[Samba] PDC + BDC + LDAP. Advise need.

Proskurin Kirill k.proskurin at fxclub.org
Thu Oct 2 10:50:36 GMT 2008


Hello all!

First of all - I very new to Samba and don't really sure what i do all 
right. I'm ask some advise from community.

I'm make this configuration in my company:

PDC + Master LDAP:

smb.conf:
[global]

# Base
   workgroup = hq
   netbios name = dc
   server string = DC Server
   security = domain
   hosts allow = 172.16.1. 192.168.1. 127.
   encrypt passwords = yes
   admin users = admin
   time server = yes

# LOG
   log file = /var/log/samba/log.%m
   max log size = 500

# LDAP
   passdb backend = ldapsam:ldap://localhost/
   ldap suffix = ou=Samba,dc=fxclub,dc=org
   ldap user suffix = ou=Users
   ldap group suffix = ou=Groups
   ldap machine suffix = ou=Computers
   ldap admin dn = "cn=root,dc=fxclub,dc=org"
   ldap delete dn = no
   ldap ssl = off

# Tuning
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

# PDC
   local master = yes
   os level = 64
   domain master = yes
   preferred master = yes
   domain logons = yes

# Roaming profiles diabled
   logon path =

# WINS
   wins support = yes
   winbind use default domain = yes
   winbind separator = +

   dns proxy = no

# Charset settings
   display charset = koi8-r
   unix charset = koi8-r
   dos charset = cp866

# Use inherited ACLs for directories
   nt acl support = yes
   inherit acls = yes
   map acl inherit = yes

*scripts to add users,computers, etc*

BDC + Slave LDAP
smb.conf:
only difference from PDC:

# BDC
   local master = no
   os level = 50
   domain master = no
   preferred master = no
   domain logons = yes

# WINS
   wins support = no
   wins server = 172.16.1.2

   remote announce = 172.16.1.2/hq

OS: FreeBSD-6.3

Questions:
1) Is all right im my conf? May by im something missed?
2) My smbd.log full of this:
lib/util_sock.c:set_socket_options(261)
Failed to set socket option TCP_NODELAY (Error Connection reset by peer)

This errors *don`t* disappear if I comment "socket options"
3) For what im may need a security = domain?

-- 
Best regards,
Proskurin Kirill


More information about the samba mailing list