Re: [Samba] Samba 3.0.0 RC1: Unable to find a suitable server
> Pls send more details about connecting FC3 machine to ADS. Please visit http://www.samba.org/samba/docs/man/Samba-HOWTO-Collection/ -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.0 RC1: Unable to find a suitable server
Pls send more details about connecting FC3 machine to ADS. thanks. -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.0 RC1: Unable to find a suitable server
> Does this apply to you? (from the 3.0.0rc2 WHATSNEW) > > MIT kerberos 1.3.1 supports the ARCFOUR-HMAC-MD5 encryption > type which is neccessary for servers on which the > administrator password has not been changed, or kerberos-enabled > SMB connections to servers that require Kerberos SMB signing. > Besides this one difference, either MIT or Heimdal Kerberos > distributions are usable by Samba 3.0. Uh oh. Well, I guess I didn't make my homework well enough. I'll try this out tomorrow and get back to you with the results. Cheers, Axel. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.0 RC1: Unable to find a suitable server
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Mon, 8 Sep 2003, Axel Suppantschitsch wrote: > Anyway, my problems with Kerberos 5 (I am using the MIT version and not > Heimdal) and SMB signing (Windows 2003 Server?) still exist. I'll open > two new threads for them, maybe we can resolve them as effectivly as the > "ads join bug". Thanks for your help! What version of MIT? Have I asked you this? (sorry...it's all running together now). Does this apply to you? (from the 3.0.0rc2 WHATSNEW) MIT kerberos 1.3.1 supports the ARCFOUR-HMAC-MD5 encryption type which is neccessary for servers on which the administrator password has not been changed, or kerberos-enabled SMB connections to servers that require Kerberos SMB signing. Besides this one difference, either MIT or Heimdal Kerberos distributions are usable by Samba 3.0. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "You can never go home again, Oatman, but I guess you can shop there." --John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE/XIK7IR7qMdg1EfYRAu5TAJ9AJ35dbxJfqiVBZLuUMItPJO4mDwCgr/gh j1oQhDRacL5Dj8T84HJbHeo= =J5JP -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.0 RC1: Unable to find a suitable server
Thanks for your update, it seems to be working now. log.winbindd shows following: [2003/09/08 11:43:59, 1] nsswitch/winbindd_util.c:add_trusted_domain(149) Added domain SAMBA30 SAMBA30.TEST Anyway, my problems with Kerberos 5 (I am using the MIT version and not Heimdal) and SMB signing (Windows 2003 Server?) still exist. I'll open two new threads for them, maybe we can resolve them as effectivly as the "ads join bug". Thanks for your help! Cheers, Axel. Quoting "Gerald (Jerry) Carter" <[EMAIL PROTECTED]>: > OK. I think we can handle this (no workgroup defined in smb.conf; only a > realm) in the current SAMBA_3_0 cvs. I just checked in the fix so give > the anonymous cvs tree a little bit of time to sync up before you > update. -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.0 RC1: Unable to find a suitable server
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 5 Sep 2003, Gerald (Jerry) Carter wrote: > > > Added domain MYGROUP > > > ads_connect for domain MYGROUP failed: No such file or directory > > > scanning trusted domain list > > > > Patch attached. > > This patch is incomplete. Hold on. Almost done. Sorry I sent it > too soon. OK. I think we can handle this (no workgroup defined in smb.conf; only a realm) in the current SAMBA_3_0 cvs. I just checked in the fix so give the anonymous cvs tree a little bit of time to sync up before you update. cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "You can never go home again, Oatman, but I guess you can shop there." --John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD4DBQE/WM7pIR7qMdg1EfYRAki/AJifPhpT25pdKK1BQFvQ5x1d8rRFAKDFwq8D u3FVrgVb1fkJR/9o/e7q0A== =+k0b -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.0 RC1: Unable to find a suitable server
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Fri, 5 Sep 2003, Gerald (Jerry) Carter wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > On Fri, 5 Sep 2003, Axel Suppantschitsch wrote: > > > Just updated and recompiled my cvs version. "net ads join" is working > > now, the samba server is added to "Active Directory Users and Computers" > > without any error. Anyway, I didn't get any Kerberos credentials during > > the join, so klist shows nothing afterwards. "smbclient -k" won't work, > > throwing "session setup failed: NT_STATUS_OK". > > The kerberos signing requires the MIT krb5 1.3.1 libs from what I > understand. It doesn't work with Heimdal yet i don't think. > > > Added domain MYGROUP > > ads_connect for domain MYGROUP failed: No such file or directory > > scanning trusted domain list > > Patch attached. This patch is incomplete. Hold on. Almost done. Sorry I sent it too soon. cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE/WMIAIR7qMdg1EfYRAmGJAJsFT9hQuBPpM3d/4SKrWzYJgGg63wCfW4/1 nc2pXEaSC/oHImhaYyj4hN0= =cmn2 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.0 RC1: Unable to find a suitable server
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Fri, 5 Sep 2003, Axel Suppantschitsch wrote:
> Just updated and recompiled my cvs version. "net ads join" is working
> now, the samba server is added to "Active Directory Users and Computers"
> without any error. Anyway, I didn't get any Kerberos credentials during
> the join, so klist shows nothing afterwards. "smbclient -k" won't work,
> throwing "session setup failed: NT_STATUS_OK".
The kerberos signing requires the MIT krb5 1.3.1 libs from what I
understand. It doesn't work with Heimdal yet i don't think.
> Added domain MYGROUP
> ads_connect for domain MYGROUP failed: No such file or directory
> scanning trusted domain list
Patch attached.
cheers, jerry
--
Hewlett-Packard- http://www.hp.com
SAMBA Team -- http://www.samba.org
GnuPG Key http://www.plainjoe.org/gpg_public.asc
"You can never go home again, Oatman, but I guess you can shop there."
--John Cusack - "Grosse Point Blank" (1997)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: For info see http://quantumlab.net/pine_privacy_guard/
iD8DBQE/WLWQIR7qMdg1EfYRAiuWAJ493kq3FDVPOkYk63W9I3TWtSHTUQCdFdik
NdP5DeLvL8KPZB/cv8oIIgc=
=LIwi
-END PGP SIGNATURE-
Index: nsswitch/winbindd_util.c
===
RCS file: /data/cvs/samba/source/nsswitch/winbindd_util.c,v
retrieving revision 1.73.2.33
diff -u -r1.73.2.33 winbindd_util.c
--- nsswitch/winbindd_util.c27 Aug 2003 22:05:52 - 1.73.2.33
+++ nsswitch/winbindd_util.c5 Sep 2003 16:10:27 -
@@ -81,6 +81,13 @@
{
struct winbindd_domain *domain;
char *contact_name;
+ char *alternative_name = NULL;
+
+ /* ignore alt_name if we are not in an AD domain */
+
+ if ( (lp_security() == SEC_ADS) && alt_name && *alt_name) {
+ alternative_name = alt_name;
+ }
/* We can't call domain_list() as this function is called from
init_domain_list() and we'll get stuck in a loop. */
@@ -89,9 +96,9 @@
strcasecmp(domain_name, domain->alt_name) == 0) {
return domain;
}
- if (alt_name && *alt_name) {
- if (strcasecmp(alt_name, domain->name) == 0 ||
- strcasecmp(alt_name, domain->alt_name) == 0) {
+ if (alternative_name && *alternative_name) {
+ if (strcasecmp(alternative_name, domain->name) == 0 ||
+ strcasecmp(alternative_name, domain->alt_name) == 0) {
return domain;
}
}
@@ -108,13 +115,13 @@
ZERO_STRUCTP(domain);
/* prioritise the short name */
- if (strchr_m(domain_name, '.') && alt_name && *alt_name) {
- fstrcpy(domain->name, alt_name);
+ if (strchr_m(domain_name, '.') && alternative_name && *alternative_name) {
+ fstrcpy(domain->name, alternative_name);
fstrcpy(domain->alt_name, domain_name);
} else {
fstrcpy(domain->name, domain_name);
- if (alt_name) {
- fstrcpy(domain->alt_name, alt_name);
+ if (alternative_name) {
+ fstrcpy(domain->alt_name, alternative_name);
}
}
@@ -261,7 +268,7 @@
/* Add ourselves as the first entry */
- domain = add_trusted_domain( lp_workgroup(), NULL, &cache_methods, NULL);
+ domain = add_trusted_domain( lp_workgroup(), lp_realm(), &cache_methods, NULL);
if (!secrets_fetch_domain_sid(domain->name, &domain->sid)) {
DEBUG(1, ("Could not fetch sid for our domain %s\n",
--
To unsubscribe from this list go to the following URL and read the
instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.0 RC1: Unable to find a suitable server
