Re: [Samba] samba 3 and active directory computers
Ok, I am going to tackle compiling samba from source and go from there. I have compiled a lot of other things including samba4 before from source on Ubuntu so no big deal. I was hoping for a different fix, but I'll go that route and go from there. On Thu, Dec 16, 2010 at 1:18 PM, Volker Lendecke wrote: > On Thu, Dec 16, 2010 at 10:32:15AM -0600, Ben Cone wrote: > > > > I will note that Samba installed from Ubuntu's repositories does not > include > > the file ntlmssp.c on my system. I did grab a copy of the file, put it > in > > the proper place, restarted samba, and I see the same things in my logs. > > The samba version from the repository is 3.4.7. > > Did you recompile Samba? I'm not sure, but from what you > write sounds like you did not. > > If you want official Ubuntu repos with that patch, you need > to contact Canonical support about this. You might also > contact one of the companies listed under > http://samba.org/samba/support to assist you to compile > Samba for you. > > > I am still locked into how to make this work. It reads that this seems > not > > to be a problem at all in Samba 6 and I am debating installing the latest > > stable version of samba from source instead of aptitude. Of course, that > > means I don't get patches from Ubuntu for it but once I get this going I > am > > hoping to not have to do any real work on it again for a couple of years. > > That's a valid request. But apparently you found a but in > what Ubuntu ships. One thing to look at might be to remove > the "force group". If you can live without that, it might > help you work around that bug. > > Volker > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] samba 3 and active directory computers
HmmmSame problem still. I will note that Samba installed from Ubuntu's repositories does not include the file ntlmssp.c on my system. I did grab a copy of the file, put it in the proper place, restarted samba, and I see the same things in my logs. The samba version from the repository is 3.4.7. I am still locked into how to make this work. It reads that this seems not to be a problem at all in Samba 6 and I am debating installing the latest stable version of samba from source instead of aptitude. Of course, that means I don't get patches from Ubuntu for it but once I get this going I am hoping to not have to do any real work on it again for a couple of years. Ben On Thu, Dec 16, 2010 at 4:01 AM, Volker Lendecke wrote: > On Wed, Dec 15, 2010 at 05:00:52PM -0600, Ben Cone wrote: > > Installed Samba 3 with Winbind on Ubuntu server 10.04 x64. > > > > User accounts authenticate beautifully using the domain. wbinfo -u and > > wbinfo -g show me all of my domain user accounts and groups respectively. > > > > I want to use Active Directory to deploy software to the computers, > however, > > I cannot get the computers in active directory to be able to authenticate > to > > the Samba server. > > > > Here is what I have in my error logs. > > > > [2010/12/15 16:48:06, 3] libsmb/ntlmssp.c:745(ntlmssp_server_auth) > > Got user=[] domain=[] workstation=[IT-OFFICE2] len1=1 len2=0 > > There's https://bugzilla.samba.org/show_bug.cgi?id=7817. You > might want to try the attached patch which fixed it. > > With best regards, > > Volker Lendecke > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] samba 3 and active directory computers
Installed Samba 3 with Winbind on Ubuntu server 10.04 x64. User accounts authenticate beautifully using the domain. wbinfo -u and wbinfo -g show me all of my domain user accounts and groups respectively. I want to use Active Directory to deploy software to the computers, however, I cannot get the computers in active directory to be able to authenticate to the Samba server. Here is what I have in my error logs. [2010/12/15 16:48:06, 3] libsmb/ntlmssp.c:745(ntlmssp_server_auth) Got user=[] domain=[] workstation=[IT-OFFICE2] len1=1 len2=0 and [2010/12/15 16:48:09, 3] smbd/service.c:807(make_connection_snum) Connect path is '/home/OFFICE2008/apps' for service [apps] [2010/12/15 16:48:09, 0] smbd/service.c:833(make_connection_snum) make_connection: connection to apps denied due to security descriptor. [2010/12/15 16:48:09, 3] smbd/error.c:60(error_packet_set) error packet at smbd/reply.c(689) cmd=117 (SMBtconX) NT_STATUS_ACCESS_DENIED And below is my smb.conf [global] prefered master = no server string = file server security = ADS netbios name = storage realm = OFFICE.DOMAIN.COM password server = swerver2008.office.domain.com encrypt passwords = yes workgroup = OFFICE2008 idmap uid = 500-1000 idmap gid = 500-1000 winbind separator = + winbind enum users = yes winbind enum groups = yes winbind use default domain = yes winbind refresh tickets = yes winbind nested groups = yes ;template homedir = /home/%D/%U template shell = /bin/bash client use spnego = yes domain master = no #logging log file = /var/log/samba/log.%m log level = 3 max log size = 1000 syslog = 0 panic action = /usr/share/samba/panic-action [office] comment = Directory for files general office share path= /office Valid Users =...@office.domain.com+officestaff ; public=yes writable=yes browseable=yes create mask = 0770 force create mode = 0770 force directory mode = 0770 force group = @OFFICE.DOMAIN.COM+officeStaff [apps] comment = Directory for applications to be deployed using group policy path = /home/OFFICE2008/apps ; Valid Users =...@office.domain.com+officecomputers public=yes writable=yes browseable=yes force create mode = 0755 force directory mode = 0755 force group = @OFFICE.DOMAIN.COM+officeComputers guest ok = yes guest account = nobody Where am I going wrong? Ben -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
[Samba] Samba4 smb.conf questions
I am trying to find a good guide for setting up the smb.conf and can't seem to find anything. Here's what I have been trying to do and it hasn't been working correctly. We had a Windows Server 2003 DC. I had to upgrade it because of some problems we were having and upgraded to Windows Server 2008 R2. After that, my Samba 3 with Winbind file server quit authenticating to the AD domain and try as I might I couldn't get it to work. This is largely because even though we have a perfectly good DC, all of our workstations are just in a giant workgroup (and management just won't give in and let me change it). After playing with Likewise and samba for a bit I gave up that bag and thought I would give Samba4 a try. So far I am really liking what I am seeing. I realize that we are still in beta land, but what we have so far may just work for what I want to do. I have been trying to find a good guide to configure the smb.conf file but haven't really found anything. By the way, successful install on ubuntu 10.04 x64 server that formally had samba 3 and winbind on it that were installed from aptitude. Any help would be appreciated. Ben -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
