[Samba] XP joining domain - problem

Ryan Novosielski novosirj at umdnj.edu
Mon Nov 3 17:53:40 GMT 2003


There are a number of things to change in the Local Security policy -- 3
settings need changing, according to some magazine articles I've read (the
4th is correct by default). Try a Google search. I did this on a number of
machines out of the box recently with no sweat.

---- _  _ _  _ ___  _  _  _
|Y#| |  | |\/| |  \ |\ |  |  | Ryan Novosielski - Jr. UNIX Systems Admin
|$&| |__| |  | |__/ | \| _|  | novosirj at umdnj.edu - 973/972.0922 (2-0922)
\__/ Univ. of Med. and Dent. | IST/ACS - NJMS Medical Science Bldg - C630

On Mon, 3 Nov 2003, Mike wrote:

> Thank you.  I will do that and let you know what happens.
>
> Sincerely,
> Mike
>
> -----Original Message-----
> From: rruegner [mailto:robowarp at gmx.de]
> Sent: Monday, November 03, 2003 3:26 AM
> To: Mike; samba at samba.org
> Subject: Re: [Samba] XP joining domain - problem
>
>
> Hi , your smb logs seems fine to me, but you should better upgrade to samba
> 3
> have you checked the ip of win xp can you ping samba ?
> have you done nmblookup to winxp
> oplocks are sometimes the problem with win xp
> see example for samba 3
> [netlogon]
>     comment = Network Logon Service
>     path = /var/lib/samba/netlogon
>     admin users = root, jht
>     guest ok = Yes
>     nt acl support = No
>     browseable = No
>     blocking locks = No
>     csc policy = disable
>     locking = No
>     oplocks = No
>     level2 oplocks = No
>     posix locking = No
>     strict locking = No
>     share modes = No
>
> ----- Original Message -----
> From: "Mike" <vje at adelphia.net>
> To: <samba at samba.org>
> Sent: Monday, November 03, 2003 10:28 AM
> Subject: FW: [Samba] XP joining domain - problem
>
>
> >
> >
> > -----Original Message-----
> > From: Mike [mailto:vje at adelphia.net]
> > Sent: Monday, November 03, 2003 1:23 AM
> > To: rruegner
> > Subject: RE: [Samba] XP joining domain - problem
> >
> >
> > Hi,
> >
> > Thanks for the quick reply.  Here are the smbd and nmbd logs.  I'm not
> sure
> > if you need the nmbd, but I wanted to include it just in case.   Sorry I
> did
> > not include them in the initial email.
> >
> > Sincerely,
> >
> > Mike
> >
> > ====START OF SMBD LOG============
> >
> > [2003/11/02 22:11:12, 0] smbd/server.c:main(707)
> >   smbd version 2.2.7a started.
> >   Copyright Andrew Tridgell and the Samba Team 1992-2002
> > [2003/11/02 22:11:12, 1] lib/debug.c:debug_message(258)
> >   INFO: Debug class all level = 2   (pid 2721 from pid 2721)
> > [2003/11/02 22:11:12, 2] param/loadparm.c:do_section(3055)
> >   Processing section "[homes]"
> > [2003/11/02 22:11:12, 2] param/loadparm.c:do_section(3055)
> >   Processing section "[profiles]"
> > [2003/11/02 22:11:12, 0] param/loadparm.c:map_parameter(2077)
> >   Unknown parameter encountered: "create mast"
> > [2003/11/02 22:11:12, 0] param/loadparm.c:lp_do_parameter(2752)
> >   Ignoring unknown parameter "create mast"
> > [2003/11/02 22:11:12, 2] param/loadparm.c:do_section(3055)
> >   Processing section "[netlogon]"
> > [2003/11/02 22:11:12, 2] lib/interface.c:add_interface(81)
> >   added interface ip=192.168.0.2 bcast=192.168.0.255 nmask=255.255.255.0
> > [2003/11/02 22:11:12, 2] smbd/server.c:open_sockets(215)
> >   waiting for a connection
> > [2003/11/02 22:31:10, 2] smbd/server.c:exit_server(461)
> >   Closing connections
> > [2003/11/02 22:31:10, 0] smbd/server.c:main(707)
> >   smbd version 2.2.7a started.
