winbind and workstation account

2003-03-21 Thread Operator (SCHMIEDER it-solutions)
Hallo Jelmer,
thank you for that very fast answer. I checked that but i did not findout a
solution. I the script i called that commands:
useradd -s /bin/false -d /dev/null "machine_name"\$  
passwd -l "machine_name"\$  
smbpasswd -a -m "machine_name"  
Without success 

Do you have an example for that script ?? I find nothing in the web.

Thanks
Holger



-Ursprüngliche Nachricht-
Von: Jelmer Vernooij [mailto:[EMAIL PROTECTED]
Gesendet: Freitag, 21. März 2003 14:24
An: Operator (SCHMIEDER it-solutions)
Cc: '[EMAIL PROTECTED]'
Betreff: Re: winbind and workstation account


On Fri, Mar 21, 2003 at 02:18:24PM +0100, Operator (SCHMIEDER it-solutions)
wrote about 'winbind and workstation account':
> when i use winbind to connect a samba server to an existing nt-domain what
i
> have to do:

> a) create a workstation account (unix+samba account) for every workstation
> in the domain manualy
> b) the workstation account dos not matter because that is handled by the
PDC
> c) configure winbind (or rpc) to fetch the accounts from the nt-domain

Check the add user script (or command)

Jelmer

-- 
Jelmer Vernooij <[EMAIL PROTECTED]> - http://nl.linux.org/~jelmer/
 14:23:36 up 3 days, 20:37, 18 users,  load average: 0.38, 0.24, 0.20
Diese Mail wurde im Hause SCHMIEDER it-solutions GmbH auf Viren überprüft !


winbind and workstation account

2003-03-21 Thread Operator (SCHMIEDER it-solutions)
when i use winbind to connect a samba server to an existing nt-domain what i
have to do:

a) create a workstation account (unix+samba account) for every workstation
in the domain manualy
b) the workstation account dos not matter because that is handled by the PDC
c) configure winbind (or rpc) to fetch the accounts from the nt-domain

Thanks for every answer.
Diese Mail wurde im Hause SCHMIEDER it-solutions GmbH auf Viren überprüft !


Samba an NT40 Domain

2003-03-21 Thread Operator (SCHMIEDER it-solutions)
we have 2 NT40-SP6a Servers, on as PDC, one as BDC togehter with Samba
2.4.7a in on Network Segment. All the user-accounts are on the PDC - so we
use winbind. The samba server should work as BDC in that domain an hold the
profiles an the homes. Everythin works mostly but sometimes the clients dont
get an login-server an logon with there own local profile. In that case the
enviroment-variable LOGONSERVER on the client  is set to the local client.
The error message is "could not find a domain controller for the domain
"
We tried out different os-levels (1, 31, 64) without success. In the case of
the failure login we get the message "Workstation xxx$: no account in domain
! But - the client should not use the samba as logon-server for the accounts
- the accounts should checked by the MS-controllers. Whe we use "domain
logons = No" we can no more fetch the usernames and groups via winbind.

A protoclo trace shows me an Unicast (get Mailslot) to the PDC an an answer
from samba !!

Any ideas ?


nmblookup -R -U PDC DOMAIN#1C
brings the right list of all Domain-Controllers

Here is the main part of the samba.conf

[global]
workgroup = COMPANY250
netbios name = SERV1
netbios aliases = SERV1
server string = BDC %h (Samba %v)
interfaces = 10.250.10.20
bind interfaces only = Yes
security = DOMAIN
encrypt passwords = Yes
update encrypted = Yes
map to guest = Bad User
password server = SERV2
username map = /etc/samba/user.map
unix password sync = No
admin log = Yes
log level = 0
log file = /var/log/samba/%m.log
max log size = 50
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
domain admin group = COMPANY250+Domänen-Admins
domain logons = Yes
#os level = 17
wins proxy = No
wins server = 1.2.10.22
#wins support = Yes
default service = global
time offset = 120
winbind uid = 1-2
winbind gid = 1-2
winbind separator = +
winbind cache time = 10
winbind use default domain = yes
admin users = COMPANY250+Administrator, COMPANY250+kpichel,
COMPANY250+install
printer admin = +COMPANY250+Domänen-Admins
printing = lprng
dns proxy = No



Diese Mail wurde im Hause SCHMIEDER it-solutions GmbH auf Viren überprüft !