Just updated and recompiled my cvs version. "net ads join" is working now, the samba server is added to "Active Directory Users and Computers" without any error. Anyway, I didn't get any Kerberos credentials during the join, so klist shows nothing afterwards. "smbclient -k" won't work, throwing "session setup failed: NT_STATUS_OK". There is another problem with the winbindd, it won't start. Besides the failing SMB signing with my Win2003 Server, ads_connect still tries to connect to "domain MYGROUP" instead of connecting to my ADS. [2003/09/05 12:10:08, 1] nsswitch/winbindd.c:main(832) winbindd version CVS 3.0.0rc3 started. Copyright The Samba Team 2000-2003 [2003/09/05 12:10:09, 1] libsmb/smb_signing.c:signing_good(227) signing_good: SMB signature check failed on seq 1! [2003/09/05 12:10:09, 0] libsmb/clientgen.c:cli_receive_smb(121) SMB Signature verification failed on incoming packet! [2003/09/05 12:10:09, 1] libsmb/smb_signing.c:signing_good(227) signing_good: SMB signature check failed on seq 1! [2003/09/05 12:10:09, 0] libsmb/clientgen.c:cli_receive_smb(121) SMB Signature verification failed on incoming packet! [2003/09/05 12:10:09, 1] libsmb/smb_signing.c:signing_good(227) signing_good: SMB signature check failed on seq 1! [2003/09/05 12:10:09, 0] libsmb/clientgen.c:cli_receive_smb(121) SMB Signature verification failed on incoming packet! [2003/09/05 12:10:09, 1] nsswitch/winbindd_util.c:add_trusted_domain(142) Added domain MYGROUP [2003/09/05 12:10:10, 1] nsswitch/winbindd_ads.c:ads_cached_connection(66) ads_connect for domain MYGROUP failed: No such file or directory [2003/09/05 12:10:10, 1] nsswitch/winbindd_util.c:add_trusted_domains(199) scanning trusted domain list Any suggestions? Cheers, Axel. -Original Message- From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED] Sent: Donnerstag, 04. September 2003 21:47 To: Axel Suppantschitsch Cc: [EMAIL PROTECTED] Subject: RE: [Samba] Samba 3.0.0 RC1: Unable to find a suitable server I just checked in a fix for this into CVS. If you could test it as well that would be great. The change was to utils/net_ads.c cheers, jerry -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
RE: [Samba] Samba 3.0.0 RC1: Unable to find a suitable server
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wed, 3 Sep 2003, Axel Suppantschitsch wrote: > Is there any workaround for Bug #371? Otherwise I'm stuck with testing > Samba 3.0's behaviour in my university's ADS environment 'til the > release of RC3. I wonder that other people on the mailing list don't > seem to experience that problem, as they got your RCx binaries working > with ADS... > > BTW: There seems to be another problem with your RH9 RC2 binary besides > bug #371, as ads_connect/ads_startup throws "No such file or directory" > at the end of the not working net ads join process or is this connected > to bug #371? > > [2003/09/03 10:32:32, 4] libsmb/namequery.c:get_dc_list(1289) > get_dc_list: no servers found > [2003/09/03 10:32:32, 1] utils/net_ads.c:ads_startup(176) > ads_connect: No such file or directory > [2003/09/03 10:32:32, 2] utils/net.c:main(711) > return code = -1 > [EMAIL PROTECTED] root]# I just checked in a fix for this into CVS. If you could test it as well that would be great. The change was to utils/net_ads.c cheers, jerry -- Hewlett-Packard- http://www.hp.com SAMBA Team -- http://www.samba.org GnuPG Key http://www.plainjoe.org/gpg_public.asc "You can never go home again, Oatman, but I guess you can shop there." --John Cusack - "Grosse Point Blank" (1997) -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.1 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE/V5a6IR7qMdg1EfYRAjXCAKDNvSsDpnv+GVAnsx38YnragzTmFwCfaULo Q5lrmn4joOs89CZxVc0p4mU= =FyzI -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Samba 3.0.0 RC1: Unable to find a suitable server
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 19 Aug 2003, Axel Suppantschitsch wrote: > The most interesting part is: > > [2003/08/19 14:39:56, 6] libads/ldap.c:ads_find_dc(147) > ads_find_dc: looking for domain 'WORKGROUP' > [2003/08/19 14:39:56, 8] libsmb/namequery.c:get_sorted_dc_list(1215) > get_sorted_dc_list: attempting lookup using [lmhosts wins host bcast] > [2003/08/19 14:39:56, 10] libsmb/namequery.c:internal_resolve_name(989) > internal_resolve_name: looking up WORKGROUP#1c > > Although ADS is configured ads_find_dc will search for the "domain > 'WORKGROUP' instead of searching for the "realm 'SAMBA30.TEST'". Yeah. this is strange. I'll look into it (logged as bug 371). cheers, jerry -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.0 (GNU/Linux) Comment: For info see http://quantumlab.net/pine_privacy_guard/ iD8DBQE/T4EbIR7qMdg1EfYRAiIvAKC4EnMSn/jlJbKocEdZLtKUDfPuHACg6053 iggT/uWc50Syq5SSP5JCwPY= =CNf7 -END PGP SIGNATURE- -- To unsubscribe from this list go to the following URL and read the instructions: http://lists.samba.org/mailman/listinfo/samba
[Samba] Samba 3.0.0 RC1: Unable to find a suitable server
Hiya, I compiled the RPMs of Samba 3.0.0 RC1 according to "../samba-3.0.0rc1/packaging/RedHat/samba.spec" and installed the binaries from the freshly compiled rpm on my up2date Redhat 9.0 Server. The command "net join -U Administrator%** -d10" creates following error: * SNIP * [EMAIL PROTECTED] RedHat]# net join -U Administrator% -d10 [2003/08/19 14:39:55, 5] lib/debug.c:debug_dump_status(359) INFO: Current debug levels: all: True/10 tdb: False/0 printdrivers: False/0 lanman: False/0 smb: False/0 rpc_parse: False/0 rpc_srv: False/0 rpc_cli: False/0 passdb: False/0 sam: False/0 auth: False/0 winbind: False/0 vfs: False/0 idmap: False/0 [2003/08/19 14:39:55, 3] param/loadparm.c:lp_load(3907) lp_load: refreshing parameters [2003/08/19 14:39:55, 3] param/loadparm.c:init_globals(1301) Initialising global parameters [2003/08/19 14:39:55, 3] param/params.c:pm_process(566) params.c:pm_process() - Processing configuration file "/etc/samba/smb.conf" [2003/08/19 14:39:55, 3] param/loadparm.c:do_section(3410) Processing section "[global]" doing parameter realm = SAMBA30.TEST doing parameter server string = Samba Server doing parameter security = ADS doing parameter client lanman auth = No doing parameter client plaintext auth = No doing parameter log file = /var/log/samba/log.%m doing parameter max log size = 50 doing parameter socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192 doing parameter dns proxy = No [2003/08/19 14:39:55, 4] param/loadparm.c:lp_load(3939) pm_process() returned Yes [2003/08/19 14:39:55, 7] param/loadparm.c:lp_servicenumber(4049) lp_servicenumber: couldn't find homes [2003/08/19 14:39:55, 10] param/loadparm.c:set_server_role(3857) set_server_role: role = ROLE_DOMAIN_MEMBER [2003/08/19 14:39:55, 5] lib/charcnv.c:charset_name(74) Substituting charset 'UTF-8' for LOCALE [2003/08/19 14:39:55, 5] lib/charcnv.c:charset_name(74) Substituting charset 'UTF-8' for LOCALE [2003/08/19 14:39:56, 5] lib/charcnv.c:charset_name(74) Substituting charset 'UTF-8' for LOCALE [2003/08/19 14:39:56, 5] lib/charcnv.c:charset_name(74) Substituting charset 'UTF-8' for LOCALE [2003/08/19 14:39:56, 5] lib/charcnv.c:charset_name(74) Substituting charset 'UTF-8' for LOCALE [2003/08/19 14:39:56, 5] lib/charcnv.c:charset_name(74) Substituting charset 'UTF-8' for LOCALE [2003/08/19 14:39:56, 5] lib/charcnv.c:charset_name(74) Substituting charset 'UTF-8' for LOCALE [2003/08/19 14:39:56, 5] lib/charcnv.c:charset_name(74) Substituting charset 'UTF-8' for LOCALE [2003/08/19 14:39:56, 5] lib/charcnv.c:charset_name(74) Substituting charset 'UTF-8' for LOCALE [2003/08/19 14:39:56, 5] lib/charcnv.c:charset_name(74) Substituting charset 'UTF-8' for LOCALE [2003/08/19 14:39:56, 5] lib/util.c:init_names(270) Netbios name list:- my_netbios_names[0]="SAMBA30SRV" [2003/08/19 14:39:56, 2] lib/interface.c:add_interface(79) added interface ip=192.168.0.201 bcast=192.168.0.255 nmask=255.255.255.0 [2003/08/19 14:39:56, 6] libads/ldap.c:ads_find_dc(147) ads_find_dc: looking for domain 'WORKGROUP' [2003/08/19 14:39:56, 8] libsmb/namequery.c:get_sorted_dc_list(1215) get_sorted_dc_list: attempting lookup using [lmhosts wins host bcast] [2003/08/19 14:39:56, 10] libsmb/namequery.c:internal_resolve_name(989) internal_resolve_name: looking up WORKGROUP#1c [2003/08/19 14:39:56, 5] lib/gencache.c:gencache_init(59) Opening cache file at /var/cache/samba/gencache.tdb [2003/08/19 14:39:56, 10] lib/gencache.c:gencache_get(285) Cache entry with key = NBT/WORKGROUP#1C couldn't be found [2003/08/19 14:39:56, 5] libsmb/namecache.c:namecache_fetch(195) no entry for WORKGROUP#1C found. [2003/08/19 14:39:56, 10] lib/gencache.c:gencache_del(213) Deleting cache entry (key = NBT/WORKGROUP#1C) [2003/08/19 14:39:56, 3] libsmb/namequery.c:resolve_lmhosts(850) resolve_lmhosts: Attempting lmhosts lookup for name WORKGROUP<0x1c> [2003/08/19 14:39:56, 4] libsmb/namequery.c:getlmhostsent(598) getlmhostsent: lmhost entry: 127.0.0.1 localhost [2003/08/19 14:39:56, 3] libsmb/namequery.c:resolve_wins(748) resolve_wins: Attempting wins lookup for name WORKGROUP<0x1c> [2003/08/19 14:39:56, 3] libsmb/namequery.c:resolve_wins(751) resolve_wins: WINS server resolution selected and no WINS servers listed. [2003/08/19 14:39:56, 5] libsmb/namequery.c:resolve_hosts(899) resolve_hosts: Attempting to resolve DC's for WORKGROUP using DNS [2003/08/19 14:39:56, 3] libsmb/namequery.c:name_resolve_bcast(690) name_resolve_bcast: Attempting broadcast lookup for name WORKGROUP<0x1c> [2003/08/19 14:39:56, 10] lib/util_sock.c:open_socket_in(655) bind succeeded on port 0 [2003/08/19 14:39:56, 5] lib/util_sock.c:print_socket_options(105) socket option SO_KEEPALIVE = 0 [2003/08/19 14:39:56, 5] lib/util_sock.c:print_socket_options(105) socket option SO_REUSEADDR = 1 [2003/08/19 14:39:56, 5] lib/util_sock.c:print_socket_opti