> >   Copyright Andrew Tridgell and the Samba Team 1992-2002
> > [2003/11/02 22:31:10, 1] lib/debug.c:debug_message(258)
> >   INFO: Debug class all level = 2   (pid 2816 from pid 2816)
> > [2003/11/02 22:31:10, 2] param/loadparm.c:do_section(3055)
> >   Processing section "[homes]"
> > [2003/11/02 22:31:10, 2] param/loadparm.c:do_section(3055)
> >   Processing section "[profiles]"
> > [2003/11/02 22:31:10, 2] param/loadparm.c:do_section(3055)
> >   Processing section "[netlogon]"
> > [2003/11/02 22:31:10, 2] lib/interface.c:add_interface(81)
> >   added interface ip=192.168.0.2 bcast=192.168.0.255 nmask=255.255.255.0
> > [2003/11/02 22:31:10, 2] smbd/server.c:open_sockets(215)
> >   waiting for a connection
> >
> >
> >
> >
> > =====END OF SMBD LOG=============
> >
> > =====START OF NMBD LOG==========
> >
> > [2003/11/02 22:11:12, 0] nmbd/nmbd.c:main(794)
> >   Netbios nameserver version 2.2.7a started.
> >   Copyright Andrew Tridgell and the Samba Team 1994-2002
> > [2003/11/02 22:11:12, 1] lib/debug.c:debug_message(258)
> >   INFO: Debug class all level = 2   (pid 2725 from pid 2725)
> > [2003/11/02 22:11:12, 2] nmbd/nmbd.c:main(832)
> >   Becoming a daemon.
> > [2003/11/02 22:11:12, 2] lib/interface.c:add_interface(81)
> >   added interface ip=192.168.0.2 bcast=192.168.0.255 nmask=255.255.255.0
> > [2003/11/02 22:11:12, 2] nmbd/nmbd_subnetdb.c:make_subnet(192)
> >   making subnet name:192.168.0.2 Broadcast address:192.168.0.255 Subnet
> > mask:255.255.255.0
> > [2003/11/02 22:11:12, 2] nmbd/nmbd_subnetdb.c:make_subnet(192)
> >   making subnet name:UNICAST_SUBNET Broadcast address:0.0.0.0 Subnet
> > mask:0.0.0.0
> > [2003/11/02 22:11:12, 2] nmbd/nmbd_subnetdb.c:make_subnet(192)
> >   making subnet name:REMOTE_BROADCAST_SUBNET Broadcast address:0.0.0.0
> > Subnet mask:0.0.0.0
> > [2003/11/02 22:11:13, 0] nmbd/nmbd_logonnames.c:add_logon_names(165)
> >   add_domain_logon_names:
> >   Attempting to become logon server for workgroup SEA on subnet
> 192.168.0.2
> > [2003/11/02 22:11:13, 2] nmbd/nmbd_logonnames.c:become_logon_server(136)
> >   become_logon_server: Atempting to become logon server for workgroup SEA
> on
> > subnet 192.168.0.2
> > [2003/11/02 22:11:13, 0]
> > nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(291)
> >   become_domain_master_browser_bcast:
> >   Attempting to become domain master browser on workgroup SEA on subnet
> > 192.168.0.2
> > [2003/11/02 22:11:13, 0]
> > nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(305)
> >   become_domain_master_browser_bcast: querying subnet 192.168.0.2 for
> domain
> > master browser on workgroup SEA
> > [2003/11/02 22:11:18, 0]
> > nmbd/nmbd_logonnames.c:become_logon_server_success(124)
> >   become_logon_server_success: Samba is now a logon server for workgroup
> SEA
> > on subnet 192.168.0.2
> > [2003/11/02 22:11:18, 2]
> > nmbd/nmbd_become_dmb.c:become_domain_master_stage1(178)
> >   become_domain_master_stage1: Becoming domain master browser for
> workgroup
> > SEA on subnet 192.168.0.2
> > [2003/11/02 22:11:19, 2] nmbd/nmbd_elections.c:send_election_dgram(43)
> >   send_election_dgram: Sending election packet for workgroup SEA on subnet
> > 192.168.0.2
> > [2003/11/02 22:11:21, 2] nmbd/nmbd_elections.c:send_election_dgram(43)
> >   send_election_dgram: Sending election packet for workgroup SEA on subnet
> > 192.168.0.2
> > [2003/11/02 22:11:23, 2] nmbd/nmbd_elections.c:send_election_dgram(43)
> >   send_election_dgram: Sending election packet for workgroup SEA on subnet
> > 192.168.0.2
> > [2003/11/02 22:11:23, 0]
> > nmbd/nmbd_become_dmb.c:become_domain_master_stage2(114)
> >   *****
> >
> >   Samba server SRV1 is now a domain master browser for workgroup SEA on
> > subnet 192.168.0.2
> >
> >   *****
> > [2003/11/02 22:11:25, 2] nmbd/nmbd_elections.c:send_election_dgram(43)
> >   send_election_dgram: Sending election packet for workgroup SEA on subnet
> > 192.168.0.2
> > [2003/11/02 22:11:27, 2] nmbd/nmbd_elections.c:send_election_dgram(43)
> >   send_election_dgram: Sending election packet for workgroup SEA on subnet
> > 192.168.0.2
> > [2003/11/02 22:11:27, 2] nmbd/nmbd_elections.c:run_elections(208)
> >   run_elections: >>> Won election for workgroup SEA on subnet 192.168.0.2
> > <<<
> > [2003/11/02 22:11:27, 2]
> > nmbd/nmbd_become_lmb.c:become_local_master_browser(549)
> >   become_local_master_browser: Starting to become a master browser for
> > workgroup SEA on subnet 192.168.0.2
> > [2003/11/02 22:11:37, 0]
> > nmbd/nmbd_become_lmb.c:become_local_master_stage2(404)
> >   *****
> >
> >   Samba name server SRV1 is now a local master browser for workgroup SEA
> on
> > subnet 192.168.0.2
> >
> >   *****
> > [2003/11/02 22:31:10, 0] nmbd/nmbd.c:terminate(59)
> >   Got SIGTERM: going down...
> > [2003/11/02 22:31:10, 0] nmbd/nmbd.c:main(794)
> >   Netbios nameserver version 2.2.7a started.
> >   Copyright Andrew Tridgell and the Samba Team 1994-2002
> > [2003/11/02 22:31:10, 1] lib/debug.c:debug_message(258)
> >   INFO: Debug class all level = 2   (pid 2820 from pid 2820)
> > [2003/11/02 22:31:10, 2] nmbd/nmbd.c:main(832)
> >   Becoming a daemon.
> > [2003/11/02 22:31:10, 2] lib/interface.c:add_interface(81)
> >   added interface ip=192.168.0.2 bcast=192.168.0.255 nmask=255.255.255.0
> > [2003/11/02 22:31:10, 2] nmbd/nmbd_subnetdb.c:make_subnet(192)
> >   making subnet name:192.168.0.2 Broadcast address:192.168.0.255 Subnet
> > mask:255.255.255.0
> > [2003/11/02 22:31:10, 2] nmbd/nmbd_subnetdb.c:make_subnet(192)
> >   making subnet name:UNICAST_SUBNET Broadcast address:0.0.0.0 Subnet
> > mask:0.0.0.0
> > [2003/11/02 22:31:10, 2] nmbd/nmbd_subnetdb.c:make_subnet(192)
> >   making subnet name:REMOTE_BROADCAST_SUBNET Broadcast address:0.0.0.0
> > Subnet mask:0.0.0.0
> > [2003/11/02 22:31:11, 0] nmbd/nmbd_logonnames.c:add_logon_names(165)
> >   add_domain_logon_names:
> >   Attempting to become logon server for workgroup SEA on subnet
> 192.168.0.2
> > [2003/11/02 22:31:11, 2] nmbd/nmbd_logonnames.c:become_logon_server(136)
> >   become_logon_server: Atempting to become logon server for workgroup SEA
> on
> > subnet 192.168.0.2
> > [2003/11/02 22:31:11, 0]
> > nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(291)
> >   become_domain_master_browser_bcast:
> >   Attempting to become domain master browser on workgroup SEA on subnet
> > 192.168.0.2
> > [2003/11/02 22:31:11, 0]
> > nmbd/nmbd_become_dmb.c:become_domain_master_browser_bcast(305)
> >   become_domain_master_browser_bcast: querying subnet 192.168.0.2 for
> domain
> > master browser on workgroup SEA
> > [2003/11/02 22:31:16, 0]
> > nmbd/nmbd_logonnames.c:become_logon_server_success(124)
> >   become_logon_server_success: Samba is now a logon server for workgroup
> SEA
> > on subnet 192.168.0.2
> > [2003/11/02 22:31:16, 2]
> > nmbd/nmbd_become_dmb.c:become_domain_master_stage1(178)
> >   become_domain_master_stage1: Becoming domain master browser for
> workgroup
> > SEA on subnet 192.168.0.2
> > [2003/11/02 22:31:17, 2] nmbd/nmbd_elections.c:send_election_dgram(43)
> >   send_election_dgram: Sending election packet for workgroup SEA on subnet
> > 192.168.0.2
> > [2003/11/02 22:31:19, 2] nmbd/nmbd_elections.c:send_election_dgram(43)
> >   send_election_dgram: Sending election packet for workgroup SEA on subnet
> > 192.168.0.2
> > [2003/11/02 22:31:21, 2] nmbd/nmbd_elections.c:send_election_dgram(43)
> >   send_election_dgram: Sending election packet for workgroup SEA on subnet
> > 192.168.0.2
> > [2003/11/02 22:31:21, 0]
> > nmbd/nmbd_become_dmb.c:become_domain_master_stage2(114)
> >   *****
> >
> >   Samba server SRV1 is now a domain master browser for workgroup SEA on
> > subnet 192.168.0.2
> >
> >   *****
> > [2003/11/02 22:31:23, 2] nmbd/nmbd_elections.c:send_election_dgram(43)
> >   send_election_dgram: Sending election packet for workgroup SEA on subnet
> > 192.168.0.2
> > [2003/11/02 22:31:25, 2] nmbd/nmbd_elections.c:send_election_dgram(43)
> >   send_election_dgram: Sending election packet for workgroup SEA on subnet
> > 192.168.0.2
> > [2003/11/02 22:31:25, 2] nmbd/nmbd_elections.c:run_elections(208)
> >   run_elections: >>> Won election for workgroup SEA on subnet 192.168.0.2
> > <<<
> > [2003/11/02 22:31:25, 2]
> > nmbd/nmbd_become_lmb.c:become_local_master_browser(549)
> >   become_local_master_browser: Starting to become a master browser for
> > workgroup SEA on subnet 192.168.0.2
> > [2003/11/02 22:31:35, 0]
> > nmbd/nmbd_become_lmb.c:become_local_master_stage2(404)
> >   *****
> >
> >   Samba name server SRV1 is now a local master browser for workgroup SEA
> on
> > subnet 192.168.0.2
> >
> >   *****
> >
> >
> > =====END OF NMBD LOG==========
> >
> >
> >
> >
> > -----Original Message-----
> > From: rruegner [mailto:robowarp at gmx.de]
> > Sent: Monday, November 03, 2003 1:08 AM
> > To: Mike
> > Subject: Re: [Samba] XP joining domain - problem
> >
> >
> > Hi ,
> > winssupport = Yes
> >
> > oslevel = 255 will help your winxp to find samba
> >
> > what is your samba version?
> >
> > show us the samba logs
> >
> > Regards
> >
> > ----- Original Message -----
> > From: "Mike" <vje at adelphia.net>
> > To: <samba at samba.org>
> > Sent: Monday, November 03, 2003 6:55 AM
> > Subject: [Samba] XP joining domain - problem
> >
> >
> > > Hi,
> > >
> > > Here's my config file.  I checked the error log and I have pasted that
> > > below my smb.conf file.
> > >
> > > I've tried everything in the HowTo and keep getting the same error
> > > message
> > > -read through
> > > -checked with testparm
> > > -applied registry patch for WinXP
> > >
> > > Any help you'd be willing to assist me with would be greatly
> > > appreciated.
> > >
> > > Thanks in advance.
> > >
> > > Mike
> > >
> > >
> > > Here's the smb.conf file
> > >
> > > =====START SMB.CONF===========
> > >
> > > #Samba configuration file
> > > #Last updated 11/1/03
> > > [global]
> > >         ;basic server settings
> > >         workgroup = sea
> > >         netbios name = srv1
> > >         server string = Samba PDC running %v
> > >         socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192
> > > SO_RCVBUF=8192
> > >         ;PDC and master browser settings
> > >         os level = 64
> > >         preferred master = yes
> > >         local master = yes
> > >         domain master = yes
> > >         ;security and logging settings
> > >         security = user
> > >         encrypt passwords = yes
> > >         domain logons = yes
> > >         log file = /var/log/samba/log.%m
> > >         log level = 2
> > >         max log size = 50
> > >         hosts allow = 127.0.0.1 192.168.0.0/255.255.255.0
> > >         ;user profiles
> > >         logon home = \\%L\%U\.profile
> > >         logon drive = H:
> > >         logon path = \\%L\profiles\%U
> > >         ;logon script
> > >         logon script = netlogon.bat
> > >
> > >         ;sync UNIX passwords
> > >         unix password sync = yes
> > >         passwd program = /usr/bin/passwd %u
> > >         passwd chat = *New*UNIX*password* %n\n
> > > *Retype*new*UNIX*password* %n\n *Enter*new*UNIX*password* %n\n
> > > *Retype*new*UNIX*password* %n\n *passwd: *all*
> > > authentication*tokens*updated*successfully*
> > >
> > >
> > >
> > > #====Shares======
> > >
> > >
> > > [homes]
> > >         comment = Home Directories
> > >         browseable = no
> > >         writeable = yes
> > >
> > > [profiles]
> > >         path = /home/samba/profiles
> > >         writeable = yes
> > >         browseable = no
> > >         create mask = 0600
> > >         directory mask = 0700
> > >
> > > [netlogon]
> > >         path = /home/netlogon
> > >         read only = yes
> > >         write list = @admin
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > ====END SMB.CONF=============
> > >
> > >
> > >
> > >
> > > Here's the windows-side error log:
> > >
> > >
> > > The domain name sea might be a NetBIOS domain name.  If this is the
> > > case, verify that the domain name is properly registered with WINS.
> > >
> > > If you are certain that the name is not a NetBIOS domain name, then the
> > > following information can help you troubleshoot your DNS configuration.
> > >
> > > The following error occurred when DNS was queried for the service
> > > location (SRV) resource record used to locate a domain controller for
> > > domain sea:
> > >
> > > The error was: "DNS name does not exist."
> > > (error code 0x0000232B RCODE_NAME_ERROR)
> > >
> > > The query was for the SRV record for _ldap._tcp.dc._msdcs.sea
> > >
> > > Common causes of this error include the following:
> > >
> > > - The DNS SRV record is not registered in DNS.
> > >
> > > - One or more of the following zones do not include delegation to its
> > > child zone:
> > >
> > > sea
> > > . (the root zone)
> > >
> > > For information about correcting this problem, click Help.
> > >
> > > --
> > > To unsubscribe from this list go to the following URL and read the
> > > instructions:  http://lists.samba.org/mailman/listinfo/samba
> > >
> > >
> >
> >
> >
> >
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  http://lists.samba.org/mailman/listinfo/samba
> >
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  http://lists.samba.org/mailman/listinfo/samba
>



More information about the samba mailing list