Hi,
I am trying to create a PDC with openSuSE 11.2 with no success.
I don’t want/need LDAP because I will serve only 10 users at the moment.
So, here is what I did and did not:
I configured the domain name through yast’s samba server gui
I did not give a netbios name (I also tried to fill that with no results though, please see further)
I changed the signorseal key value on windows xp registry
I adjusted both client and server firewalls to allow samba traffic
I created users with same accounts as on xp clients on the linux machine
I created machine accounts by adding linux accounts adding the “$” sign at the end of the netbios name
I used the “smbpasswd -a” command for users and “smbpasswd -a -m” for client machines (with “$” at the end of the netbios name), tried both upper and lowercase for each (they are uppercase on clients)
I tried to connect from a windows xp sp3 machine. The username and password dialog pops up when I ask to join the domain and that is fine :). But when I put any username of the ones created on the linux machine (and samba) with it’s password, I get this error “Domain does not exist or could not be contacted” :’(. I get no clue in “/var/log/samba/log.smbd” file.
I tried several times (rebboted both server and client) but nothing happened.
Have you got any suggestions?
Thanks.
I assume that if you ping the server using its hostname the workstations
reach it, so try editing the /etc/samba/smb.conf file and add the
netbios name = serverName
I copy here my global configuration on the smb.conf file, and one more
thing, I let the workstation to create the machine account
[global]
workgroup = IIMPI
domain master = Yes
netbios name = Fenix
map to guest = Bad User
username map = /etc/samba/smbusers
add machine script = /usr/sbin/useradd -c Machine -d
/var/lib/nobody -s /bin/false %m$
logon drive = Z:
logon path = \%N\profiles$%U
logon home = \Fenix%U
template homedir = /var/lib/samba/netlogon/Default User
domain logons = Yes
os level = 255
preferred master = Yes
usershare allow guests = Yes
usershare max shares = 100
admin users = admin
local master = Yes
security = user
time server = yes
max log size = 5000
debug uid = Yes
wins support = Yes
name resolve order = wins lmhosts hosts
log level = 3
log file = /var/log/samba/smbdlog.%m
hide dot files = yes
VampirD
Microsoft Windows is like air conditioning
Stops working when you open a window.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.12 (GNU/Linux)
Comment: Using GnuPG with SUSE - http://enigmail.mozdev.org/
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I assume that if you ping the server using its hostname the workstations
> reach it, so try editing the /etc/samba/smb.conf file and add the
> netbios name = serverName
>
> I copy here my global configuration on the smb.conf file, and one more
> thing, I let the workstation to create the machine account
>
> [global]
> workgroup = IIMPI
> domain master = Yes
> netbios name = Fenix
> map to guest = Bad User
> username map = /etc/samba/smbusers
> add machine script = /usr/sbin/useradd -c Machine -d
> /var/lib/nobody -s /bin/false %m$
> logon drive = Z:
> logon path = \%N\profiles$%U
> logon home = \Fenix%U
> template homedir = /var/lib/samba/netlogon/Default User
> domain logons = Yes
> os level = 255
> preferred master = Yes
> usershare allow guests = Yes
> usershare max shares = 100
> admin users = admin
> local master = Yes
> security = user
> time server = yes
> max log size = 5000
> debug uid = Yes
> wins support = Yes
> name resolve order = wins lmhosts hosts
> log level = 3
> log file = /var/log/samba/smbdlog.%m
> hide dot files = yes
>
>
> - –
> VampirD
<snip>
ilias74;
Add root to your Samba uses, then use root and root’s password, to join the
domain. You need a user with domain administrative powers to add machines.
You can get more information with authorization in the logs if you increase
the the log level. Add the following parameter to the global section of
your /etc/samba/smb.conf:
log level = 1 auth:3
You should also check that both the samba server and netbios server are
enabled through your firewall. In fact while testing try turning the
firewall off.
If you still can not get it sorted out try posting the contents
of /etc/samba/smb.conf. Use substitute values to conceal any sensitive
information such as public IPs.
–
P. V.
“We’re all in this together, I’m pulling for you.” Red Green
First of all I would like to thank you for your replies. I used a mix of your suggestions and it all worked out fine.
My first openSuSE PDC is now up and running.
I hope I will someday find the time (and the reason) to do it more “seriously” with an LDAP backend.