[Samba] Samba 2.2.8-1 as W2k Member server

[Robert Adkins II]

Andre,

	Take a look at your old smb.conf file, if you still have it
available. I believe that you have a setting difference regarding
authentication that is causing your issue. 

	We don't allow access to anyone that doesn't have an account on
the domain. So, our smb.conf is configured to disallow "guest" and
"nobody" accounts. Perhaps yours is configured in that fashion as well.

	Good luck.

Regards,
Robert Adkins II
IT Manager/Buyer
Impel Industries, Inc.
586-254-5800


-----Original Message-----
From: Andre Dieball [mailto:andre at dieball.net] 
Sent: Wednesday, March 26, 2003 12:33 PM
To: 'Robert Adkins II'; samba at lists.samba.org
Subject: RE: [Samba] Samba 2.2.8-1 as W2k Member server

Hello Robert

Thanks for your mail.

The thing is, that it worked in exect the same configuration before
(Samba
2.2.7a).

I don't want Samba do be part of any kind of domain controllers, I just
want
it to offer services (printer) to active directory users.

I'm not sure, but I think, that's why anybody, who does not have an
samba
account uses the user "nobody".

I had this issue with 2.2.7a before, but can't remember how I solved it
:-(

Rgds.
	Andre



> -----Original Message-----
> From: Robert Adkins II [mailto:radkins at impelind.com]
> Sent: Wednesday, March 26, 2003 5:59 PM
> To: 'Andre Dieball'; samba at lists.samba.org
> Subject: RE: [Samba] Samba 2.2.8-1 as W2k Member server
> 
> 
> Andre,
> 
> 	It does that because Samba is using its own internal
> smbpasswd file. While you may have been able to get Samba 
> 2.2.8-1 connected to the Windows 2000 Domain, it will not 
> replicate the SAM data (usernames/passwords).
> 
> 	Run this test; create a Linux user account, then create
> a Samba User account of the same name. (The Linux User 
> account is required to create the Samba user account.) Once 
> you have done that, attempt to connect to the server using 
> Windows Explorer or whatever. (Make sure that you create a 
> user account/password combo that exists in your Windows 2000 
> AD.) If all goes well, that user account should connect 
> perfectly fine.
> 
> 	I believe that they are working on figuring out how to
> get Samba to replicate the SAM data. However, that is still 
> some time off, I believe. 
> 
> 	At this time, I know that you can setup a Samba PDC and
> another Samba server to act as a Samba Back-up Domain 
> Controller, as we have that configuration working fine in our office.
> 
> Regards,
> Robert Adkins II
> IT Manager/Buyer
> Impel Industries, Inc.
> 586-254-5800
> 
> 
> -----Original Message-----
> From: samba-bounces+radkins=impelind.com at lists.samba.org
> [mailto:samba-bounces+radkins=impelind.com at lists.samba.org]
> On Behalf Of Andre Dieball
> Sent: Wednesday, March 26, 2003 11:34 AM
> To: samba at lists.samba.org
> Subject: [Samba] Samba 2.2.8-1 as W2k Member server
> 
> Hello
> 
> I have a problem with setting up Samba as a AD member server.
> 
> Environment:
> Linux tux 2.2.20-idepci (Debian Woody)
> samba                       2.2.8-1.woody
> samba-common                2.2.8-1.woody
> smbclient                   2.2.8-1.woody
> (samba from people.samba.org/~peloy/samba)
> 
> Smb.conf:
> ---cut---
> [global]
>         printer driver file = /etc/samba/printers.def
>         encrypt passwords = true
>         character set = ISO8859-15
>         socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY 
>         kernel oplocks = No
>         invalid users = root
>         password server = de-mail, plains
>         interfaces = xx.xx.xx.xx/255.255.255.0
>         security = domain
>         server string = PDF-Test
>         workgroup = xx_xxxx
>         log level = 3
>         local master = No   
>         client code page = 850
>         netbios name = tux
>         log file = /var/log/samba/%m
>         guest account = nobody
>         os level = 2
> 
> [shr]
>    path = /shr
>    browseable = yes
>    writeable = yes
>    guest ok = yes
>    force user = nobody
> 
> [pdf]
>         comment = PDF Printer
>         path = /var/tmp
>         create mask = 0600
>         guest ok = yes
>         printable = Yes
> ;       browseable = No
>         print command = /usr/bin/printpdf.sh %s %U
>         lpq command =
>         lprm command =
>         printer driver = HP C LaserJet 4500-PS
>         printer driver location = \\%h\printer$
> 
> [printer$]
>         path = /etc/samba/printdrivers
>         guest ok = yes
>         read only = yes
>         printable = yes
> ---cut---
> 
> I have created a machine acount in active directory named tux
> (as the netbios name in smb.conf) and made it pre W2k 
> compatible. Aftrewards, I stopped samba and used:
> 
> Smbpasswd -j xx_xxxxx -r de-mail -U administrator
> 
> With the active directory administrator domain and received a
> message, that the domain has been joined.
> 
> I see the node in network neighbourhood, but I can't access
> it. It always askes for a username/password combination.
> 
> Any help is really appriciated.
> 
> Rgds.
> 	Andre
> 
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
> 
> 
> 
>