Help With Samba

shane200_ · 07-31-2006, 10:11 AM

I have a LAN with two subnet 192.168.190.0 and 192.168.180.0 all of my servers and some of my users are on the 190 subnet and my wireless users are on 180 subnet, I have config Samba and OpenLDAP on my PDC, I can ping/nslookup via host name & IP from both subnet but when I try to access the Domain from the 180 subnet I get that I don't have access permission to the domain but I can get access to the domain from the 190 subnet. Can anyone tell me what I am not doing or should do!!!! I NEED SOME HELP!!! PLZZZZ

crep · 07-31-2006, 10:47 AM

whhoaaaaa slow down a second.

So you have two subnets. How are they connected, and what are the routing rules between them?

Which subnet is your domain controller / LDAP box on?

shane200_ · 07-31-2006, 10:51 AM

I have a cisco 2600 router which is doing the routing. The PDC is on the 192.168.190.0 subnet, users that are on this subnet can join the domain, but users on the 192.168.180.0 subnet can only ping by IP and hostname to the PDC but I can't get access to the domain and I don't join them to the domain

crep · 07-31-2006, 10:55 AM

On your 2600, are there any ACLs that might restrict packets passing between the subnets?

shane200_ · 07-31-2006, 11:13 AM

no ACL set up, I can ping by IP and hostname from both subnet and from the 180 subnet I can do nslookup to the PDC

crep · 07-31-2006, 11:15 AM

If youre really determined, you could put ethereal (a packet sniffer) on the domain controller, and sniff a good session from a box that works. Then watch from a box that doesn't work, and see what's different.

I recall once that a freind had trouble like this because the domain controller used broadcast packets, which obviously aren't passed at the router.

shane200_ · 07-31-2006, 11:25 AM

is there a way that I can tell samba who or which network can get access to the domain?

crep · 07-31-2006, 11:35 AM

In smb.conf there is an access list, so you could do things like deny 192.168.190.0/24, but I think in your case you want to allow everything, right? Usually it's set to allow all by default, but good idea look in smb.conf and make sure no access lists are set up.