[Samba] netlogon problems

[RRuegner]

Radio Gong 2000 GmbH & Co. KG [Technik] schrieb:

> Hi @ all,
> 
> I have two samba-servers running perfectly!
> 
> Now I configured a third machine which provides some backups. Since I brought 
> it up in the network the windows client won't execute the netlogon-scripts...
> When I turn off samba-services on the backup-machine it works again.
> 
> Did I miss something??? Maybe you can open my eyes...
> 
> Best regards
> 
> Sascha
> 
> 
> Here my conf-files:
> 
> PDC
> ------------------------------------------------------------------
> 
> # Global parameters
> [global]
>         netbios name = Hunter 
>         workgroup = SNEAKER
>         server string = SoundServer %v 
>         realm = hunter.radiogong.intern
>         admin users = root, administrator, sascha
>         security = user
>         dns proxy = yes
>         wins proxy = Yes
>         wins support = Yes
>         ldap ssl = no
>         socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 
> SO_RCVBUF=8192
>         keepalive = 255
>         locking = 1
>         kernel oplocks = yes
>         blocking locks = yes
>         oplocks = yes
>         level2 oplocks = yes
>         large readwrite = yes
>         map to guest = Bad User
>         dos charset = ISO8859-15
>         unix charset = ISO8859-15 
>         display charset = ISO8859-15
>         printing = cups
>         printcap name = cups
>         utmp = Yes
>         host msdfs = Yes
>     
> # NETWORK STUFF
>         interfaces = 192.168.10.1/24, 192.168.11.1/24
>         hosts allow = 192.168.
>         bind interfaces only = yes
>         nt acl support = yes
>         client schannel = auto
>         server schannel = yes
>         client signing = auto
>         server signing = no
> 
> # FEATURE STUFF
>         domain logons = yes
>         os level = 33
>         domain master = yes 
>         preferred master = yes
>         local master = yes
>         time server = yes
> 
> # LOGON STUFF
>         logon script = logon.bat
>         logon drive =
>         logon home =
>         logon path =
>         template homedir =
> 
> [netlogon]
>        comment = Network Logon Service
>        path = /data/netlogon
>        public = No
>        guest ok = No
>        share modes = No
> 
> # SHARES --------------------------------
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> BDC
> ------------------------------------------------------------------
> # Global parameters
> [global]
>         netbios name = Assassin
>         workgroup = SNEAKER
>         server string = FileServer %v 
>         realm = assassin.radiogong.intern
>         admin users = root, administrator, sascha
>         security = user 
>         dns proxy = yes
> #       wins proxy = Yes
> #       wins support = Yes
>         ldap ssl = no
>         socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 
> SO_RCVBUF=8192
>         keepalive = 255
>         locking = 1
>         kernel oplocks = yes
>         blocking locks = yes
>         oplocks = yes
>         level2 oplocks = yes
>         large readwrite = yes
>         map to guest = Bad User
>         dos charset = ISO8859-15
>         unix charset = ISO8859-15 
>         display charset = ISO8859-15
>         printing = cups
>         printcap name = cups
>         utmp = Yes
>         host msdfs = Yes
>   
> # NETWORK STUFF
>         interfaces = 192.168.10.2/24
>         hosts allow = 192.168.
>         bind interfaces only = yes
>         nt acl support = yes
>         client schannel = auto
>         server schannel = no
>         client signing = auto
>         server signing = no
> 
> # FEATURE STUFF
>         domain logons = yes
>         os level = 32
>         domain master = no
>         preferred master = yes 
>         local master = yes
>         time server = yes
> 
> # LOGON STUFF
> #       logon script = logon.bat
>         logon drive =
>         logon home =
>         logon path =
>         template homedir =
> 
> # SHARES --------------------------------
> 
> 
> 
> 
> 
> 
> 
> 
> 
> 
> BACKUP
> ------------------------------------------------------------------
> # Global parameters
> [global]
>         netbios name = Leo 
>         workgroup = SNEAKER
>         server string = BackUpServer %v 
>         realm = leo.radiogong.intern
>         admin users = root, administrator, sascha
>         security = share 
> # Use password server option only with security = server
> #       password server = hunter.radiogong.intern
>         dns proxy = yes
> #       wins proxy = Yes
> #       wins support = Yes
>         ldap ssl = no
>         socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 
> SO_RCVBUF=8192
>         keepalive = 255
>         locking = 1
>         kernel oplocks = yes
>         blocking locks = yes
>         oplocks = yes
>         level2 oplocks = yes
>         large readwrite = yes
>         map to guest = Bad User
>         dos charset = ISO8859-15
>         unix charset = ISO8859-15 
>         display charset = ISO8859-15
>         printing = cups
>         printcap name = cups
>         utmp = Yes
>         host msdfs = Yes
> 
> # NETWORK STUFF
>         interfaces = 192.168.10.3/24
>         hosts allow = 192.168.
>         bind interfaces only = yes
>         nt acl support = yes
> #       client schannel = auto 
>         server schannel = no 
> #       client signing = auto
> #       server signing = auto 
>  
> # FEATURE STUFF
>         domain logons = yes 
>         os level = 32
>         domain master = no
>         preferred master = yes
>         local master = yes
>         time server = yes
> 
> # LOGON STUFF
> #       logon script = logon.bat
>         logon drive =
>         logon home =
>         logon path =
>         template homedir =
> 
> # SHARES --------------------------------
Hi Sasha,
i am not really sure
but
[netlogon]
        comment = Network Logon Service
        path = /data/netlogon
        public = No
        guest ok = No
        share modes = No
this seems not as somebody can execute files which
are in this share
normally everybody should be allowed to read logon scripts
Regards