LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 09-13-2006, 01:15 PM   #16
New2Linux2
Member
 
Registered: Jan 2004
Location: Arizona
Distribution: Debian
Posts: 135

Rep: Reputation: 22

Ok. Quick update. One of my samba logs (/var/log/samba/log.10.1.1.132) just filled up with a bunch of stuff:
Code:
[2006/09/13 10:43:37, 0] lib/access.c:check_access(328)
  Denied connection from (10.1.1.132)
[2006/09/13 10:43:37, 1] smbd/process.c:process_smb(1084)
  Connection denied from 10.1.1.132
These are repeated for several lines (about 20 repeats of those two lines with only the time changing). 10.1.1.132 is the machine that I've been trying to get to join the domain.

Last edited by New2Linux2; 09-13-2006 at 01:16 PM.
 
Old 09-13-2006, 02:19 PM   #17
achtung_linux
Member
 
Registered: May 2006
Posts: 50

Rep: Reputation: 15
I hope you are not trying to get XP Home Edition in a domain... you cannot get a PC with XP Home Edition to join a domain.
I also hope that you checked your third-party (not Windows default firewall) firewall that you maybe installed by yourself a while ago and forgot about it, or your ISP gave you a trial/express edition of a firewall that you just overlooked while picking through log files...
 
Old 09-13-2006, 04:04 PM   #18
New2Linux2
Member
 
Registered: Jan 2004
Location: Arizona
Distribution: Debian
Posts: 135

Rep: Reputation: 22
Quote:
Originally Posted by achtung_linux
I hope you are not trying to get XP Home Edition in a domain... you cannot get a PC with XP Home Edition to join a domain.
It is XP Pro SP2.
Quote:
I also hope that you checked your third-party (not Windows default firewall) firewall that you maybe installed by yourself a while ago and forgot about it, or your ISP gave you a trial/express edition of a firewall that you just overlooked while picking through log files...
Our company uses all Windows clients running Zone Alarm for AV, Firewall, Spam filter, YADA, YADA, YADA. I have uninstalled it from the test system for the time being to make sure it's not interfering with the network communications.

The Debian install was a minimal install (not even a GUI) with packages added after the OS was fully installed. So far only DNS (bind9) has been installed and configured to work on our network. Once I get Samba working, Exim4 will be the last thing to install and configure for this server (as far as server services goes anyways). I have not found any information one way or the other on what firewall Debian might have installed during it's setup, but I have checked and am unable to find a PID for one running.
 
Old 09-13-2006, 05:38 PM   #19
fotoguy
Senior Member
 
Registered: Mar 2003
Location: Brisbane Queensland Australia
Distribution: KirraMail Live Email Server
Posts: 1,279

Rep: Reputation: 61
Quote:
Originally Posted by New2Linux2
[CODE]
invalid users = root
I notice you have root denied in the global settings, I wonder if that is stopping the machine from authenticating properly. Since it is denying root from connecting to samba, maybe try commenting it out for now and if it works just uncomment it once all the machines are connnected.
 
Old 09-14-2006, 04:49 AM   #20
blackraider
LQ Newbie
 
Registered: Apr 2006
Location: Dark Side of Linux
Distribution: Gentoo AMD64
Posts: 6

Rep: Reputation: 0
Comparing your smb.conf with the mine, I've found some diferences that could help you:

#### Networking ####

# The specific set of interfaces / networks to bind to
# This can be either the interface name or an IP address/netmask;
# interface names are normally preferred
# In this case substitute 172... with your IP range and device
# This option enable samba to listen for connections
interfaces = 172.26.0.0/255.255.0.0 eth0

# Is this machine able to authenticate users. Both PDC and BDC
# must have this setting enabled. If you are the BDC you must
# change the 'domain master' setting to no
#
domain logons = yes
#

This is for domain logons :

# The following setting only takes effect if 'domain logons' is set
# It specifies the location of the user's profile directory
# from the client point of view)
# The following required a [profiles] share to be setup on the
# samba server (see below)
logon path = \\%N\profiles\%U
# Another common choice is storing the profile in the user's home directory
logon path = \\%N\%U\profile

# The following setting only takes effect if 'domain logons' is set
# It specifies the location of a user's home directory (from the client
# point of view)
logon drive = H:
logon home = \\%N\%U

Could be important :

# Most people will find that this option gives better performance.
# See smb.conf(5) and /usr/share/doc/samba-doc/htmldocs/speed.html
# for details
# You may want to add the following on a Linux system:
# SO_RCVBUF=8192 SO_SNDBUF=8192
socket options = TCP_NODELAY

I've nor use the host allow option in Samba. I've use /etc/host.allow for give access permissions.

Well, that's all. Hope it helps.
 
Old 09-14-2006, 01:37 PM   #21
Bugrem
Member
 
Registered: Nov 2004
Distribution: Suse 9.3, 10.0, 10.1, 10.3
Posts: 65

Rep: Reputation: 16
er......
What I know about this issue would fit behind a ferret's foreskin - but....

smb passwd file = /etc/samba/smbasswd??

B.
 
Old 09-14-2006, 06:08 PM   #22
New2Linux2
Member
 
Registered: Jan 2004
Location: Arizona
Distribution: Debian
Posts: 135

Rep: Reputation: 22
Quote:
Originally Posted by fotoguy
I notice you have root denied in the global settings, I wonder if that is stopping the machine from authenticating properly. Since it is denying root from connecting to samba, maybe try commenting it out for now and if it works just uncomment it once all the machines are connnected.
I commented out that line and saw no improvement. I was under the impression that the purpose of that line is to keep a user (admin included) from logging into a domain workstation with the root account. I did not think that it was a factor in the initial authentication for joining a machine to the domain. I haven't found any info one way or the other on that, so if anybody knows for certain, please post.
Quote:
Originally Posted by blackraider
Comparing your smb.conf with the mine, I've found some diferences that could help you:
I tried those changes and have not had any luck so far. I'm kinda thinking DNS crapped out on this thing.
Quote:
Originally Posted by Bugrem
er......
What I know about this issue would fit behind a ferret's foreskin - but....

smb passwd file = /etc/samba/smbasswd??

B.
I completely missed that typo. Good eye for picking it up.

I am starting to suspect DNS because my clients are no longer able to see this server on the network. I can ping it from any client, but cannot browse to it using Explorer (not IE). I will post whatever I find regarding this issue. Thanks for everyone's help so far.
 
Old 09-15-2006, 04:47 PM   #23
New2Linux2
Member
 
Registered: Jan 2004
Location: Arizona
Distribution: Debian
Posts: 135

Rep: Reputation: 22
Isn't that just typical. DNS was kludged. I got it working and suddenly, Samba is in great shape. I can join the domain, run login scripts, share files and just have an all around good time. Thank you everyone for your help. I could not have gotten it working without all the excellent advice and leads.
 
Old 09-15-2006, 09:47 PM   #24
fotoguy
Senior Member
 
Registered: Mar 2003
Location: Brisbane Queensland Australia
Distribution: KirraMail Live Email Server
Posts: 1,279

Rep: Reputation: 61
Quote:
I commented out that line and saw no improvement. I was under the impression that the purpose of that line is to keep a user (admin included) from logging into a domain workstation with the root account. I did not think that it was a factor in the initial authentication for joining a machine to the domain. I haven't found any info one way or the other on that, so if anybody knows for certain, please post.
Yeah stops anyone logging in through the root account, just wasn't sure if it affected the initial authentication since only root can add a machine to the domain, once the machine is added then any user can then log into the domain. Although you did create the initial account so probably didn't make a difference.

Quote:
Isn't that just typical. DNS was kludged. I got it working and suddenly, Samba is in great shape. I can join the domain, run login scripts, share files and just have an all around good time. Thank you everyone for your help. I could not have gotten it working without all the excellent advice and leads.
Good to hear it's all up and running, DNS can be fun sometimes. Glad to have help

Last edited by fotoguy; 09-15-2006 at 09:50 PM.
 
Old 09-29-2006, 01:00 PM   #25
svetoslav
LQ Newbie
 
Registered: Sep 2006
Posts: 2

Rep: Reputation: 0
have you try, to enter the as Username, the XP User you are loging with, and that Password ??
 
Old 11-20-2006, 08:45 AM   #26
vba_djs
LQ Newbie
 
Registered: Nov 2006
Location: United States
Distribution: Ubuntu 12.4
Posts: 12

Rep: Reputation: 0
DNS - Got it Working

Quote:
Originally Posted by New2Linux2
Isn't that just typical. DNS was kludged. I got it working and suddenly, Samba is in great shape. I can join the domain, run login scripts, share files and just have an all around good time. Thank you everyone for your help. I could not have gotten it working without all the excellent advice and leads.
This entire thread seems to describe the problems I'm having trying to join my XP machine to Samba.

I'm not sure what you meant or how you got DNS working?
 
Old 11-20-2006, 01:53 PM   #27
New2Linux2
Member
 
Registered: Jan 2004
Location: Arizona
Distribution: Debian
Posts: 135

Rep: Reputation: 22
I'll clarify "kludged" for you then.

I had installed bind9 on this server for DNS. Unfortunately, several of the configuration files for the main zone and reverse zones had typos and little hard to find mistakes in them. After going through all of the configuration files and correcting those mistakes, DNS then started working to resolve domain names. As an alternative, you can setup a cacheing only DNS server using the example provided here on the bind9 website (offsite link).

If you need more help then that, feel free to post your smb.conf here.
 
Old 11-20-2006, 06:28 PM   #28
fotoguy
Senior Member
 
Registered: Mar 2003
Location: Brisbane Queensland Australia
Distribution: KirraMail Live Email Server
Posts: 1,279

Rep: Reputation: 61
Just a quick note, you don't have to have a DNS server running to have clients connect to a samba domain controller.
 
  


Reply

Tags
domain, samba


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
connecting samba to a windows 2003 active directory domain Jcrofton Linux - Networking 8 09-17-2006 06:07 PM
Samba 3.0.21a and Samba Domain Member Servers in a Windows 2003 ADS Domain ramz Linux - Networking 3 04-09-2006 08:26 PM
connecting to my linux samba domain spivy66 Linux - Newbie 4 04-15-2005 12:52 PM
Connecting Samba to Windows 2000 server domain subzero80 Linux - Networking 0 12-01-2003 05:35 PM
Joining a machine from another domain to my linux samba domain acummins Linux - Networking 0 09-13-2003 07:07 AM


All times are GMT -5. The time now is 01:56 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration