Further to below, here are the syslog entries for an attempt to login from an XP/Pro workstation. While it is indicating a problem authenticating a machine account, the machine account does exist:

Jan 3 17:50:44 whenim64 smbd[11537]: [2009/01/03 17:50:44, 0] rpc_server/srv_netlog_nt.c:_net_auth_2(478) Jan 3 17:50:44 whenim64 smbd[11537]: _net_auth2: creds_server_check failed. Rejecting auth request from client SHAFEENA machine account SHAFEENA$ Jan 3 17:50:44 whenim64 smbd[11537]: [2009/01/03 17:50:44, 0] rpc_server/srv_netlog_nt.c:_net_auth_2(478) Jan 3 17:50:44 whenim64 smbd[11537]: _net_auth2: creds_server_check failed. Rejecting auth request from client SHAFEENA machine account SHAFEENA$


Here are the syslog entries for a share connection from another machine (hyperzip) which has not been logged out and back in since the DC switch took place. It can still connect to shares:

Jan 3 17:59:58 whenim64 smbd[11203]: [2009/01/03 17:59:58, 0] lib/util_sock.c:get_peer_addr(1221) Jan 3 17:59:58 whenim64 smbd[11203]: getpeername failed. Error was Transport endpoint is not connected Jan 3 17:59:58 whenim64 smbd[11606]: [2009/01/03 17:59:58, 0] lib/util_sock.c:get_peer_addr(1221) Jan 3 17:59:58 whenim64 smbd[11606]: getpeername failed. Error was Transport endpoint is not connected Jan 3 17:59:58 whenim64 smbd[11606]: [2009/01/03 17:59:58, 0] lib/util_sock.c:write_data(562) Jan 3 17:59:58 whenim64 smbd[11606]: write_data: write failure in writing to client 0.0.0.0. Error Connection reset by peer Jan 3 17:59:58 whenim64 smbd[11606]: [2009/01/03 17:59:58, 0] lib/util_sock.c:send_smb(761) Jan 3 17:59:58 whenim64 smbd[11606]: Error writing 4 bytes to client. -1. (Connection reset by peer) Jan 3 17:59:58 whenim64 smbd[11607]: [2009/01/03 17:59:58, 1] smbd/service.c:make_connection_snum(950) Jan 3 17:59:58 whenim64 smbd[11607]: hyperzip (192.168.2.12) connect to service archives initially as user garydale (uid=0, gid=1000) (pid 11607) Jan 3 17:59:59 whenim64 smbd[11607]: [2009/01/03 17:59:59, 1] smbd/service.c:make_connection_snum(950) Jan 3 17:59:59 whenim64 smbd[11607]: hyperzip (192.168.2.12) connect to service media$ initially as user garydale (uid=0, gid=1000) (pid 11607)


--------------------------

I'm trying to set up a new server to replace my previous domain
controller/file&print server on my home network. My old server was
running Debian/Etch on a 32bit sempron system with two HDs. The new one
is running an old 64bit single-core processor and 3 HDs configured into
multiple RAID  1 and 5 arrays (/boot as RAID 1 and /, /home, swap and a
/backup directory as RAID 5).  The new server is running Debian/Etch+1/2.

Samba was installed by default since I specified the new server as a
file & print server.  I rsync'ed the old /home to the new one to get the
files across. Then  I used SWAT to make my old server a member server
and the new one a domain controller. Since I only had a few accounts I
set them up manually on the new machine, taking care to ensure that the
new Unix ids matched the old ones.

File sharing is working well after I remapped the drives on a running
XP/Pro workstation. However, I can't get logins to work. I've set up
machine accounts for each XP/Pro workstation and used SWAT to create the
new Samba accounts and enable them (with the same password as before)
but XP/Pro refuses to allow the logins. I also tried mapping a share on
the old server to a directory on the new and I get the same problem -
it's having problems finding a DC.

Here's my smb.conf (minus most of the shares), if that helps (ps, I will
set the log level higher as part of my debugging so don't suggest I do
that. However, any suggestions on what may be going wrong are welcome.
:)  ):

# Samba config file created using SWAT
# from 192.168.2.11 (192.168.2.11)
# Date: 2009/01/03 15:47:32

[global]
   workgroup = RAHIM-DALE
   server string = %h server
   obey pam restrictions = Yes
   passdb backend = tdbsam
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n *password\supdated\ssuccessfully* .
   unix password sync = Yes
   syslog = 0
   log file = /var/log/samba/log.%m
   max log size = 1000
   add user script = /usr/sbin/useradd  -g users %u
   delete user script = /usr/sbin/userdel -r %u
   add group script = /usr/sbin/groupadd %g
   delete group script = /usr/sbin/groupdel %g
   add user to group script = /usr/sbin/usermod -G  %g %u
   add machine script = /usr/sbin/useradd -g machines -c Machine -d
/dev/null -s /bin/false %u\$
   logon script = scripts\logon.bat
   logon path = \\%L\profiles\%U
   logon drive = M:
   logon home = \\%L\%U
   domain logons = Yes
   preferred master = Yes
   domain master = Yes
   dns proxy = No
   wins support = Yes
   ldap ssl = no
   panic action = /usr/share/samba/panic-action %d
   idmap uid = 10000-20000
   idmap gid = 10000-20000
   username = root = administrator
   invalid users = root
   admin users = garydale, root
   printer admin = garydale
   printing = cups
   print command =
   lpq command = %p
   lprm command =
   include = /etc/samba/dhcp.conf

[homes]
   comment = Home Directories
   valid users = %S
   create mask = 0700
   directory mask = 0700
   browseable = No

[printers]
   comment = All Printers
   path = /var/spool/samba
   create mask = 0700
   printable = Yes
   browseable = No

[print$]
   comment = Printer Drivers
   path = /var/lib/samba/printers

[profiles]
   path = /home/samba/profiles
   read only = No

[netlogon]
   path = /home/samba/netlogon
   read only = No




--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Reply via email to