RE: [Samba] Cannot connect MacOSX domain member to PDC

2004-05-18 Thread Huyler, Christopher M
What is it that you have tried so far?  Post your server and client
smb.conf files as well as the exact error so we can get a better grasp
of the problem.

You should also take a look at the Directory Access application in
/Applications/Utilities if you haven't already.  It will allow you to
use Active Directory or LDAP to authenticate your username/password when
you login.  Before you do that, though, you do need to join the domain
with samba using net ads|rpc join -S servername -U username.  You
might be getting the master browser errors because you are not
specifying the server.

-Original Message-
From: Tony Baker [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, May 18, 2004 8:51 AM
To: [EMAIL PROTECTED]
Subject: [Samba] Cannot connect MacOSX domain member to PDC

I have a PDC which is a Sun280R with Solaris 8 running PCNetlink2.0
(effectively a WindowsNT4.0 server)

I want to join a Apple G5 with MacOSX10.3.3 (Samba 3.0) as a domain
member of the above PDC.

It will not allow me to do this and has lots of master browser -
unknown in the logs of the Apple.

I have the IP address in the same range as the PDC and have the netmask
set the same also.

I can make the Apple a standalone server and can then map a drive in a
windows client, but it is still not seen in Network Neighbourhood.

Has anybody had/seen these issues with Apples before and can pass on any
help.


Regards
 
Tony


--
To unsubscribe from this list go to the following URL and read the
instructions:  http://lists.samba.org/mailman/listinfo/samba


RE: [Samba] Cannot connect MacOSX domain member to PDC

2004-05-18 Thread Tony Baker
I am not running LDAP or AD on the PDC (Sun running PCNetlink)
Is that the problem?? Will an Apple (Samba3.0) only join a domain runing
LDAP or AD??

#
##excerpt from logs from Apple##

2004/05/18 10:32:42, 0]
/SourceCache/samba/samba-56/samba/source/nmbd/nmbd.c:process(540)
  Got SIGHUP dumping debug info.
[2004/05/18 10:32:42, 0]
/SourceCache/samba/samba-56/samba/source/nmbd/nmbd_workgroupdb.c:dump_wo
rkgroups(266)
  dump_workgroups()
   dump workgroup on subnet   10.1.1.61: netmask=  255.255.240.0:
G5SERVER(2) current master browser = UNKNOWN
G5SERVER 40009a03 (Mac OS X)
[2004/05/18 10:32:42, 0]
/SourceCache/samba/samba-56/samba/source/nmbd/nmbd_workgroupdb.c:dump_wo
rkgroups(266)
  dump_workgroups()
   dump workgroup on subnet  UNICAST_SUBNET: netmask=0.0.0.0:
WORKGROUP(1) current master browser = UNKNOWN
G5SERVER 40009a03 (Mac OS X)
[2004/05/18 10:32:42, 0]
/SourceCache/samba/samba-56/samba/source/nmbd/nmbd_browsesync.c:collect_
all_workgroup_names_from_wins_server(585)
  collect_all_workgroup_names_from_wins_server:
  Cannot find my workgroup G5SERVER on subnet UNICAST_SUBNET.

##
##following when trying to join domain##
#
net join -S Sun280 -I x.x.x.x -w domainname
root password: 
could not initialise lsa pipe
could not obtain sid for domain

##
##smb.conf from Apple##
#
more smb.conf
[global]
workgroup = G5server
display charset = UTF-8-MAC
print command = /usr/sbin/PrintServiceAccess printps %p %s
lprm command = /usr/sbin/PrintServiceAccess remove %p %j
security = user
guest account = unknown
encrypt passwords = yes
printing = BSD
allow trusted domains = no
preferred master = no
lppause command = /usr/sbin/PrintServiceAccess hold %p %j
netbios name = G5server
wins support = no
max smbd processes = 0
printcap =  
wins server = x.x.x.x
server string = Mac OS X
lpresume command = /usr/sbin/PrintServiceAccess release %p %j
client ntlmv2 auth = no
domain logons = no
lpq command = /usr/sbin/PrintServiceAccess jobs %p
passdb backend = opendirectorysam guest
dos charset = CP437
unix charset = UTF-8-MAC
auth methods = guest opendirectory
local master = no
use spnego = no
map to guest = Bad User
domain master = no
printer admin = @admin, @staff
log level = 2
[homes]
comment = User Home Directories
root preexec = /usr/sbin/inituser %U
create mode = 0750
read only = no
browseable = no
[Public]
comment = macosx
inherit permissions = no
path = /Shared Items/Public
directory mask = 0755
map archive = no
guest ok = 1
read only = no
create mask = 0644
[Users]
comment = macosx
inherit permissions = no
path = /Users
directory mask = 0755
map archive = no
guest ok = 1
read only = no
create mask = 0644
[Groups]
comment = macosx
inherit permissions = no
path = /Groups
directory mask = 0755
map archive = no
guest ok = 1
read only = no
create mask = 0644
[OData]
oplocks = 0
map archive = no
path = /RAID/OData
read only = no
inherit permissions = 0
strict locking = 1
comment = macosx
create mask = 0664
guest ok = 1
directory mask = 0775
[printers]
printable = yes
path = /tmp

 From: Huyler, Christopher M [mailto:[EMAIL PROTECTED] 
 Sent: 18 May 2004 13:24
 To: [EMAIL PROTECTED]
 Cc: [EMAIL PROTECTED]
 Subject: RE: [Samba] Cannot connect MacOSX domain member to PDC
 
 
 What is it that you have tried so far?  Post your server and client
 smb.conf files as well as the exact error so we can get a 
 better grasp
 of the problem.
 
 You should also take a look at the Directory Access application in
 /Applications/Utilities if you haven't already.  It will allow you to
 use Active Directory or LDAP to authenticate your 
 username/password when
 you login.  Before you do that, though, you do need to join 
 the domain
 with samba using net ads|rpc join -S servername -U username.  You
 might be getting the master browser errors because you are not
 specifying the server.

 
 -Original Message-
 From: Tony Baker [mailto:[EMAIL PROTECTED] 
 Sent: Tuesday, May 18, 2004 8:51 AM
 To: [EMAIL PROTECTED]
 Subject: [Samba] Cannot connect MacOSX domain member to PDC
 
 I have a PDC which is a Sun280R with Solaris 8 running PCNetlink2.0
 (effectively a WindowsNT4.0 server)
 
 I want to join a Apple G5 with MacOSX10.3.3 (Samba 3.0) as a domain
 member

RE: [Samba] Cannot connect MacOSX domain member to PDC

2004-05-18 Thread Huyler, Christopher M
There are several things wrong with your smb.conf file...

First, you should not have a netbios name and a workgroup with the same
name...I think you may be confusing yourself.  There is nothing wrong
with it, but I don't think that is what you intend.  Think of the
workgroup as the domain name and the netbios name as the machine name.

Your PDC Solaris machine should at least have the following:
(substitute HOME for your preferred domain name)

netbios name = Sun280
workgroup = HOME
security = domain
domain logons = Yes
domain master = Yes
preferred master = Yes
encrypt passwords = yes

And your domain member OSX machine should AT LEAST have the following:
(substitute HOME for the domain name you used above)

netbios name = G5server
workgroup = HOME
security = domain
domain logons = No
domain master = No
encrypt passwords = yes
password server = Sun280

Once you set all that up you should be able to simply call:

net join -S Sun280 -U username%password

You do not need to specify both the server name and ip address, and it
will pick up the workgroup/domain from the server which will be the same
as HOME in the above examples anyway.  The username and password
should be of an account that has privileges to add machines to the
domain.

Also, depending on your PDC settings, you may have to create a machine
account before running net join  

~ Chris


-Original Message-
From: Tony Baker [mailto:[EMAIL PROTECTED] 
Sent: Tuesday, May 18, 2004 12:15 PM
To: Huyler, Christopher M
Cc: [EMAIL PROTECTED]
Subject: RE: [Samba] Cannot connect MacOSX domain member to PDC

I am not running LDAP or AD on the PDC (Sun running PCNetlink)
Is that the problem?? Will an Apple (Samba3.0) only join a domain runing
LDAP or AD??

#
##excerpt from logs from Apple##

2004/05/18 10:32:42, 0]
/SourceCache/samba/samba-56/samba/source/nmbd/nmbd.c:process(540)
  Got SIGHUP dumping debug info.
[2004/05/18 10:32:42, 0]
/SourceCache/samba/samba-56/samba/source/nmbd/nmbd_workgroupdb.c:dump_wo
rkgroups(266)
  dump_workgroups()
   dump workgroup on subnet   10.1.1.61: netmask=  255.255.240.0:
G5SERVER(2) current master browser = UNKNOWN
G5SERVER 40009a03 (Mac OS X)
[2004/05/18 10:32:42, 0]
/SourceCache/samba/samba-56/samba/source/nmbd/nmbd_workgroupdb.c:dump_wo
rkgroups(266)
  dump_workgroups()
   dump workgroup on subnet  UNICAST_SUBNET: netmask=0.0.0.0:
WORKGROUP(1) current master browser = UNKNOWN
G5SERVER 40009a03 (Mac OS X)
[2004/05/18 10:32:42, 0]
/SourceCache/samba/samba-56/samba/source/nmbd/nmbd_browsesync.c:collect_
all_workgroup_names_from_wins_server(585)
  collect_all_workgroup_names_from_wins_server:
  Cannot find my workgroup G5SERVER on subnet UNICAST_SUBNET.

##
##following when trying to join domain##
#
net join -S Sun280 -I x.x.x.x -w domainname
root password: 
could not initialise lsa pipe
could not obtain sid for domain

##
##smb.conf from Apple##
#
more smb.conf
[global]
workgroup = G5server
display charset = UTF-8-MAC
print command = /usr/sbin/PrintServiceAccess printps %p %s
lprm command = /usr/sbin/PrintServiceAccess remove %p %j
security = user
guest account = unknown
encrypt passwords = yes
printing = BSD
allow trusted domains = no
preferred master = no
lppause command = /usr/sbin/PrintServiceAccess hold %p %j
netbios name = G5server
wins support = no
max smbd processes = 0
printcap =  
wins server = x.x.x.x
server string = Mac OS X
lpresume command = /usr/sbin/PrintServiceAccess release %p %j
client ntlmv2 auth = no
domain logons = no
lpq command = /usr/sbin/PrintServiceAccess jobs %p
passdb backend = opendirectorysam guest
dos charset = CP437
unix charset = UTF-8-MAC
auth methods = guest opendirectory
local master = no
use spnego = no
map to guest = Bad User
domain master = no
printer admin = @admin, @staff
log level = 2
[homes]
comment = User Home Directories
root preexec = /usr/sbin/inituser %U
create mode = 0750
read only = no
browseable = no
[Public]
comment = macosx
inherit permissions = no
path = /Shared Items/Public
directory mask = 0755
map archive = no
guest ok = 1
read only = no
create mask = 0644
[Users]
comment = macosx
inherit permissions = no
path = /Users
directory mask = 0755
map archive = no
guest ok = 1
read only = no
create mask = 0644
[Groups]
comment = macosx
inherit permissions = no
path = /Groups
directory mask = 0755