Well, it looks like I lied. If I log onto a workstation, I can get a net use command to get both the read-only resources on the server and the home directories. This is an improvement, but the workstation still cannot join the domain. The tests run (below) appear to indicate that the domain and the PDC are operating. I have verified that the directories indicated in the “add machine” script exist and are writable by root. The error message I get when trying to join a workstation to the domain (ERSL) is “the specified domain either does not exist or cannot be contacted.” Given that Samba is clearly running (and working), and that the domain name is clearly ERSL, this seems strange.
Here is the smb.conf file:
smb.conf is the main Samba configuration file.
You find a full commented
version at
/usr/share/doc/packages/samba/examples/smb.conf.SUSE if the
samba-doc package is installed.
[global]
workgroup = ERSL
passdb backend = tdbsam
printing = cups
printcap name = cups
printcap cache time = 750
cups options = raw
map to guest = Bad User
logon path = \%L\profiles.msprofile
logon home = \%L%U.9xprofile
logon drive = P:
usershare allow guests = No
add machine script = /usr/sbin/useradd -c Machine -d /var/lib/nobody -s /bin/false %m$
domain logons = Yes
domain master = Yes
local master = Yes
os level = 65
preferred master = Yes
security = user
wins support = No
idmap gid = 10000-20000
idmap uid = 10000-20000
kerberos method = secrets and keytab
netbios name = EARTH
include = /etc/samba/dhcp.conf
wins server =
[homes]
comment = Home Directories
valid users = %S, %D%w%S
browseable = No
read only = No
inherit acls = Yes
[profiles]
comment = Network Profiles Service
path = %H
read only = No
store dos attributes = Yes
create mask = 0600
directory mask = 0700
[users]
comment = All users
path = /home
read only = No
inherit acls = Yes
veto files = /aquota.user/groups/shares/
[groups]
comment = All groups
path = /home/groups
read only = No
inherit acls = Yes
[printers]
comment = All Printers
path = /var/tmp
printable = Yes
create mask = 0600
browseable = No
[print$]
comment = Printer Drivers
path = /var/lib/samba/drivers
write list = @ntadmin root
force group = ntadmin
create mask = 0664
directory mask = 0775
[geo323files]
comment = GCT Files
inherit acls = Yes
path = /applications/geo323files
read only = Yes
[geo423files]
comment = GEO and EVS 423 523 files
inherit acls = Yes
path = /applications/geo423files
read only = Yes
[geo425files]
comment = GEO and EVS 425 Files
inherit acls = Yes
path = /applications/geo425files
read only = Yes
[geo427files]
comment = GEO and EVS 427 Files
inherit acls = Yes
path = /applications/geo427files
read only = Yes
[images]
comment = Image Files
inherit acls = Yes
path = /applications/images
read only = Yes
[netlogon]
comment = Network Logon Service
path = /var/lib/samba/netlogon
write list = root
[testdata]
comment = Test Data Directory
inherit acls = Yes
path = /applications/testdata
read only = Yes
[testques]
comment = Test Question Repository
inherit acls = Yes
path = /applications/testques
read only = No
[ghost]
comment = GHOST files
inherit acls = Yes
path = /applications/ghost
read only = Yes
==========================================================
Here is the result of systemctl -l status smb.service
smb.service
- LSB: Samba SMB/CIFS file and print server [LEFT] Loaded: loaded (/etc/init.d/smb)[/LEFT] [LEFT] Active: active (running) since Mon 2014-09-08 15:24:37 EDT; 6min ago[/LEFT] [LEFT] Process: 22069 ExecStop=/etc/init.d/smb stop (code=exited, status=0/SUCCESS)[/LEFT] [LEFT] Process: 21092 ExecReload=/etc/init.d/smb reload (code=exited, status=0/SUCCESS)[/LEFT] [LEFT] Process: 22079 ExecStart=/etc/init.d/smb start (code=exited, status=0/SUCCESS)[/LEFT] [LEFT] CGroup: /system.slice/smb.service[/LEFT] [LEFT] 22090 /usr/sbin/smbd -D -s /etc/samba/smb.conf[/LEFT] [LEFT] 22091 /usr/sbin/smbd -D -s /etc/samba/smb.conf[/LEFT] [LEFT] 22093 /usr/sbin/smbd -D -s /etc/samba/smb.conf[/LEFT] [LEFT]
[/LEFT] [LEFT]Sep 08 15:24:37 earth smb[22079]: Starting Samba SMB daemon …done
[/LEFT] [LEFT]Sep 08 15:24:37 earth systemd[1]: Started LSB: Samba SMB/CIFS file and print server.[/LEFT] [LEFT]Sep 08 15:25:55 earth smbd[22120]: [2014/09/08 15:25:55.467021, 0] …/source3/rpc_server/netlogon/srv_netlog_nt.c:975(_netr_ServerAuthenticate3)
[/LEFT] [LEFT]Sep 08 15:25:55 earth smbd[22120]: _netr_ServerAuthenticate3: failed to get machine password for account ORINOCO$: NT_STATUS_NONE_MAPPED[/LEFT] [LEFT]Sep 08 15:25:55 earth smbd[22120]: [2014/09/08 15:25:55.468923, 0] …/source3/rpc_server/netlogon/srv_netlog_nt.c:975(_netr_ServerAuthenticate3)[/LEFT] [LEFT]Sep 08 15:25:55 earth smbd[22120]: _netr_ServerAuthenticate3: failed to get machine password for account ORINOCO$: NT_STATUS_NONE_MAPPED[/LEFT] [LEFT]Sep 08 15:30:26 earth smbd[22151]: [2014/09/08 15:30:26.754747, 0] …/source3/rpc_server/netlogon/srv_netlog_nt.c:975(_netr_ServerAuthenticate3)[/LEFT] [LEFT]Sep 08 15:30:26 earth smbd[22151]: _netr_ServerAuthenticate3: failed to get machine password for account GREYBULL$: NT_STATUS_NONE_MAPPED[/LEFT] [LEFT]Sep 08 15:30:26 earth smbd[22151]: [2014/09/08 15:30:26.756827, 0] …/source3/rpc_server/netlogon/srv_netlog_nt.c:975(_netr_ServerAuthenticate3)[/LEFT] [LEFT]Sep 08 15:30:26 earth smbd[22151]: _netr_ServerAuthenticate3: failed to get machine password for account GREYBULL$: NT_STATUS_NONE_MAPPED
========================================================
[/LEFT]Here is the result of systemctl -l status nmb.service
[LEFT]nmb.service - LSB: Samba NetBIOS naming service over IP
[/LEFT] [LEFT] Loaded: loaded (/etc/init.d/nmb)[/LEFT] [LEFT] Active: active (running) since Mon 2014-09-08 15:24:41 EDT; 5min ago
[/LEFT] [LEFT] Process: 22096 ExecStop=/etc/init.d/nmb stop (code=exited, status=0/SUCCESS)
[/LEFT] [LEFT] Process: 20329 ExecReload=/etc/init.d/nmb reload (code=exited, status=3)[/LEFT] [LEFT] Process: 22106 ExecStart=/etc/init.d/nmb start (code=exited, status=0/SUCCESS)[/LEFT] [LEFT] CGroup: /system.slice/nmb.service[/LEFT] [LEFT] 22115 /usr/sbin/nmbd -D -s /etc/samba/smb.conf[/LEFT] [LEFT]
[/LEFT] [LEFT]Sep 08 15:24:41 earth systemd[1]: Starting LSB: Samba NetBIOS naming service over IP…[/LEFT] [LEFT]Sep 08 15:24:41 earth nmb[22106]: Starting Samba NMB daemon …done[/LEFT] [LEFT]Sep 08 15:24:41 earth systemd[1]: Started LSB: Samba NetBIOS naming service over IP.
[/LEFT]
[LEFT]
[/LEFT]