Re: Imposibilidad de unirse a dominio Windows 2000

2009-09-07 Por tema Javier Argentina
Reconozco que nadie tiene la obligación de contestar, pero ¿no se cae
ninguna idea?
Este problema me está complicando la vida.
Acepto cualquier sugerencia.

Gracias.



2009/9/2, JAP javier.debian.bb...@gmail.com:
 Estoy teniendo problemas para unirme al dominio, y eso que lo he hecho
 muchas veces en años anteriores.
 De hecho, hasta hace un mes, estaba unido sin problemas. Una rotura de
 disco me obligó a instalar todo de nuevo.
 Ya intenté todo lo posble y lo que he estudiado.

 ¿Alguno me puede tirar una idea de cuál puede ser el problema?
 Van todo los datos y configuraciones de importancia.

 Gracias

 Javier

 ---
 host: station91
 usuario: win-user5
 password: win-pass
 dominio: company
 realm: local.company
 KDC administrative server: serverpdc1
 KDC secondary server: serverbdc7

 ---


 # /etc/network/interfaces
 #
 # This file describes the network interfaces available on your system
 # and how to activate them. For more information, see interfaces(5).

 # The loopback network interface
 auto lo
 iface lo inet loopback

 # LOCAL
   allow-hotplug eth0
   auto eth0
   iface eth0 inet dhcp
   post-up route del default gw 10.111.1.254
   post-up route del -net 10.111.1.0 netmask 255.255.255.0 dev eth0
   post-up route add -net 10.0.0.0 netmask 255.0.0.0 dev eth0
   post-up net time set -S serverpdc1

 ---

 # /etc/krb5.conf

 [libdefaults]
 default_realm = LOCAL.COMPANY

 # The following krb5.conf variables are only for MIT Kerberos.
  krb4_config = /etc/krb.conf
  krb4_realms = /etc/krb.realms
  kdc_timesync = 1
  ccache_type = 4
  forwardable = true
  proxiable = true

 [realms]
 LOCAL.COMPANY = {
   kdc = serverbdc7
   kdc = serverpdc1
   kdc = serverbdc2
   kdc = serverbdc5
   admin_server = serverpdc1
 }

 [domain_realm]
   .local.company = LOCAL.COMPANY
   local.company = LOCAL.COMPANY

 [login]
   krb4_convert = true
   krb4_get_tickets = false

 ---


 # /etc/nsswitch.conf
 #
 # Example configuration of GNU Name Service Switch functionality.
 # If you have the `glibc-doc-reference' and `info' packages installed, try:
 # `info libc Name Service Switch' for information about this file.

 passwd:  files winbind ldap
 group:   files winbind ldap
 shadow:  files

 hosts:   files wins mdns4_minimal [NOTFOUND=return] dns mdns4
 networks:files

 protocols:   db files
 services:db files
 ethers:  db files
 rpc: db files

 netgroup:nis

 ---


 # /etc/samba/smb.conf
 # Samba config file created using SWAT
 # from UNKNOWN (��t)
 # Date: 2009/09/02 08:30:38

 [global]
   ldap ssl ads = Yes
   idmap gid = 1-2
   passwd chat = *Enter\snew\s*\spassword:* %n\n
 *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
   obey pam restrictions = Yes
   browse list = No
   dns proxy = No
   idmap uid = 1-2
   local master = No
   workgroup = COMPANY
   os level = 0
   winbind refresh tickets = Yes
   update encrypted = Yes
   printcap name = cups
   security = ADS
   winbind separator = +
   max log size = 1000
   lanman auth = Yes
   log file = /var/log/samba/log.%m
   include = /etc/samba/dhcp.conf
   wins server = eth0:10.111.1.201
   auth methods = winbind, krb5, ldap, guest, sam
   interfaces = eth0
   username map = /etc/samba/smbusers
   domain master = No
   winbind trusted domains only = yes
   realm = LOCAL.COMPANY
   winbind use default domain = Yes
   server string = %h - Jefe Almacenaje (13-6922)
   password server = serverbdc7, serverpdc1, *
   unix password sync = Yes
   template homedir = /home/%U
   syslog = 0
   panic action = /usr/share/samba/panic-action %d
   pam password change = Yes

 [homes]
   comment = Home Directories
   valid users = %S
   create mask = 0700
   directory mask = 0700
   browseable = No

 [printers]
   comment = All Printers
   path = /var/spool/samba
   create mask = 0700
   printable = Yes
   browseable = No

 [print$]
   comment = Printer Drivers
   path = /var/lib/samba/printers
 [homes]
   comment = Home Directories
   valid users = %S
   create mask = 0700
   directory mask = 0700
   browseable = No

 ---



 station91:~# wbinfo -m --verbose
 Domain Name DNS Domain  Trust Type  Transitive  In   Out
 BUILTIN NoneYes Yes  Yes
 IBPBW91 NoneYes Yes  Yes
 COMPANY LOCAL.COMPANY   NoneYes Yes  Yes

 

Imposibilidad de unirse a dominio Windows 2000

2009-09-02 Por tema JAP
Estoy teniendo problemas para unirme al dominio, y eso que lo he hecho 
muchas veces en años anteriores.
De hecho, hasta hace un mes, estaba unido sin problemas. Una rotura de 
disco me obligó a instalar todo de nuevo.

