LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
LinkBack Search this Thread
Old 11-25-2004, 04:47 PM   #1
Jcrofton
LQ Newbie
 
Registered: Nov 2004
Location: Vancouver, BC
Distribution: Suse, Redhat, fedora
Posts: 1

Rep: Reputation: 0
Unhappy connecting samba to a windows 2003 active directory domain


I've been trying with no apparent luck to get a new Suse box to join our AD as a file server. I can ping from a windows client to the netbios name of the linux file server, and it reports a good IP address (10.110.11.51) I can also ping from the linux FS to the AD server but only by IP address, it can't resolve the netbios name.

I have configured the smb.conf file to represent the realm as mydomain.local and the security set to ads, but am still unable to join the domain using the net ads join command.

I have also configured Krb5.conf as best as I could via online notes, setting up the default realm = MYDOMAIN.LOCAL and to try and get away from any sort of DNS problem, specified the kdc server = 10.110.11.48 (AD server IP) as well as the admin server = 10.110.11.48

I have included the typical winbind settings in smb.conf as well.

After all this, if I try to kinit administrator it returns an error "kinit: krb5_init_context failed: -1765328248"

If I try to join the domain using net ads join -U administrator, I am prompted for the administrator's password, it thinks for awhile and then returns to the command prompt. Although there is no message saying welcome to mydomain, there isn't an error message either.

If I then try to wbinfo -u to get user information from the domain, I get a result of error looking up domain users.

I've been going in circles on this for a while, do you guys have any other thoughts of what I could be doing wrong? I am using samba 3.0.2a-51.

PS I have restarted the nmbd and smbd services as well as made sure winbind is running using ps fax | grep winbind. which reports

4657 ? Ss 0:00 winbindd
4658 ? S 0:00 \_winbindd
5368 pts/44 S+ 0:00 \_grep winbindd

PSS. the linux FS shows up in a browse of our windows active directory network but is inaccessible, and if I browse the network on the linux box, our domains show up and I can see the computers but can't access any.
 
Old 11-25-2004, 05:05 PM   #2
tisource
Member
 
Registered: Feb 2002
Posts: 322

Rep: Reputation: 30
I wish I could help... I ran into a very similar problem... and gave up. I'm running my linux box as a standalone server (we're small enough, it isn't a terrible inconvenience).

Kerberos is what killed my setup... ADS makes things highly complicated. In fact, we're actually considering throwing out Win 2003 and going to samba as a PDC.

If you find anything, I'd love to know about it.
 
Old 11-25-2004, 10:43 PM   #3
KohlyKohl
Member
 
Registered: Aug 2004
Location: Wausau, WI
Distribution: SuSE Linux Enterprise Desktop 10
Posts: 193

Rep: Reputation: 30
When in doubt always use Google! Anyways I found some links that might help

http://my.brandeis.edu/bboard/q-and-...?msg_id=0001mn ok step by step for .net
http://www.netadmintools.com/art172.html this one is for 2000 but it should still work for .net

I just used "using samba with 2003 active directory" and it came up with alot of very good links that should help out alot.
 
Old 08-02-2006, 08:58 PM   #4
rob3551
LQ Newbie
 
Registered: Aug 2006
Location: kamloops bc
Distribution: sientific,fedora,mandrake
Posts: 3

Rep: Reputation: 0
whoa I'm workin on this right now.....I have been trying to work out the ad side, seems you have both got the linux side down....I did the same and added it no problem.....But! it seems I can't get the AD to work and nether can I access the share I created (from the windows side)....as I reasearched it I found you may have to add an ou in AD (idmap)....I have been working out the issues on that side...I inherited this pissy 2003 install were they had changed all the default permissions etc. so now I'm bring up a vmware server image and working with it....if I find it I'll write the .ldf files as default and post them.

Rob
 
Old 08-02-2006, 09:50 PM   #5
KohlyKohl
Member
 
Registered: Aug 2004
Location: Wausau, WI
Distribution: SuSE Linux Enterprise Desktop 10
Posts: 193

Rep: Reputation: 30
I Know what you are talking about, but its been so long since I've Gotten AD and Samba to work together I can't remember how I did it. Google is your best friend, and the answer is out there and shouldn't be too hard to find. If I remember correctly you need to add some things to the samba.conf to allow windows to access the shares, but I'm not sure.
 
Old 09-10-2006, 04:53 PM   #6
tisource
Member
 
Registered: Feb 2002
Posts: 322

Rep: Reputation: 30
We upgraded to SLES 10, and I actually got this working. It's very nice!

I had to configure nsswitch.conf to get what I wanted working. I also had to play with kerberos, but that was trivial.
 
Old 09-14-2006, 09:40 AM   #7
rob3551
LQ Newbie
 
Registered: Aug 2006
Location: kamloops bc
Distribution: sientific,fedora,mandrake
Posts: 3

Rep: Reputation: 0
ya the issues I was running into were on the Linux side....seems my build was locked down too tight I removed the security lock down on it and then had to change some of the permissions on the samba side and it worked perfectly (add your admin group in on folder permissions beside the root permissions)....now to re-apply the security on linux....this allowed me to control the permissions from the windows side....I left that place as of now and I still have the team build images so if anyone needs it I'll post the smf.conf or any of the other connection files.

DNS could be your biggest issue, seems they were running the DNS in that shop with 1 ip for the pdc and another for the AD fqdn.....I don't know how it ran, windows isn't that good and always wants to have some sort of authoritative DNS to write to....but thats another issue lol.

Last edited by rob3551; 09-14-2006 at 09:50 AM.
 
Old 09-14-2006, 04:23 PM   #8
tisource
Member
 
Registered: Feb 2002
Posts: 322

Rep: Reputation: 30
We're on a private subnet (10.0.0.0/24) and get on the Internet through a masquerade (nat). Talking about the Windows and DNS, we ended up creating a subdomain for Windows, and it is authorative for that. Then, I made our Linux box a slave on that zone. End result: Windows can have its subdomain as it insists, but our Linux is still serving DNS requests for everything - and that is the way I want it!
 
Old 09-17-2006, 06:07 PM   #9
rob3551
LQ Newbie
 
Registered: Aug 2006
Location: kamloops bc
Distribution: sientific,fedora,mandrake
Posts: 3

Rep: Reputation: 0
I hear ya! I get around the DNS issue by letting windows run as DNS when ever I add a pc to the network, then just copy the new entries to the linux box, and shut off the windows DNS. This seems to work out ok, as windows just fills the event logs with errors, otherwise.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off
Trackbacks are Off
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
RHEL4 authentication to Windows 2003 Active Directory rtkaczyk Linux - Enterprise 40 10-29-2007 07:27 PM
Authenticating Linux against Windows 2003 Active Directory Builder Linux - Enterprise 26 08-30-2005 03:56 AM
Suse Ent w/ Windows 2003 Active Domain mjtalk Linux - Networking 1 02-12-2005 04:33 AM
Samba 3 in MS Active Directory domain psychobyte Linux - Software 3 10-16-2004 04:14 PM
Slackware Linux and Windows 2003 Server Active Directory..HOW TO? Synick_ Linux - Networking 0 05-14-2004 06:24 AM


All times are GMT -5. The time now is 12:50 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration