[Samba] Stuck on Problem with Joining Domains...please help!

John H Terpstra jht at samba.org
Sun Oct 19 15:05:58 GMT 2003


Here is my smb.conf for a fully functional PDC. Granted that I do not use
LDAP on this particular system, but the LDAP part is easy once you get the
rest of it working.

My advice to anyone who is building a Samba server is to start with a
simple solution and granudally build in the complexities needed. That
makes it so much easier to figure out when and where things might be

The migration of the database is a simple matter. If you have "passdb
backend = ldapsam:ldap://server.myorg.ext:636, tdbsam" then you can
migrate a tdbsam to LDAP by:

	pdbedit -i tdbsam -e ldapsam
	pdbedit -g -i tdbsam -e ldapsam

My smb.conf file:
# Global parameters
        workgroup = MIDEARTH
        server string = Samba3
        interfaces = eth0, lo
        bind interfaces only = Yes
        obey pam restrictions = Yes
        passdb backend = tdbsam
        pam password change = Yes
        passwd chat = *New*Password* %n\n *Re-enter*new*password* %n\n
        username map = /etc/samba/smbusers
        password level = 8
        username level = 8
        log level = 1
        syslog = 0
        log file = /var/log/samba/%m
        smb ports = 139 445
        name resolve order = wins bcast hosts
        time server = Yes
        printcap name = CUPS
        add user script = /usr/sbin/useradd -m %u
        delete user script = /usr/sbin/userdel -r %u
        add group script = /usr/sbin/groupadd %g
        delete group script = /usr/sbin/groupadd %g
        add user to group script = /usr/sbin/usermod -G %g %u
        add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null
        shutdown script = /var/lib/samba/scripts/shutdown.sh
        abort shutdown script = /sbin/shutdown -c
        logon script = scripts\logon.bat
        logon path = \\%L\Profiles\%U
        logon drive = H:
        logon home = \\%L\%U
        domain logons = Yes
        os level = 35
        preferred master = Yes
        domain master = Yes
        wins support = Yes
        utmp = Yes
        panic action = export DISPLAY=localhost:0; /usr/bin/X11/xterm -e
gdb /proc/%d/exe %d || /bin/sleep
        idmap uid = 15000-20000
        idmap gid = 15000-20000
        winbind separator = +
        winbind use default domain = Yes
        hosts allow = 127., 192.168.1.
        use sendfile = Yes
        printing = cups
        veto files = /*.eml/*.nws/riched20.dll/*.{*}/
        veto oplock files = /*.doc/*.xls/*.mdb/
        include = /etc/samba/machine.%m

        comment = Home Directories
        read only = No
        browseable = No

Share definitions for [netlogon], [profiles], etc. deleted to reduce size
of this message.

- John T.
John H Terpstra
Email: jht at samba.org
-------------- next part --------------
Skipped content of type multipart/signed-------------- next part --------------
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba

More information about the samba mailing list