Ya intenté todo lo posble y lo que he estudiado.

¿Alguno me puede tirar una idea de cuál puede ser el problema?
Van todo los datos y configuraciones de importancia.

Gracias

Javier

---
host: station91
usuario: win-user5
password: win-pass
dominio: company
realm: local.company
KDC administrative server: serverpdc1
KDC secondary server: serverbdc7

---


# /etc/network/interfaces
#
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).

# The loopback network interface
auto lo
iface lo inet loopback

# LOCAL
 allow-hotplug eth0
 auto eth0
 iface eth0 inet dhcp
 post-up route del default gw 10.111.1.254
 post-up route del -net 10.111.1.0 netmask 255.255.255.0 dev eth0
 post-up route add -net 10.0.0.0 netmask 255.0.0.0 dev eth0
 post-up net time set -S serverpdc1

---

# /etc/krb5.conf

[libdefaults]
default_realm = LOCAL.COMPANY

# The following krb5.conf variables are only for MIT Kerberos.
krb4_config = /etc/krb.conf
krb4_realms = /etc/krb.realms
kdc_timesync = 1
ccache_type = 4
forwardable = true
proxiable = true

[realms]
LOCAL.COMPANY = {
kdc = serverbdc7
kdc = serverpdc1
kdc = serverbdc2
kdc = serverbdc5
admin_server = serverpdc1
}

[domain_realm]
 .local.company = LOCAL.COMPANY
 local.company = LOCAL.COMPANY

[login]
krb4_convert = true
krb4_get_tickets = false

---


# /etc/nsswitch.conf
#
# Example configuration of GNU Name Service Switch functionality.
# If you have the `glibc-doc-reference' and `info' packages installed, try:
# `info libc Name Service Switch' for information about this file.

passwd:  files winbind ldap
group:   files winbind ldap
shadow:  files

hosts:   files wins mdns4_minimal [NOTFOUND=return] dns mdns4
networks:files

protocols:   db files
services:db files
ethers:  db files
rpc: db files

netgroup:nis

---


# /etc/samba/smb.conf
# Samba config file created using SWAT
# from UNKNOWN (��t)
# Date: 2009/09/02 08:30:38

[global]
ldap ssl ads = Yes
idmap gid = 1-2
	passwd chat = *Enter\snew\s*\spassword:* %n\n 
*Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .

obey pam restrictions = Yes
browse list = No
dns proxy = No
idmap uid = 1-2
local master = No
workgroup = COMPANY
os level = 0
winbind refresh tickets = Yes
update encrypted = Yes
printcap name = cups
security = ADS
winbind separator = +
max log size = 1000
lanman auth = Yes
log file = /var/log/samba/log.%m
include = /etc/samba/dhcp.conf
wins server = eth0:10.111.1.201
auth methods = winbind, krb5, ldap, guest, sam
interfaces = eth0
username map = /etc/samba/smbusers
domain master = No
winbind trusted domains only = yes
realm = LOCAL.COMPANY
winbind use default domain = Yes
server string = %h - Jefe Almacenaje (13-6922)
password server = serverbdc7, serverpdc1, *
unix password sync = Yes
template homedir = /home/%U
syslog = 0
panic action = /usr/share/samba/panic-action %d
pam password change = Yes

[homes]
comment = Home Directories
valid users = %S
create mask = 0700
directory mask = 0700
browseable = No

[printers]
comment = All Printers
path = /var/spool/samba
create mask = 0700
printable = Yes
browseable = No

[print$]
comment = Printer Drivers
path = /var/lib/samba/printers
[homes]
comment = Home Directories
valid users = %S
create mask = 0700
directory mask = 0700
browseable = No

---



station91:~# wbinfo -m --verbose
Domain Name DNS Domain  Trust Type  Transitive  In   Out
BUILTIN NoneYes Yes  Yes
IBPBW91 NoneYes Yes  Yes
COMPANY LOCAL.COMPANY   NoneYes Yes  Yes

---


station91:~# wbinfo -u –verbose
(do nothing!!)

---


station91:~# wbinfo -g --verbose
BUILTIN+administrators
BUILTIN+users