[Samba] Domain Member Server Problem

[John H Terpstra]

On Sunday 29 June 2008 23:31:56 Robert Steinmetz wrote:
> Help!
>
> Robert Steinmetz wrote:
> > We have a Windows Domain NT. We are setting up four samba Servers, two
> > new and 2 legacy servers.
> >
> > The new server are  Ubuntu AMD64 Linux with Samba 3.0.22 One of these
> > is the PDC. The legacy Servers are Solaris 8 running Samba 3.0.24. We
> > are using winbindd and local tdb files on the PDC for authentication.
> > We plan to migrate to LDAP latter. I have used SWAT to configure each
> > server.
> >
> > I have the PDC up and running, apparently working fine but each of the
> > member servers is behaving differently and a little oddly.
> >
> > I have a couple of simple questions first;
> >
> >    1) Should winbindd be running on the PDC?

Yes, but that depends on a number of configuration factors. You can get by 
without it.

> >    2) Should the member server have "Domain Login" set to "no"?

Correct. No is the correct setting.

> >    3) Is there an easy way for SWAT to show the Server name at the top
> > of each page? I sometimes get confused.

Swat is no longer being actively maintained, so this sort of change is 
unlikely - unless you would like to take over maintenance of it.

> > My current problem server the second Linux Member Server.
> >
> >    1) It is currently not showing up in client browse lists and asking
> > for a username and password and rejecting all of them.

Please refer to chapter 7 of Samba3-ByExample.  If the examples are not clear 
enough please let me know.

http://www.samba.org/samba/docs/Samba3-ByExample.pdf

> >    2) "wdinfo -u" returns a list of Domain Users, "wdinfo -t" succeeds
> > but "wdinfo -g" fails. "getent passwd" and "getent group" return lists
> > of local groups and passwords on the Member Server. "enumerate users"
> > and "enumerate groups" are set to yes on the PCD and the Server.

What configuration settings have you made to /etc/nsswitch.conf?

> > I have refrained form posting my smb.conf files in hopes the answer is
> > obvious, it usually is. If not I'll post any requested information.

- John T.