Re: [Samba] Login from win2k client to samba PDC

2003-04-02 Thread Eric Halverson
Do you have either of the following defined in your global section:

write list
valid users

also look in your log files for that machine to see if you're getting an
error about invalid user nobody.  I was getting the same error because I
defined those variables in the global section, which of course made the
user nobody invalid as well as whoever else was undefined (including the
machine account).

On Wed, 2003-04-02 at 02:58, Markus PISTAUER (CISC) wrote:
 I have joined my win2k client machines (win2k professional or win2k
 professional server) to my PDC. This worked fine and I did all recommended
 as e.g. in the HOWTO
 http://hr.uoregon.edu/davidrl/samba/samba-pdc.html#joining.
 
 So far I can also login localy to the win2k client machines using a local
 account and connect a network drive from the PDC using a valid account on
 the PDC (as given in the smbpasswd file)
 
 I have done all major steps:
 
 passwd file: 
   added users and machine accounts (as user machine$)
 smbpasswd file: 
   added users with 'smbpasswd -a user'
   added machines with 'smbpasswd -a machine
   added user 'root' to smbpasswd
 smb.conf:
   all the necessary settings done (I can post the smb.conf if requested)
 
 
 The problem:
 
 If I try to login on the domain using the win2k client machine (selecting 
 the domain instead of the local machine name the login window) I cannot 
 connect to the domain and get the error message:
The system cannot log you on to this domain because the system's
computer account in its primary domain is missing or the password on
that account is incorrect
 
 
 My environments settings:
 -
 I'm using Samba 2.2.5 (release 160), win2k prof with SP3 or no SP, classic
 authentication on the PDC. Linux Kernel is 2.4.19 (Build 174).
 I have also tried 2.2.8 with same failure.
 
 Any help would be VERY appreciated.
 
 Thanks
 
 Markus Pistauer
 mailto:[EMAIL PROTECTED]
 
 

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Login from win2k client to samba PDC

2003-04-02 Thread Eric Halverson
also, make sure that you add the machine account with smbpasswd -a -m
machine to signal that it is a machine login account.

On Wed, 2003-04-02 at 02:58, Markus PISTAUER (CISC) wrote:

 passwd file: 
   added users and machine accounts (as user machine$)
 smbpasswd file: 
   added users with 'smbpasswd -a user'
   added machines with 'smbpasswd -a machine
   added user 'root' to smbpasswd
 smb.conf:
   all the necessary settings done (I can post the smb.conf if requested)
 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Login denied after joinined Samba PDC - Fixed?

2003-04-01 Thread Eric Halverson
Okay, not sure why this seems to be the cause of the problem, but, for
the record, whenever I have the following lines under my [global]
section in smb.conf, I am unable to log into the domain with the afore
mentioned error.  As soon as I comment out these two lines and restart
samba everything seems to work just fine (so far...)

valid users = root @ntadm
write list = root @ntadm

I'm not sure if then this is a bug, or just something that should be
avoided.  Experienced this problem with 2.2.7 and 2.2.8 redhat rpms from
samba.org



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] New Files in Samba

2003-03-27 Thread Eric Halverson
On Thu, 2003-03-27 at 08:31, Jaques Metz wrote:
 Hi.
 
 I've configured Samba to work as a dedicated file server, but when a user create a 
 new file in the shared directory, only this user can os access this file. What 
 should I do to change this?
 
 Thanks.
 
 Jaques Metz

You'll want to look at the create mask (or create mode) options in that
share.  If you want rwx access for the creator and primary group, create
mask would be 0770, if you want full access for everyone to have full
access to the files, create mask would reflect 0777.  Just make sure
that your create mask corresponds with the linux/unix file permission
structure.

-- 
Eric Halverson [EMAIL PROTECTED]
Doctors Care Health Services

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Login denied after joinined Samba PDC

2003-03-25 Thread Eric Halverson

 See comment regarding SignOrSeal above.
 
 - John T.
I loaded the WinXP_SignOrSeal.reg into the registry into my w2k
workstations, and I still am unable to log into the domain.
-- 
Eric Halverson [EMAIL PROTECTED]
Doctors Care Health Services

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Login denied after joinined Samba PDC

2003-03-25 Thread Eric Halverson
Yes, both my WINS and DNS server are pointing to the IP of my samba
server.  I'm starting to wonder if this has something to do with the
trust account.

On Tue, 2003-03-25 at 08:49, [EMAIL PROTECTED] wrote:
 Check your windows DNS, the primary DNS server must be your samba servers
 IP. It worked for me.
 
 
 Hlio Dubeux Neto
 Depto. Tcnico
 INTERSIGHT
 www.intersight.com.br
 (81) 3221 - 8511
 


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Login denied after joinined Samba PDC

2003-03-25 Thread Eric Halverson
On Tue, 2003-03-25 at 09:27, Bradley W. Langhorst wrote:
 Does the machine account (machine$) exist in your password database?
 have you tried removing it and rejoining the machine?
 What do the log files say?

yes the machine$ accounts are both in /etc/samba/smbpasswd as well as
/etc/passwd.  The log files show this when I try to log on:

[2003/03/25 03:59:56, 0] smbd/password.c:authorise_login(863)
  authorise_login: rejected invalid user nobody

as I said earlier it seems that my users are getting mapped to nobody.

I removed the /etc/samba/secrets.tdb and restarted samba and still not
getting anywhere.  is there anything else that i would need to reset in
order to start over and get rid of whatever is causing this problem?


 Please reply to the earliest thread so it's easy to follow your messages
 
 brad

Okay, I'm replying to the first reply I received, I hope this is correct and helps



-- 

Eric Halverson [EMAIL PROTECTED]

Doctors Care Health Services

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] SAMBA AND LOGON SCRIPTS.

2003-03-25 Thread Eric Halverson
http://www.kixtart.org

KixTart will give you the ability to do just what you need, and there
are also a lot of scripts that you can download to alleviate the
learning curve.

-- 
Eric Halverson [EMAIL PROTECTED]
Doctors Care Health Services

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Starting over with samba

2003-03-25 Thread Eric Halverson
I'd like to wipe out whatever specific files that are used in
maintaining a samba PDC and start over seeing as how my samba no longer
wants to allow users to log into the domain.  I would obviously like to
keep my smb.conf, but what other files would I remove to start over
from scratch save for the smb.conf file.  I've removed secrets.tdb and
the smbpasswd file but I continue to have the same problem.  Is there
another file or just something that I'm missing that would remove any
strangeness that has occured?

-- 
Eric Halverson [EMAIL PROTECTED]
Doctors Care Health Services

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Login denied after joinined Samba PDC

2003-03-24 Thread Eric Halverson
Currently running samba 2.2.7 on rh8

I have not had any problems until recently, and I'm not sure exactly
what would have caused this problem.  I have no problem joining a w2k
workstation to my domain, but whenever I attempt to log into the domain,
i receive the following error on the workstation:

The system cannot log you on to this domain because the system's
computer account in its primary domain is missing or the password on
that account is incorrect

as well as this from my /var/log/samba/machinename.log

[2003/03/24 12:32:51, 0] smbd/password.c:authorise_login(863)
  authorise_login: rejected invalid user nobody

every time I try to log in with a valid user name.  If i try an invalid
username, nothing shows up in the log file. It seems that my users are
all being mapped to the guest user nobody.  Here is my global section of
smb.conf

[global]
;Basic Server Settings
netbios name = PDC
workgroup = SMBDOMAIN

;Act as domain and local master browser
os level = 64
preferred master = yes
domain master = yes
local master = yes

;Provide a WINS service
wins support = yes

;Security settings
security = user

;Encrypted passwords required for PDC
encrypt passwords = yes

;support domain logons
domain logons = yes
domain admin group = root @is
admin users = root @is

;Profile location
logon path = \\%L\Profiles\%U

;User home directory and mount drive
logon drive = H:
logon home = \\%L\%u

;specify the logon script located in the netlogon share
logon script = wkix32 logongui.k2k

;automagically add machine accounts
add user script = /usr/sbin/useradd -c Machine -d /dev/null -g
500 -s /bin/false -M %u

;Log location and size

log file = /var/log/samba/%m.log
max log size = 1000

;sync unix/samba passwords
unix password sync = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* %n\n
*passwd:*all*authentication*tokens*updated*successfully*
pam password change = yes

;performance options
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

;use both NICs
interfaces = 192.168.1.5/24 192.168.1.6/24

;default share values
create mode = 0770
directory mode = 0770
valid users = @is root
writelist = @is root

Thanks for any help in advance.


-- 
Eric Halverson [EMAIL PROTECTED]
Doctors Care Health Services

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] NEWBIE : Problem saving M$ word documents on samba fileserver

2003-03-24 Thread Eric Halverson
Perhaps the placing the following in your [homes] share might help:

create mode = 0600
directory mode = 0700
making sure that the users will have full access to any directories or 
files they create.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Login denied after joinined Samba PDC

2003-03-24 Thread Eric Halverson
Yes, I had this completely working with no problems like this for 
several months.  I had since been reformatting the PCs and haven't had 
any machines joined to the domain for a while.

I can join the workstation to the domain with my root samba account and 
i can in fact see that the machinename$ is added to /etc/passwd as well 
as /etc/samba/smbpasswd but no matter what I cannot log into the domain 
after joining it.

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Login denied after joinined Samba PDC

2003-03-24 Thread Eric Halverson
 Do you mean you have re-installed the Win2K on the PCs? If so, then you
 need to re-join the domain as the workstation trust account password will
 be different.
 
i have reinstalled w2k on one workstation, and had another one that had
been joined and dis-joined from the domain.  I attempted to re-join both
of these PCs with no problem, save for the inability to log into the
domain.  

If it is an issue of the trust account password, how can I go about
resetting that?

 Also, did you disable the RequiresSignOrSeal parameters in the registry?
 There is a registry auto-patch for this in the ~samba/docs/Registry
 directory.
 
I didn't think this was necessary on W2K but I will do that just the same.

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba