[Samba] Access denied-message when joining domain

2007-07-13 Thread Huyth Jenssen

Hello list.

I have Samba working as a PDC, but when I try to join from a XP computer I
get the message: Access denied. The message appears right after I change
the domain name in the XP network settings and the login window pops up.
My smb.conf is:

[global]
   workgroup = DOMAIN.NAME
   server string = %h server (Samba, Ubuntu)
   obey pam restrictions = Yes
   passdb backend = ldapsam:ldap://127.0.0.1
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n *password\supdated\ssuccessfully* .
   syslog = 0
   log file = /var/log/samba/log.%m
   max log size = 1000
   logon script = logon.bat
   logon path = \\%N\profiles
   logon drive = H:
   logon home = \\%N\%U\data
   domain logons = Yes
   dns proxy = No
   wins support = Yes
   ldap admin dn = cn=admin,dc=domain,dc=name
   ldap group suffix = ou=groups
   ldap machine suffix = ou=machines
   ldap passwd sync = Yes
   ldap suffix = dc=domain,dc=name
   ldap user suffix = ou=users
   panic action = /usr/share/samba/panic-action %d
   invalid users = root

[homes]
   comment = Home Directories
   path = /home/%S/data
   valid users = %S
   read only = No
   create mask = 0600
   directory mask = 0700
   browseable = No

[netlogon]
   comment = Network Logon Service
   path = /data/samba/netlogon
   write list = @admins
   guest ok = Yes
   share modes = No

[profiles]
   comment = Users profiles
   path = /home/%U/profiles
   read only = No
   create mask = 0600
   directory mask = 0700
   browseable = No

[printers]
   comment = All Printers
   path = /var/spool/samba
   create mask = 0700
   printable = Yes
   browseable = No

[print$]
   comment = Printer Drivers
   path = /var/lib/samba/printers



Also, I'm not quite sure if I need a domain. All I want to do is to create
different users with different rights, the data stored will be the same for
everybody, just different rights. Two printers will be shared and I want
everybody to have access to them.  I also want the users to be able to log
in from any computer in the network. Do I need a domain or can this be
solved in another way?

Thankful for any responses.
  Huyth
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba


[Samba] DNS-error from one machine when trying to join domain

2007-07-13 Thread Huyth Jenssen

Hello again.
I finally managed to setup samba as a PDC and I was delighted to see that it
actually worked this time, thanks to a few people here on the list. I could
join the domain from the a computer running XP but I'm having some trouble
when I try to connect from another computer. I get the following message;

A domain controller for the domain could not be contacted
The error was: 'DNS name does not exist.'
(error code 0x232B RCODE_NAME_ERROR)
The query was for the SRV record for _ldap._tcp.dc._msdcs.DOMAIN NAME
Common causes of this error include the following:
- The DNS SRV record is not registered in DNS.

My smb.conf is:
[global]
   workgroup = AE.LOCAL
   server string = %h server (Samba, Ubuntu)
   obey pam restrictions = Yes
   passdb backend = ldapsam:ldap://127.0.0.1
   passwd program = /usr/bin/passwd %u
   passwd chat = *Enter\snew\sUNIX\spassword:* %n\n
*Retype\snew\sUNIX\spassword:* %n\n *password\supdated\ssuccessfully* .
   syslog = 0
   log file = /var/log/samba/log.%m
   max log size = 1000
   add machine script = /usr/sbin/smbldap-useradd -w %u
   logon script = logon.bat
   logon path = \\%N\profiles
   logon drive = H:
   logon home = \\%N\%U\data
   domain logons = Yes
   dns proxy = No
   wins support = Yes
   ldap admin dn = cn=admin,dc=ae,dc=local
   ldap group suffix = ou=groups
   ldap machine suffix = ou=machines
   ldap passwd sync = Yes
   ldap suffix = dc=ae,dc=local
   ldap user suffix = ou=users
   panic action = /usr/share/samba/panic-action %d

[homes]
   comment = Home Directories
   path = /home/%S/data
   valid users = %S
   read only = No
   create mask = 0600
   directory mask = 0700
   browseable = No

[netlogon]
   comment = Network Logon Service
   path = /data/samba/netlogon
   write list = @admins
   guest ok = Yes
   share modes = No

[profiles]
   comment = Users profiles
   path = /home/%U/profiles
   read only = No
   create mask = 0600
   directory mask = 0700
   browseable = No

[printers]
   comment = All Printers
   path = /var/spool/samba
   create mask = 0700
   printable = Yes
   browseable = No

[print$]
   comment = Printer Drivers
   path = /var/lib/samba/printers

I don't know if it helps, but the server and the client that can connect are
both running wireless network cards, and the computer that cannot connect is
not.

Any ideas how I can solve this?

 Huyth.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba