Re: [Samba] Disabling NETBIOS over TCP/IP

2004-09-20 Thread Gerald (Jerry) Carter
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Tihomir Karlovic wrote:
| Hi,
|
| i'm trying to configure XP clients to communicate with
| Samba3 PDC without NETBIOS. I've disabled NETBIOS over TCP/IP
| on XP clients and on Samba3 server. I also created neccessary
| DNS records as described in Samba-HOWTO-Collection but yet
| without success.
|
| I've created DNS SRV entry
| _ldap._tcp.pdc._msdcs.domainame.com as described
| in Samba-HOWTO but this is what happends:
|
| 1.  XP client sends DNS query for entry
| _ldap._tcp.dc._msdcs.domainame.com and
| not for _ldap._tcp.dc._msdcs.domainame.com (note the
| difference .dc instead of .pdc) and fails because of
| missing DNS entry
|
| 2.  I added SRV entry for _ldap._tcp.dc._msdcs.domainame.com,
| now XP finds the Samba domain controller but tries to
| contact LDAP server on it using UDP protocol and fails again.
|
| Obviously, XP expects domain controller name returned by SRV
| .dc entry to belong to AD Domain controller and not NT4 style
| one and it never even tries to query for .pdc record.
|
| Did anybody get this to work?
Is this actually in our docs ?  If so, we need to fix that.
I'm pretty sure that won't work.


cheers, jerry
- -
Alleviating the pain of Windows(tm)  --- http://www.samba.org
GnuPG Key- http://www.plainjoe.org/gpg_public.asc
If we're adding to the noise, turn off this song--Switchfoot (2003)
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFBTry1IR7qMdg1EfYRAigCAKDE26NoSiFKp8mw7K+P18a+HOqFMwCgsIKr
nS1aNNbYn4qcsclJL08QN8I=
=FJF1
-END PGP SIGNATURE-
--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Disabling NETBIOS over TCP/IP

2004-09-20 Thread Paul Gienger


| I've created DNS SRV entry
| _ldap._tcp.pdc._msdcs.domainame.com as described
| in Samba-HOWTO but this is what happends:
|
| 1.  XP client sends DNS query for entry
| _ldap._tcp.dc._msdcs.domainame.com and
| not for _ldap._tcp.dc._msdcs.domainame.com (note the
| difference .dc instead of .pdc) and fails because of
| missing DNS entry
|
| 2.  I added SRV entry for _ldap._tcp.dc._msdcs.domainame.com,
| now XP finds the Samba domain controller but tries to
| contact LDAP server on it using UDP protocol and fails again.
|
| Obviously, XP expects domain controller name returned by SRV
| .dc entry to belong to AD Domain controller and not NT4 style
| one and it never even tries to query for .pdc record.
|
| Did anybody get this to work?
Is this actually in our docs ?  If so, we need to fix that.
I'm pretty sure that won't work.
I think he's probably seeing this:
http://us3.samba.org/samba/docs/man/Samba-HOWTO-Collection/NetworkBrowsing.html#adsdnstech
regarding how to support AD in a BIND environment, connecting the dots 
(and adding a couple) to think that Samba requires those entries.

--
Paul Gienger Office: 701-281-1884
Applied Engineering Inc. 
Information Systems Consultant   Fax:701-281-1322
URL: www.ae-solutions.commailto: [EMAIL PROTECTED]

--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Disabling NETBIOS over TCP/IP

2004-09-20 Thread John H Terpstra
On Monday 20 September 2004 05:19, Gerald (Jerry) Carter wrote:
 Tihomir Karlovic wrote:
 | Hi,
 |
 | i'm trying to configure XP clients to communicate with
 | Samba3 PDC without NETBIOS. I've disabled NETBIOS over TCP/IP
 | on XP clients and on Samba3 server. I also created neccessary
 | DNS records as described in Samba-HOWTO-Collection but yet
 | without success.
 |
 | I've created DNS SRV entry
 | _ldap._tcp.pdc._msdcs.domainame.com as described
 | in Samba-HOWTO but this is what happends:
 |
 | 1.  XP client sends DNS query for entry
 | _ldap._tcp.dc._msdcs.domainame.com and
 | not for _ldap._tcp.dc._msdcs.domainame.com (note the
 | difference .dc instead of .pdc) and fails because of
 | missing DNS entry
 |
 | 2.  I added SRV entry for _ldap._tcp.dc._msdcs.domainame.com,
 | now XP finds the Samba domain controller but tries to
 | contact LDAP server on it using UDP protocol and fails again.
 |
 | Obviously, XP expects domain controller name returned by SRV
 | .dc entry to belong to AD Domain controller and not NT4 style
 | one and it never even tries to query for .pdc record.
 |
 | Did anybody get this to work?

 Is this actually in our docs ?  If so, we need to fix that.
 I'm pretty sure that won't work.

Use of raw SMB over TCP/IP (No NetBIOS layer) can be done only with Active 
Directory domains. Samba is not an Active Directory Domain Controller: ergo, 
you can not run Samba as a domain controller and at the same time NOT use 
NetBIOS. I am rectifying the documentation so as to remove all doubt.

Also, WINS and NetBIOS node-type are features of running NetBIOS - the 
documentation was just plain crazy - it was wrong and misleading and is being 
fixed.

- John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
OpenLDAP by Example, ISBN: 0131488732
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


Re: [Samba] Disabling NETBIOS over TCP/IP

2004-09-20 Thread John H Terpstra
On Monday 20 September 2004 10:35, you wrote:
  Controller: ergo, you can not run Samba as a domain controller and at the
  same time NOT use NetBIOS. I am rectifying the documentation so as to
  remove all doubt.
 
  Also, WINS and NetBIOS node-type are features of running NetBIOS - the
  documentation was just plain crazy - it was wrong and misleading and is
  being fixed.

 oh, yes please make that very explicit.

Ok! So now I appoint you as my quality control manager - but if it is not 
right you must supply the patches! :)

 i had almost fallen into the same pit... i investigated about the
 necessaey SRV records, and only their profound ugliness and a
 pressing deadline made me fall back to giving the clients their WINS
 server back (without which they would not find the dc...)

I have just committed updates to the chapter on Network Browsing. These should 
appear in the published documentation on all major mirror sites within 24 
hours. 

I'd appreciate fixes, updates, panic attacks, flogging, and public humiliation 
to be spontaneous. Don't hold back! If I hear nothing I will assume that my 
modifications were perfect and will immediately withdraw rights to all future 
complaining about the HOWTO. (hehehehe!!) :)

- John T.
-- 
John H Terpstra
Samba-Team Member
Phone: +1 (650) 580-8668

Author:
The Official Samba-3 HOWTO  Reference Guide, ISBN: 0131453556
Samba-3 by Example, ISBN: 0131472216
Hardening Linux, ISBN: 0072254971
OpenLDAP by Example, ISBN: 0131488732
Other books in production.
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


[Samba] Disabling NETBIOS over TCP/IP

2004-09-16 Thread Tihomir Karlovic
Hi,
 
i'm trying to configure XP clients to communicate with Samba3 PDC without
NETBIOS. I've disabled NETBIOS over TCP/IP on XP clients and on Samba3
server. I also created neccessary DNS records as described in
Samba-HOWTO-Collection but yet without success.
 
I've created DNS SRV entry _ldap._tcp.pdc._msdcs.domainame.com as described
in Samba-HOWTO but this is what happends:
 
1.  XP client sends DNS query for entry _ldap._tcp.dc._msdcs.domainame.com
and
not for _ldap._tcp.dc._msdcs.domainame.com (note the difference .dc
instead 
of .pdc) and fails because of missing DNS entry
 
2.  I added SRV entry for _ldap._tcp.dc._msdcs.domainame.com, now XP finds
the 
Samba domain controller but tries to contact LDAP server on it using UDP

protocol and fails again.
 
Obviously, XP expects domain controller name returned by SRV .dc entry to
belong to AD Domain controller and not NT4 style one and it never even tries
to query for .pdc record. 
 
Did anybody get this to work?
 
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba