RE: [Samba] Problems joining a domain with a large number of DCs

[Eric Diven]

> -Original Message-
> From: Gerald (Jerry) Carter [mailto:[EMAIL PROTECTED] 
> Sent: Tuesday, December 02, 2008 12:29 PM
> To: [EMAIL PROTECTED]
> Cc: Eric Diven; samba@lists.samba.org
> Subject: Re: [Samba] Problems joining a domain with a large 
> number of DCs
> 
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
> 
> Volker Lendecke wrote:
> > On Tue, Dec 02, 2008 at 11:07:15AM -0600, Gerald (Jerry) 
> Carter wrote:
> >> This is the commit
> >> 
> http://gitweb.samba.org/?p=samba.git;a=commitdiff;h=af33c8b3521564c22
> >> 9091f197341ba33a7d6f162
> >>
> >> I expect it was only a regression in the older code.  You 
> could ask 
> >> Volker directly.
> > 
> > Okay, you completely lost me here. Looking at the subject 
> of the mails 
> > I thought this is about server affinity cache stuff during 
> join. How 
> > does af33c8b35215 relate to that?
> 
> Sorry.  My fault.  I pointed at the top of tree that you 
> referred to the snapshot.  I should have been paying more attention.
> 
> I'm guessing I should have been pointing at
> 
> 
> commit 80e74a27c55c01221091e3eec930c2ac4433c22c
> Author: Stefan Metzmacher <[EMAIL PROTECTED]>
> Date:   Mon Oct 27 19:31:30 2008 +0100
> 
> libsmb/namequery.c: add saf_join_store() function
> 
> saf_join_store() should be called after a successful
> domain join, the affinity to the dc used at join time
> has a larger ttl, to avoid problems with delayed replication.
> 
> metze
> 
> Signed-off-by: Stefan Metzmacher <[EMAIL PROTECTED]>
> Signed-off-by: Günther Deschner <[EMAIL PROTECTED]>
> 
> And since the domain join code was rewritten to use libnet in 
> 3.2, this would explain why the commit doesn't seem to exist 
> in another branch.
> 
> 
> 
> 
> cheers, jerry
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
> 
> iD8DBQFJNXBdIR7qMdg1EfYRAuE9AJ9/Fsh4PXV9LMavUd3D4uZYYxJz1ACg6jy5
> /2yTbSkNt6UMnlSYMFD38es=
> =tbGo
> -END PGP SIGNATURE-
> 

Okay, I'll give the 3.2.x branch a try and see what happens.
Thanks for clarifying the situation on this.

~Eric
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problems joining a domain with a large number of DCs

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Volker Lendecke wrote:
> On Tue, Dec 02, 2008 at 11:07:15AM -0600, Gerald (Jerry) Carter wrote:
>> This is the commit
>> http://gitweb.samba.org/?p=samba.git;a=commitdiff;h=af33c8b3521564c229091f197341ba33a7d6f162
>>
>> I expect it was only a regression in the older code.  You could
>> ask Volker directly.
> 
> Okay, you completely lost me here. Looking at the subject of
> the mails I thought this is about server affinity cache
> stuff during join. How does af33c8b35215 relate to that?

Sorry.  My fault.  I pointed at the top of tree that you referred
to the snapshot.  I should have been paying more attention.

I'm guessing I should have been pointing at


commit 80e74a27c55c01221091e3eec930c2ac4433c22c
Author: Stefan Metzmacher <[EMAIL PROTECTED]>
Date:   Mon Oct 27 19:31:30 2008 +0100

libsmb/namequery.c: add saf_join_store() function

saf_join_store() should be called after a successful
domain join, the affinity to the dc used at join time
has a larger ttl, to avoid problems with delayed replication.

metze

Signed-off-by: Stefan Metzmacher <[EMAIL PROTECTED]>
Signed-off-by: Günther Deschner <[EMAIL PROTECTED]>

And since the domain join code was rewritten to use libnet
in 3.2, this would explain why the commit doesn't seem to exist
in another branch.




cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJNXBdIR7qMdg1EfYRAuE9AJ9/Fsh4PXV9LMavUd3D4uZYYxJz1ACg6jy5
/2yTbSkNt6UMnlSYMFD38es=
=tbGo
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problems joining a domain with a large number of DCs

[Volker Lendecke]

On Tue, Dec 02, 2008 at 11:07:15AM -0600, Gerald (Jerry) Carter wrote:
> This is the commit
> http://gitweb.samba.org/?p=samba.git;a=commitdiff;h=af33c8b3521564c229091f197341ba33a7d6f162
> 
> I expect it was only a regression in the older code.  You could
> ask Volker directly.

Okay, you completely lost me here. Looking at the subject of
the mails I thought this is about server affinity cache
stuff during join. How does af33c8b35215 relate to that?

Volker


pgpyIMB9mQUTt.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problems joining a domain with a large number of DCs

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Eric Diven wrote:
>>> I hate to drag this one up again, but I'm having issues with that 
>>> snapshot of 3-0-test (smbd crashing, can't pin it to 
>> anything).  Are 
>>> the fixes actually in 3.0.33, or do I need to get a more recent 
>>> version of 3-0-test?  I've looked at the release notes and 
>> I don't see 
>>> anything about the issue in there (just the security fix you made).
>> I believe it only included the security fix.
>>
>>> Alternately, if I need to move to 3.2.5, I'm fine with that too.
>> This is better in the long run.  3.3.0 will be out soon and 
>> the 3.0 tree will become only more frozen.
>>
> 
> I looked through the release notes going back to 3.2.0, and I don't see
> anything in them matching Volker's description for those fixes.  Is
> there a bug on this I can check or something else I should be looking
> for?

This is the commit
http://gitweb.samba.org/?p=samba.git;a=commitdiff;h=af33c8b3521564c229091f197341ba33a7d6f162

I expect it was only a regression in the older code.  You could
ask Volker directly.




cheers, jerry
- --
=
Samba--- http://www.samba.org
Likewise Software  -  http://www.likewisesoftware.com
"What man is a man who does not make the world better?"  --Balian
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJNWtCIR7qMdg1EfYRAsQOAJ4iQFRoJQainvYnmMVfAP4oTpTtgACeJOHs
dNOKmvJTdQYYQWiM1c7tSG4=
=uFrK
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Problems joining a domain with a large number of DCs

[Eric Diven]

> > I hate to drag this one up again, but I'm having issues with that 
> > snapshot of 3-0-test (smbd crashing, can't pin it to 
> anything).  Are 
> > the fixes actually in 3.0.33, or do I need to get a more recent 
> > version of 3-0-test?  I've looked at the release notes and 
> I don't see 
> > anything about the issue in there (just the security fix you made).
> 
> I believe it only included the security fix.
> 
> > Alternately, if I need to move to 3.2.5, I'm fine with that too.
> 
> This is better in the long run.  3.3.0 will be out soon and 
> the 3.0 tree will become only more frozen.
> 

I looked through the release notes going back to 3.2.0, and I don't see
anything in them matching Volker's description for those fixes.  Is
there a bug on this I can check or something else I should be looking
for?

Thanks,

~Eric
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problems joining a domain with a large number of DCs

[Gerald (Jerry) Carter]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Eric Diven wrote:
>> You might want to use the latest git checkout of 3-0-test, 
>> for example available via
>>
>> http://repo.or.cz/w/Samba.git?a=snapshot;h=af33c8b3521564c;sf=tgz
>>
>> as there have been fixes for the server affinity cache during join.
>>
>> Volker
>>
> 
> I hate to drag this one up again, but I'm having issues with that
> snapshot of 3-0-test (smbd crashing, can't pin it to anything).  Are the
> fixes actually in 3.0.33, or do I need to get a more recent version of
> 3-0-test?  I've looked at the release notes and I don't see anything
> about the issue in there (just the security fix you made).

I believe it only included the security fix.

> Alternately, if I need to move to 3.2.5, I'm fine with that too.

This is better in the long run.  3.3.0 will be out soon and
the 3.0 tree will become only more frozen.





cheers, jerry
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFJNVrWIR7qMdg1EfYRAtSrAKDiAU7HG3Hy9+dPpnPi8G6mq2d3igCdFw/p
3QaKLFkBvijGiXlLsvWRQ38=
=OglA
-END PGP SIGNATURE-
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Problems joining a domain with a large number of DCs

[Eric Diven]

> You might want to use the latest git checkout of 3-0-test, 
> for example available via
> 
> http://repo.or.cz/w/Samba.git?a=snapshot;h=af33c8b3521564c;sf=tgz
> 
> as there have been fixes for the server affinity cache during join.
> 
> Volker
> 

I hate to drag this one up again, but I'm having issues with that
snapshot of 3-0-test (smbd crashing, can't pin it to anything).  Are the
fixes actually in 3.0.33, or do I need to get a more recent version of
3-0-test?  I've looked at the release notes and I don't see anything
about the issue in there (just the security fix you made).

Alternately, if I need to move to 3.2.5, I'm fine with that too.

Thanks,

~Eric
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Problems joining a domain with a large number of DCs

[Eric Diven]

> > > I'm having issues joining samba to a domain with a large 
> number of 
> > > domain controllers.  The domain is a mixed windows
> > 2003/windows 2008
> > > domain.  The samba server is Solaris 10 update 5 running on SPARC.
> > > 
> > > I have a custom samba build of samba 3.0.28 on the server
> > because we
> > > need Tobi Oetiker's samfs patch.  Because of the issue 
> that version 
> > > has with passwords longer than eight characters on Solaris,
> > I've also
> > > build samba 3.0.24 for using net to join the domain.
> > 
> > You might want to use the latest git checkout of 3-0-test, 
> for example 
> > available via
> > 
> > http://repo.or.cz/w/Samba.git?a=snapshot;h=af33c8b3521564c;sf=tgz
> > 
> > as there have been fixes for the server affinity cache during join.
> > 
> > Volker
> > 
> 

Volker, you're awesome.  I finally got a chance to get everybody in the
same room and try it out, and lo, it just worked.  Thanks!

~Eric
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Problems joining a domain with a large number of DCs

[Eric Diven]

> > I'm having issues joining samba to a domain with a large number of 
> > domain controllers.  The domain is a mixed windows 
> 2003/windows 2008 
> > domain.  The samba server is Solaris 10 update 5 running on SPARC.
> > 
> > I have a custom samba build of samba 3.0.28 on the server 
> because we 
> > need Tobi Oetiker's samfs patch.  Because of the issue that version 
> > has with passwords longer than eight characters on Solaris, 
> I've also 
> > build samba 3.0.24 for using net to join the domain.
> 
> You might want to use the latest git checkout of 3-0-test, 
> for example available via
> 
> http://repo.or.cz/w/Samba.git?a=snapshot;h=af33c8b3521564c;sf=tgz
> 
> as there have been fixes for the server affinity cache during join.
> 
> Volker
> 

Volker,

Thanks again for the quick answer, I've been tied up with other stuff
and just now got around to working on the samba project.

It turns out that the tarball from the link you sent me has no configure
script in the source directory.  I've tried running autoconf to generate
a configure script, but I'm not getting very far.  This is on Solaris 10
update 4, I've updated m4 and autoconf to the latest versions from
sunfreeware.com.  Output is below.  The first 3 files that are causing
problems are in lib/replace.  I haven't been able to turn up the others
with a quick check, but I could be looking in the wrong place.

Thanks, 

~Eric

-bash-3.00$ autoconf
/usr/local/bin/m4:lib/replace/libreplace.m4:359: cannot open
`libreplace_cc.m4': No such file or directory
/usr/local/bin/m4:lib/replace/libreplace.m4:360: cannot open
`libreplace_macros.m4': No such file or directory
/usr/local/bin/m4:lib/replace/libreplace.m4:361: cannot open
`autoconf-2.60.m4': No such file or directory
/usr/local/bin/m4:configure.in:856: cannot open `system/config.m4': No
such file or directory
/usr/local/bin/m4:configure.in:856: cannot open `dlfcn.m4': No such file
or directory
/usr/local/bin/m4:configure.in:856: cannot open `getpass.m4': No such
file or directory
/usr/local/bin/m4:configure.in:856: cannot open `strptime.m4': No such
file or directory
/usr/local/bin/m4:configure.in:856: cannot open `win32.m4': No such file
or directory
/usr/local/bin/m4:configure.in:856: cannot open `timegm.m4': No such
file or directory
/usr/local/bin/m4:configure.in:856: cannot open `repdir.m4': No such
file or directory
autom4te: /usr/local/bin/m4 failed with exit status: 1
-bash-3.00$ /usr/local/bin/m4 --version
m4 (GNU M4) 1.4.12
Copyright (C) 2008 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later

This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.

Written by Rene' Seindal.
-bash-3.00$ find lib/replace/
lib/replace/
lib/replace/.checker_innocent
lib/replace/Makefile.in
lib/replace/README
lib/replace/aclocal.m4
lib/replace/autoconf-2.60.m4
lib/replace/autogen.sh
lib/replace/config.guess
lib/replace/config.sub
lib/replace/configure.ac
lib/replace/dlfcn.c
lib/replace/dlfcn.m4
lib/replace/getpass.c
lib/replace/getpass.m4
lib/replace/install-sh
lib/replace/libreplace.m4
lib/replace/libreplace_cc.m4
lib/replace/libreplace_macros.m4
lib/replace/repdir.m4
lib/replace/repdir_getdents.c
lib/replace/repdir_getdirentries.c
lib/replace/replace.c
lib/replace/replace.h
lib/replace/samba.m4
lib/replace/snprintf.c
lib/replace/strptime.c
lib/replace/strptime.m4
lib/replace/system
lib/replace/system/README
lib/replace/system/aio.h
lib/replace/system/capability.h
lib/replace/system/config.m4
lib/replace/system/dir.h
lib/replace/system/filesys.h
lib/replace/system/glob.h
lib/replace/system/iconv.h
lib/replace/system/kerberos.h
lib/replace/system/locale.h
lib/replace/system/network.h
lib/replace/system/passwd.h
lib/replace/system/printing.h
lib/replace/system/readline.h
lib/replace/system/select.h
lib/replace/system/shmem.h
lib/replace/system/syslog.h
lib/replace/system/terminal.h
lib/replace/system/time.h
lib/replace/system/wait.h
lib/replace/test
lib/replace/test/os2_delete.c
lib/replace/test/shared_mmap.c
lib/replace/test/strptime.c
lib/replace/test/testsuite.c
lib/replace/timegm.c
lib/replace/timegm.m4
lib/replace/win32.m4
lib/replace/win32_replace.h
-bash-3.00$
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Problems joining a domain with a large number of DCs

[Eric Diven]

> > > On Tue, Nov 04, 2008 at 05:59:25PM -0500, Eric Diven wrote:
> > > I'm having issues joining samba to a domain with a large 
> number of 
> > > domain controllers.  The domain is a mixed windows
> > 2003/windows 2008
> > > domain.  The samba server is Solaris 10 update 5 running on SPARC.
> > > 
> > > I have a custom samba build of samba 3.0.28 on the server
> > because we
> > > need Tobi Oetiker's samfs patch.  Because of the issue 
> that version 
> > > has with passwords longer than eight characters on Solaris,
> > I've also
> > > build samba 3.0.24 for using net to join the domain.
> > 
> > You might want to use the latest git checkout of 3-0-test, 
> for example
> 
> > available via
> > 
> > http://repo.or.cz/w/Samba.git?a=snapshot;h=af33c8b3521564c;sf=tgz
> > 
> > as there have been fixes for the server affinity cache during join.
> > 
> > Volker
> > 
> 
> Volker, thanks.  I'll take a look at that and see if it 
> works.  To clarify, is the issue in net in 3.0.24, and I can 
> resolve my problem by using only net from the git snapshot.  
> Or will I need to apply the Tobi patch to the snapshot and 
> use that build in its entirety?
> 
> Also, if I go to that build, it looks like the 8 character 
> password bug
> (https://bugzilla.samba.org/show_bug.cgi?id=4866) is still in 
> the re-opened state.  I'll try it, but if it's still an 
> issue, the domain policy prevents using passwords as short as 
> 8 characters.  I was looking yesterday for instructions on 
> how to join a machine to a domain without having to enter the 
> admin password.
> 
> My impression (probably incorrect) is that this can be done 
> by creating the machine account in AD before trying to join 
> the machine, but I've been unable to actually find any info 
> about how to then get samba joined.
> 
> Thanks again,
> 
> ~Eric
> 
> (Volker, sorry for the duplicate email, I hit the wrong reply 
> the first
> time)

I've been going through the changelogs, and it looks like the Solaris 8
char password bug was fixed in 3.0.28a by Jiri Sasek.  The bug still
lists as REOPENED, but there hasn't been any activity on it since
November of last year.

3.0.28a also appears to have added support for joining a Windows 2008
domain, which may be relevant as it is a mixed environment with both
W2K3 and W2K8 DCs.

~Eric
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

RE: [Samba] Problems joining a domain with a large number of DCs

[Eric Diven]

> On Tue, Nov 04, 2008 at 05:59:25PM -0500, Eric Diven wrote:
> > I'm having issues joining samba to a domain with a large number of 
> > domain controllers.  The domain is a mixed windows
> 2003/windows 2008
> > domain.  The samba server is Solaris 10 update 5 running on SPARC.
> > 
> > I have a custom samba build of samba 3.0.28 on the server
> because we
> > need Tobi Oetiker's samfs patch.  Because of the issue that version 
> > has with passwords longer than eight characters on Solaris,
> I've also
> > build samba 3.0.24 for using net to join the domain.
> 
> You might want to use the latest git checkout of 3-0-test, for example

> available via
> 
> http://repo.or.cz/w/Samba.git?a=snapshot;h=af33c8b3521564c;sf=tgz
> 
> as there have been fixes for the server affinity cache during join.
> 
> Volker
> 

Volker, thanks.  I'll take a look at that and see if it works.  To
clarify, is the issue in net in 3.0.24, and I can resolve my problem by
using only net from the git snapshot.  Or will I need to apply the Tobi
patch to the snapshot and use that build in its entirety?

Also, if I go to that build, it looks like the 8 character password bug
(https://bugzilla.samba.org/show_bug.cgi?id=4866) is still in the
re-opened state.  I'll try it, but if it's still an issue, the domain
policy prevents using passwords as short as 8 characters.  I was looking
yesterday for instructions on how to join a machine to a domain without
having to enter the admin password.

My impression (probably incorrect) is that this can be done by creating
the machine account in AD before trying to join the machine, but I've
been unable to actually find any info about how to then get samba
joined.

Thanks again,

~Eric

(Volker, sorry for the duplicate email, I hit the wrong reply the first
time)
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

Re: [Samba] Problems joining a domain with a large number of DCs

[Volker Lendecke]

On Tue, Nov 04, 2008 at 05:59:25PM -0500, Eric Diven wrote:
> I'm having issues joining samba to a domain with a large number of
> domain controllers.  The domain is a mixed windows 2003/windows 2008
> domain.  The samba server is Solaris 10 update 5 running on SPARC.
> 
> I have a custom samba build of samba 3.0.28 on the server because we
> need Tobi Oetiker's samfs patch.  Because of the issue that version has
> with passwords longer than eight characters on Solaris, I've also build
> samba 3.0.24 for using net to join the domain.

You might want to use the latest git checkout of 3-0-test,
for example available via

http://repo.or.cz/w/Samba.git?a=snapshot;h=af33c8b3521564c;sf=tgz

as there have been fixes for the server affinity cache
during join.

Volker


pgpyv75wajVvH.pgp
Description: PGP signature
-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Problems joining a domain with a large number of DCs

[Eric Diven]

I'm having issues joining samba to a domain with a large number of
domain controllers.  The domain is a mixed windows 2003/windows 2008
domain.  The samba server is Solaris 10 update 5 running on SPARC.

I have a custom samba build of samba 3.0.28 on the server because we
need Tobi Oetiker's samfs patch.  Because of the issue that version has
with passwords longer than eight characters on Solaris, I've also build
samba 3.0.24 for using net to join the domain.

Using net from 3.0.24, I'm able to join the domain in the customary net
ads join -U [EMAIL PROTECTED] way.  A windows admin confirms that the
account is created in active directory, and that it's enabled.  When I
net ads testjoin, however, it fails with the following error:

[2008/11/04 15:39:50, 3] libsmb/clikrb5.c:ads_krb5_mk_req(593)
  ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache
found)
[2008/11/04 15:39:50, 0] libads/kerberos.c:ads_kinit_password(228)
  kerberos_kinit_password [EMAIL PROTECTED] failed:
Preauthentication failed
Join to domain is not valid: Logon failure

Some googling around suggested that this might be caused by
inconsistencies in the information in the DCs on a large domain, so I
followed the suggestion to remove the machine account completely, create
it by hand, manually synch the DCs, and then try.  Various invocations
of net ads join caused account disablement and the same error as above.

Digging further into the kerberos error, I can kinit a user on the
domain without difficulty, and when I subsequently klist, I see some
tickets.  I can kdestroy and kinit, and tickets reappear.

Could anybody suggest what else I should look at?  Is this a kerberos
issue, a samba issue with caching the credentials, or something else?

Thanks,

~Eric

here's the stuff net pulls from the config file when it runs:

[2008/11/04 15:39:29, 3] param/loadparm.c:do_section(3778)
  Processing section "[global]"
  doing parameter aio read size = 1
  doing parameter aio write size = 1
  doing parameter workgroup = FOO
  doing parameter server string = MSR Server
  doing parameter security = ADS
  doing parameter log file = /var/samba/log/log.%m
  doing parameter max log size = 50
  doing parameter password server = server1 server2 server3
  doing parameter realm = FOO.DOMAIN.COM
  doing parameter passdb backend = smbpasswd
  doing parameter preferred master = no
  doing parameter dns proxy = no
  doing parameter encrypt passwords = yes
  doing parameter winbind separator = +
  doing parameter winbind use default domain = yes
  doing parameter winbind enum users = no
  doing parameter winbind enum groups = no
  doing parameter idmap uid = 1-2
  doing parameter idmap gid = 1-2

I'll post logs if people want to see 'em.
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/listinfo/samba

[Samba] Problems joining a Domain

[Roberto Mason]

I've upgraded my Domain from 2.27a to 3.0. My authentication is done using
the standard smbpasswd file. Since I've upgraded to 3.0, when I try to
join a XP machine to the Domain, I get unknown user or password message.
I'm using add machine script that's found in the Doc for Samba 3.0.

I running Fedora Core 1

I use the following scripts:
add user script = adduser -u
delete user script = userdel -u
add machine script = /usr/sbin/useradd -d /dev/null -g 100 \{} -s
/bin/false -M %u


I'd be grateful is someone could point me in the right direction.

Thanks

Roberto





-- 
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba