[Samba] ActiveDirectory, DNS and Samba Server on different subnets

[Adrian Sender]

Ana,

Security = Domain is for NT4 domain member, you want security = ADS.

Have you read the docs? samba 3 by example chapter 7.

Cheers,

Adrian Sender

----- Original Message ----- 
From: "Ana Giordano" <amg_samba at yahoo.com>
To: <samba at lists.samba.org>
Cc: "Richardson, Brian" <brichardson at firstam.com>
Sent: Saturday, January 27, 2007 12:29 PM
Subject: [Samba] ActiveDirectory, DNS and Samba Server on different subnets


Hi.

I am trying to configure Samba in Domain security mode. I am getting an 
error message when running "net rpc join" (see below).
My Active Directory and Samba Sever are in different subnets. Do I required 
anything else in the smb.conf to address it? I tried adding the wins server 
option but it did not address the issue.
Also I am not sure if my Active Directory is configured to allow NT 
emulation. Would that explain the NT_STATUS_NOT_SUPPORT error message?

Active Directory (Win 2003 Server + SP2): 10.176.18.36
DNS (Windows Box):                                     10.176.18.21
Samba Server (Sun Solaris 9):                     10.191.20.44
Samba #:                3.0.23


./net join -S faidhc01sdcg05 -Uadmin%pwd
[2007/01/25 09:28:40, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(341)
Error in domain join verification (credential setup failed): 
NT_STATUS_NOT_SUPPORTED
Unable to join domain FAIDHC01SDCG05.

# Global parameters
[global]
workgroup = FAFIDDOM
netbios name = FAEGSNA01SCCU02
server string = 10.191.20.44
log file = /var/log/samba/log.%m
max log size = 50
username map = /opt/samba/lib/username.map
security = Domain
password server = faidhc01sdcg05
encrypt passwords = Yes
create mask = 0775
directory mask = 0775
kernel oplocks = No
oplocks = No
level2 oplocks = No
case sensitive = No
preserve case = Yes

[home]
guest ok = no
read only = no

[printers]
comment = All Printers
path = /var/spool/samba
printable = Yes
browseable = No

[vobstore]
comment = ETG VOBS
path = /apps/vobstore
guest ok = yes
read only = no



____________________________________________________________________________________
8:00? 8:25? 8:40? Find a flick in no time
with the Yahoo! Search movie showtime shortcut.
http://tools.search.yahoo.com/shortcuts/#news


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.