[Samba] netlogon problems

[RRuegner]

Radio Gong 2000 GmbH & Co. KG [Technik] schrieb:

> Unfortunatly that's no solution...
> 
> Need more help, please...
> 
> Thanks in advance
> 
> Sascha
> 
> Am Dienstag, 23. März 2004 09:59 schrieb RRuegner:
> 
>>Radio Gong 2000 GmbH & Co. KG [Technik] schrieb:
>>
>>>Hi @ all,
>>>
>>>I have two samba-servers running perfectly!
>>>
>>>Now I configured a third machine which provides some backups. Since I
>>>brought it up in the network the windows client won't execute the
>>>netlogon-scripts... When I turn off samba-services on the backup-machine
>>>it works again.
>>>
>>>Did I miss something??? Maybe you can open my eyes...
>>>
>>>Best regards
>>>
>>>Sascha
>>>
>>>
>>>Here my conf-files:
>>>
>>>PDC
>>>------------------------------------------------------------------
>>>
>>># Global parameters
>>>[global]
>>>        netbios name = Hunter
>>>        workgroup = SNEAKER
>>>        server string = SoundServer %v
>>>        realm = hunter.radiogong.intern
>>>        admin users = root, administrator, sascha
>>>        security = user
>>>        dns proxy = yes
>>>        wins proxy = Yes
>>>        wins support = Yes
>>>        ldap ssl = no
>>>        socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192
>>>SO_RCVBUF=8192
>>>        keepalive = 255
>>>        locking = 1
>>>        kernel oplocks = yes
>>>        blocking locks = yes
>>>        oplocks = yes
>>>        level2 oplocks = yes
>>>        large readwrite = yes
>>>        map to guest = Bad User
>>>        dos charset = ISO8859-15
>>>        unix charset = ISO8859-15
>>>        display charset = ISO8859-15
>>>        printing = cups
>>>        printcap name = cups
>>>        utmp = Yes
>>>        host msdfs = Yes
>>>
>>># NETWORK STUFF
>>>        interfaces = 192.168.10.1/24, 192.168.11.1/24
>>>        hosts allow = 192.168.
>>>        bind interfaces only = yes
>>>        nt acl support = yes
>>>        client schannel = auto
>>>        server schannel = yes
>>>        client signing = auto
>>>        server signing = no
>>>
>>># FEATURE STUFF
>>>        domain logons = yes
>>>        os level = 33
>>>        domain master = yes
>>>        preferred master = yes
>>>        local master = yes
>>>        time server = yes
>>>
>>># LOGON STUFF
>>>        logon script = logon.bat
>>>        logon drive =
>>>        logon home =
>>>        logon path =
>>>        template homedir =
>>>
>>>[netlogon]
>>>       comment = Network Logon Service
>>>       path = /data/netlogon
>>>       public = No
>>>       guest ok = No
>>>       share modes = No
>>>
>>># SHARES --------------------------------
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>BDC
>>>------------------------------------------------------------------
>>># Global parameters
>>>[global]
>>>        netbios name = Assassin
>>>        workgroup = SNEAKER
>>>        server string = FileServer %v
>>>        realm = assassin.radiogong.intern
>>>        admin users = root, administrator, sascha
>>>        security = user
>>>        dns proxy = yes
>>>#       wins proxy = Yes
>>>#       wins support = Yes
>>>        ldap ssl = no
>>>        socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192
>>>SO_RCVBUF=8192
>>>        keepalive = 255
>>>        locking = 1
>>>        kernel oplocks = yes
>>>        blocking locks = yes
>>>        oplocks = yes
>>>        level2 oplocks = yes
>>>        large readwrite = yes
>>>        map to guest = Bad User
>>>        dos charset = ISO8859-15
>>>        unix charset = ISO8859-15
>>>        display charset = ISO8859-15
>>>        printing = cups
>>>        printcap name = cups
>>>        utmp = Yes
>>>        host msdfs = Yes
>>>
>>># NETWORK STUFF
>>>        interfaces = 192.168.10.2/24
>>>        hosts allow = 192.168.
>>>        bind interfaces only = yes
>>>        nt acl support = yes
>>>        client schannel = auto
>>>        server schannel = no
>>>        client signing = auto
>>>        server signing = no
>>>
>>># FEATURE STUFF
>>>        domain logons = yes
>>>        os level = 32
>>>        domain master = no
>>>        preferred master = yes
>>>        local master = yes
>>>        time server = yes
>>>
>>># LOGON STUFF
>>>#       logon script = logon.bat
>>>        logon drive =
>>>        logon home =
>>>        logon path =
>>>        template homedir =
>>>
>>># SHARES --------------------------------
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>>BACKUP
>>>------------------------------------------------------------------
>>># Global parameters
>>>[global]
>>>        netbios name = Leo
>>>        workgroup = SNEAKER
>>>        server string = BackUpServer %v
>>>        realm = leo.radiogong.intern
>>>        admin users = root, administrator, sascha
>>>        security = share
>>># Use password server option only with security = server
>>>#       password server = hunter.radiogong.intern
>>>        dns proxy = yes
>>>#       wins proxy = Yes
>>>#       wins support = Yes
>>>        ldap ssl = no
>>>        socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192
>>>SO_RCVBUF=8192
>>>        keepalive = 255
>>>        locking = 1
>>>        kernel oplocks = yes
>>>        blocking locks = yes
>>>        oplocks = yes
>>>        level2 oplocks = yes
>>>        large readwrite = yes
>>>        map to guest = Bad User
>>>        dos charset = ISO8859-15
>>>        unix charset = ISO8859-15
>>>        display charset = ISO8859-15
>>>        printing = cups
>>>        printcap name = cups
>>>        utmp = Yes
>>>        host msdfs = Yes
>>>
>>># NETWORK STUFF
>>>        interfaces = 192.168.10.3/24
>>>        hosts allow = 192.168.
>>>        bind interfaces only = yes
>>>        nt acl support = yes
>>>#       client schannel = auto
>>>        server schannel = no
>>>#       client signing = auto
>>>#       server signing = auto
>>>
>>># FEATURE STUFF
>>>        domain logons = yes
>>>        os level = 32
>>>        domain master = no
>>>        preferred master = yes
>>>        local master = yes
>>>        time server = yes
>>>
>>># LOGON STUFF
>>>#       logon script = logon.bat
>>>        logon drive =
>>>        logon home =
>>>        logon path =
>>>        template homedir =
>>>
>>># SHARES --------------------------------
>>
>>Hi Sasha,
>>i am not really sure
>>but
>>[netlogon]
>>        comment = Network Logon Service
>>        path = /data/netlogon
>>        public = No
>>        guest ok = No
>>        share modes = No
>>this seems not as somebody can execute files which
>>are in this share
>>normally everybody should be allowed to read logon scripts
>>Regards
> 
> 
hi security = share cant be a samba host which executes logon scripts,
see my 2 mails in german i wrote to you direkt
logon scripts must be created with a windows editor
Regards