[Samba] member server resolv.conf question
Bob of Donelson Trophy
bob at donelsontrophy.net
Thu Dec 1 15:30:47 UTC 2016
On 2016-12-01 09:20, Bob of Donelson Trophy via samba wrote:
> Yesterday I was "tailing" a log file (nmbd, I think) and noticed
> complaints by my member server that there was another "domain master" at
> the ipaddress on my DC1.
>
> This morning Windows clients are being denied updates to
> "116.168.192.in-addr-arps/IN" (which I believe is the reverse zone.)
>
> I think I have an error in my smb.conf file for this server as I have
> had an issue in the past with domian master when I switched from an
> older member server to this newer one.
>
> My smb.conf (slightly sanitized.):
>
> adminlinux at dtmbr02:~$ cat /etc/samba/smb.conf
> [global]
> workgroup = DTDOM
> server string = Samba Server Version %v
> security = ads
> realm = DTSHRM.DT
> use sendfile = true
>
> log level = 4
>
> preferred master = yes
> domain master = yes
> dns proxy = yes
>
> host msdfs = no
>
> idmap_ldb:use rfc2307 = yes
> idmap config * : backend = tdb
> idmap config * : range = 50001-80000 <<default was
> 10000-299999
> ## map ids from the domain the range may not overlap !
> idmap config DTDOM : backend = ad
> idmap config DTDOM : schema_mode = rfc2307
> idmap config DTDOM : range = 10000-40000 << default was
> 10000-99999
> winbind separator = +
> winbind nss info = rfc2307
> winbind trusted domains only = no
> winbind enum users = yes
> winbind enum groups = yes
> winbind use default domain = yes
> winbind refresh tickets = yes
> winbind offline logon = yes
>
> ## wins server = 192.168.16.49 192.168.16.50
>
> template shell = /bin/bash
> template homedir = /home/samba/DTDOM/users/%U
>
> # user Administrator workaround, without it you are unable to set
> privileges
> username map = /etc/samba/samba_usermapping
>
> # For ACL support on member file server
>
> vfs objects = acl_xattr
> map acl inherit = yes
> store dos attributes = yes
>
> # Share Setting Globally
> usershare allow guests = no
> unix extensions = no
> reset on zero vc = yes
> veto files = /.bash_logout/.bash_profile/.bash_history/.bashrc/
> hide unreadable = yes
>
> # disable printing completely
> load printers = no
> printing = bsd
> printcap name = /dev/null
> disable spoolss = yes
>
> restrict anonymous = 2
> log file = /var/log/samba/log.%m
> max log size = 50
>
> #============================ Share Definitions
> ============================
>
> [testshare]
> comment = Test share
> path = /samba/testshare
> read only = no
> force group = "domain users"
> directory mask = 0770
> force directory mode = 0770
> create mask = 0660
> force create mode = 0660
> follow symlinks = yes
> wide links = yes
>
> I tried commenting out the "preferred master" and "domain master"
> entries but no change.
>
> What do I need to clean up here?
>
> Please help! It is a busy day here and I cannot work without this!
>
> --
> _______________________________
>
> Bob Wooden of Donelson Trophy
My apologies to everyone, the subject is incorrect. I am in a bite of a
panic here as I cannot work until this is resolved.
--
_______________________________
Bob Wooden of Donelson Trophy
More information about the samba
mailing list