LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices



Reply
 
Search this Thread
Old 10-13-2010, 10:18 AM   #1
jcdole
LQ Newbie
 
Registered: Apr 2006
Location: Saint-Jean-de-Luz. South West, Atlantic coast (France)
Distribution: SUSE 13.3 (Commercial)
Posts: 14

Rep: Reputation: 0
LINUX BASED CLIENT UNABLE TO JOIN LINUX PDC with LDAP


Hello.

I have some problems, with a new samba configuration.

I want to setup a SAMBA PDC with ldap authentification, following an HOWTO found on the web.
I used this howto with success on OPENSUSE 10.1 with a X86 processor and I have used it a lot of time (windows 2000 clients).

Now I use OPENSUSE 11.3.
And I test this new configuration with two new PC running X64 processor running linux.

PDC OS : Opensuse 11.3 X86-64 with full optionnal server software install
CLIENT OS : Opensuse 11.3 X86-64 with minimal desktop workstation configuration

Samba : 3.5.4-5.1.2
Ldap : 2.4.21-9.1
Smbldap-tools : 0.9.5-26
nss_ldap : 265-4.2
pam_ldap : 185-4.2
perl-ldap : 0.40-2.4

No firewall

Local Network : 192.168.xxx.yyy

The server is not configured using opensuse yast but configuring directly from conf files.
I have try to use yast to configure the laptop client with no help.

I have not found anything on the web nor from samba doc what should be configured precisely on the linux client side.

If you have some reading to recommend.

===============

Client side is not really configured as I don't know what to do

===============

smbclient login run with success from server or client, anonymously or with normal user account and show shares

===============

ldapsearch run with success only with ip adress ( -D 192.168.xxx.yyy ) and not with name server ( -D my_server )

===============

There is some problem with winbindd-idmap (some smb panic during initialization )

===============

log : 192.168.xxx.yyy
[2010/10/12 21:51:13.860399, 0] rpc_server/srv_netlog_nt.c:475(get_md4pw)
get_md4pw: Workstation MY-TOSHIBA$: no account in domain
[2010/10/12 21:51:13.861012, 0] rpc_server/srv_netlog_nt.c:692(_netr_ServerAuthenticate3)
_netr_ServerAuthenticate2: failed to get machine password for account MY-TOSHIBA$: NT_STATUS_ACCESS_DENIED
[2010/10/12 21:51:13.865713, 0] rpc_server/srv_netlog_nt.c:475(get_md4pw)
get_md4pw: Workstation MY-TOSHIBA$: no account in domain
[2010/10/12 21:51:13.866259, 0] rpc_server/srv_netlog_nt.c:692(_netr_ServerAuthenticate3)
_netr_ServerAuthenticate2: failed to get machine password for account MY-TOSHIBA$: NT_STATUS_ACCESS_DENIED

log : my_toshiba
[2010/10/12 21:51:13.860399, 0] rpc_server/srv_netlog_nt.c:475(get_md4pw)
get_md4pw: Workstation MY-TOSHIBA$: no account in domain
[2010/10/12 21:51:13.861012, 0] rpc_server/srv_netlog_nt.c:692(_netr_ServerAuthenticate3)
_netr_ServerAuthenticate2: failed to get machine password for account MY-TOSHIBA$: NT_STATUS_ACCESS_DENIED
[2010/10/12 21:51:13.865713, 0] rpc_server/srv_netlog_nt.c:475(get_md4pw)
get_md4pw: Workstation MY-TOSHIBA$: no account in domain
[2010/10/12 21:51:13.866259, 0] rpc_server/srv_netlog_nt.c:692(_netr_ServerAuthenticate3)
_netr_ServerAuthenticate2: failed to get machine password for account MY-TOSHIBA$: NT_STATUS_ACCESS_DENIED

log : smbd (at startrup)
[2010/10/12 20:37:19.676580, 2] lib/smbldap.c:950(smbldap_open_connection)
smbldap_open_connection: connection opened
[2010/10/12 20:37:20.246137, 2] auth/token_util.c:453(create_local_nt_token)
WARNING: Failed to create BUILTIN\Administrators group! Can Winbind allocate gids?
[2010/10/12 20:37:20.269393, 2] auth/token_util.c:477(create_local_nt_token)
WARNING: Failed to create BUILTIN\Users group! Can Winbind allocate gids?
[2010/10/12 20:37:20.589480, 2] auth/token_util.c:453(create_local_nt_token)
WARNING: Failed to create BUILTIN\Administrators group! Can Winbind allocate gids?
[2010/10/12 20:37:20.604934, 2] auth/token_util.c:477(create_local_nt_token)
WARNING: Failed to create BUILTIN\Users group! Can Winbind allocate gids?
[2010/10/12 20:37:20.667902, 2] smbd/server.c:721(smbd_parent_loop)
waiting for connections

log : smbd.log
2010-10-12T21:51:13.861325+02:00 LINUX-SRV SVRTY:3 TAG:smbd[5332]: MSG: [2010/10/12 21:51:13.860399, 0] rpc_server/srv_netlog_nt.c:475(get_md4pw)
2010-10-12T21:51:13.861351+02:00 LINUX-SRV SVRTY:3 TAG:smbd[5332]: MSG: get_md4pw: Workstation MY-TOSHIBA$: no account in domain
2010-10-12T21:51:13.861365+02:00 LINUX-SRV SVRTY:3 TAG:smbd[5332]: MSG: [2010/10/12 21:51:13.861012, 0] rpc_server/srv_netlog_nt.c:692(_netr_ServerAuthenticate3)
2010-10-12T21:51:13.861377+02:00 LINUX-SRV SVRTY:3 TAG:smbd[5332]: MSG: _netr_ServerAuthenticate2: failed to get machine password for account MY-TOSHIBA$: NT_STATUS_ACCESS_DENIED
2010-10-12T21:51:13.866599+02:00 LINUX-SRV SVRTY:3 TAG:smbd[5332]: MSG: [2010/10/12 21:51:13.865713, 0] rpc_server/srv_netlog_nt.c:475(get_md4pw)
2010-10-12T21:51:13.866615+02:00 LINUX-SRV SVRTY:3 TAG:smbd[5332]: MSG: get_md4pw: Workstation MY-TOSHIBA$: no account in domain
2010-10-12T21:51:13.866627+02:00 LINUX-SRV SVRTY:3 TAG:smbd[5332]: MSG: [2010/10/12 21:51:13.866259, 0] rpc_server/srv_netlog_nt.c:692(_netr_ServerAuthenticate3)
2010-10-12T21:51:13.866643+02:00 LINUX-SRV SVRTY:3 TAG:smbd[5332]: MSG: _netr_ServerAuthenticate2: failed to get machine password for account MY-TOSHIBA$: NT_STATUS_ACCESS_DENIED
2010-10-12T21:51:15.691754+02:00 LINUX-SRV SVRTY:3 TAG:smbd[5333]: MSG: [2010/10/12 21:51:15.690729, 0] passdb/pdb_interface.c:348(pdb_default_create_user)
2010-10-12T21:51:15.691788+02:00 LINUX-SRV SVRTY:3 TAG:smbd[5333]: MSG: _samr_create_user: Running the command `/usr/sbin/smbldap-useradd -w 'my-toshiba$'' gave 9

Using yast on the client ( join windows domain )

1) From scratch after initializing ldap database, the workstation account is created ( my_toshiba$ )
2) There is a search for the machine account password, but there no field for that in the schema. Password field exist only for user.

On the client side could you tell me what files must be considered ( I configure these on the server side )
/etc/hosts
/etc/nsswitch.conf
/etc/pam.d/common-session-pc
/etc/samba/smb.conf
/etc/openldap/ldap.conf
/etc/openldap/slapd.conf
/etc/smbldap-tools/smbldap.conf
/etc/smbldap-tools/smbldap_bind.conf


Thank you for helping me

JC DOLE
 
Old 10-14-2010, 07:41 PM   #2
leandean
Member
 
Registered: Oct 2005
Location: Burley, WA
Distribution: Sabayon
Posts: 276

Rep: Reputation: Disabled
This is pretty close to what I do at work::

http://www.gentoo.org/doc/en/ldap-howto.xml
 
Old 10-22-2010, 06:21 AM   #3
jcdole
LQ Newbie
 
Registered: Apr 2006
Location: Saint-Jean-de-Luz. South West, Atlantic coast (France)
Distribution: SUSE 13.3 (Commercial)
Posts: 14

Original Poster
Rep: Reputation: 0
Quote:
Originally Posted by leandean View Post
This is pretty close to what I do at work::

http://www.gentoo.org/doc/en/ldap-howto.xml
After complete reinstall of the server and the linux client, I was able to make linux client to join the SAMBA DOMAIN.

But after reboot of the linux client, the user root was not able to log onto the domain.
Is it normal ?

A normal user logged onto the domain to become super-user ( su command ) must give the samba-ldap admin password.
Is it normal ?


On the client side, could you tell me what files must be considered and what is the difference in content from the server side files ?

/etc/hosts
/etc/nsswitch.conf
/etc/pam.d/common-session-pc
/etc/samba/smb.conf
/etc/samba/smbuser
/etc/openldap/ldap.conf
/etc/ldap.conf


Is there more config files to be considered


Concerning linux client side configuration, Is there more information/howtos I can find on the net ?


Thank you for helping me

JC DOLE
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Whay I can't join WinXP to Samba PDC LDAP domain? meksyk13 Linux - Server 3 08-29-2014 08:34 AM
Configuring RHEL4 linux client to join samba PDC bussneth Red Hat 1 09-28-2006 10:10 AM
Configuring RHEL4 linux client to join samba PDC bussneth Red Hat 1 09-28-2006 04:21 AM
How to join a Linux client to a Samba PDC Niceman2005 Linux - Networking 4 11-29-2004 10:23 PM


All times are GMT -5. The time now is 04:01 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration