>>
> >>>>>
> >>>>>Now I would like to clone this machine to other machines using Norton
> >>>>>
> >>>>>
> >>>>
> >>>>Ghost
> >>>>
> >>>>
> >>>>>
> >>>>>7.5. Therefore I have set up
> >>>>>
> >>>>>a Ghost Multicast Server. Now when I use to Ghost Console on the
> >>>>>
> >>>>>
> >>
> >>multicast
> >>
> >>
> >>>>>
> >>>>>server and try to add our domain
> >>>>>
> >>>>>to the list of supported domains in Ghost I get the error "Procedure
> >>>>>
> >>>>>
> >>>>
> >>>>number
> >>>>
> >>>>
> >>>>>
> >>>>>out of range".
> >>>>>
> >>>>>On the Ghost Multicast Server there is the "ghost configuration
> >>>>>
> >>>>>
> >>
> >>server"
> >>
> >>
> >>>>>
> >>>>>service and on the client machine
> >>>>>
> >>>>>there is the "ghost client agent" service. Both of these services
only
> >>>>>
> >>>>>start with a local system account.
> >>>>>
> >>>>>These services do not run under a domain account. If I try to run
them
> >>>>>
> >>>>>under a domain account I get this
> >>>>>
> >>>>>error message: "The service did not respond to the start or control
> >>>>>
> >>>>>
> >>>>
> >>>>request
> >>>>
> >>>>
> >>>>>
> >>>>>in a timely fashion".
> >>>>>
> >>>>>
> >>>>>Like I said, manually adding a machine to the domain gives no
problems
> >>>>>
> >>>>>
> >>>>
> >>>>with
> >>>>
> >>>>
> >>>>>
> >>>>>the specified root account
> >>>>>
> >>>>>in LDAP (see below, I did not include all attributes off course).
> >>>>>
> >>>>>dn: uid=root, ou=xxx, o=xxx, c=xxx
> >>>>>
> >>>>>objectClass: sambaAccount
> >>>>>
> >>>>>uid: root
> >>>>>
> >>>>>rid: 1000
> >>>>>
> >>>>>uidNumber: 0
> >>>>>
> >>>>>gidNumber: 0
> >>>>>
> >>>>>
> >>>>>Kind regards,
> >>>>>
> >>>>>
> >>>>>Werner Maes
> >>>>>
> >>>>>
> >>>>>
> >>>>>At 15:20 23/06/2003, Dan Gapinski wrote:
> >>>>>
> >>>>>
> >>>>>>
> >>>>>>Yes - sorry. I made a regular account for Ghost (which you could
make
> >>>>>>
> >>>>>>
> >>>>
> >>>>with
> >>>>
> >>>>
> >>>>>>
> >>>>>>adduser or useradd or handcoding the passwd file) and added it to a
> >>>>>>
> >>>>>>
> >>
> >>group
> >>
> >>
> >>>>>>
> >>>>>>(in the groups file) that I called "admin". In smb.conf, I added a
> >>>>>>
> >>>>>>
> >>
> >>line
> >>
> >>
> >>>>
> >>>>that
> >>>>
> >>>>
> >>>>>>
> >>>>>>went like this:
> >>>>>>
> >>>>>>domain admin group = @admin
> >>>>>>
> >>>>>>
> >>>>>>So that worked like a charm.
> >>>>>>
> >>>>>>Hope that helps,
> >>>>>>
> >>>>>>Dan
> >>>>>>
> >>>>>>----- Original Message -----
> >>>>>>
> >>>>>>From: "werner maes"
>
>>>>>><mailto:werner.maes at cc.kuleuven.ac.be><werner.maes at cc.kuleuven.ac.be>
> >>>>>>
> >>>>>>To: "Dan Gapinski"
> >>>>>><mailto:DanGapinski at qsi-r2.com><DanGapinski at qsi-r2.com>
> >>>>>>
> >>>>>>Cc: <mailto:samba at samba.org><samba at samba.org>
> >>>>>>
> >>>>>>Sent: Monday, June 23, 2003 2:21 PM
> >>>>>>
> >>>>>>Subject: Re: [Samba] Ghost Create account: procedure number out of
> >>>>>>
> >>>>>>
> >>
> >>range
> >>
> >>
> >>>>>>
> >>>>>>inSamba
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>
> >>>>>>>
> >>>>>>>Hello Dan,
> >>>>>>>
> >>>>>>>
> >>>>>>>Thanks for yor reply !
> >>>>>>>
> >>>>>>>But what exactly do you mean with "making a regular administrator
> >>>>>>>
> >>>>>>>account for Ghost"?
> >>>>>>>
> >>>>>>>Is it an entry in /etc/passwd or smbpasswd for "administrator"?
> >>>>>>>
> >>>>>>>Could you give more specific details?
> >>>>>>>
> >>>>>>>
> >>>>>>>Kind regards,
> >>>>>>>
> >>>>>>>
> >>>>>>>Werner Maes
> >>>>>>>
> >>>>>>>
> >>>>>>>
> >>>>>
> >>>>>--
> >>>>>
> >>>>>To unsubscribe from this list go to the following URL and read the
> >>>>>
> >>>>>instructions:
>
>>>>><http://lists.samba.org/mailman/listinfo/samba>http://lists.samba.org/m
ailman/listinfo/samba
> >>>>>
> >>>>>
> >>>>>
> >>>
> >>>--
> >>>
> >>>To unsubscribe from this list go to the following URL and read the
> >>>
> >>>instructions:
>
>>><http://lists.samba.org/mailman/listinfo/samba>http://lists.samba.org/mai
lman/listinfo/samba
> >>>
> >>>
> >>>
> >>
> >>
> >>
> >>
> >>
> >>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba






More information about the samba mailing list