System:
Ubuntu 9.04 (jaunty server)
I am building a Samba server to handle our small company's domain logons. I selected the LAMP package during install, with no changes to any defaults. I'm currently in the midst of Samba config, and it's kicking my butt!
From the HowTO, I have been able to do smbclient logins from localhost, and after have managed a basic user login from the Ubuntu shell:
smbclient //jam2/administrator -U administrator -W JAM2
Enter administrator's password:
Domain=[JAM2] OS=[Unix] Server=[Samba 3.3.2]
smb: \>
However, domain logins and joins from Windows machines are not working right now. I started out trying to set up ldap, but now see the wisdom of sticking with tdbsam. Looking closer into tdbsam and my password files, and the Samba.org HOWTO, I am now officially confused and think I may be seeing differences between Ubuntu's LAMP installation and Samba.org's recommendations.
Is my installation broken?
When I read information from the Samba.org HOWTO, they seem to like some files *(i.e. .tdb files) stored in the path
/var/lib/samba. yet Ubuntu seems to have configured them in
/etc/samba
For instance...
root@jam:/var/log/mycron# smbd -b | grep PRIVATE_DIR
PRIVATE_DIR: /etc/samba
root@jam:/var/log/mycron# smbd -b | grep LOCKDIR
LOCKDIR: /var/run/samba
...yet the only .tdb files on the system are under
/var
Code:
root@jam:~/samba# find / -iname *.tdb
/var/cache/samba/winbindd_cache.tdb
/var/cache/samba/netsamlogon_cache.tdb
[...]
/var/run/samba/notify.tdb
/var/run/samba/unexpected.tdb
[...]/var/lib/samba/ntforms.tdb
/var/lib/samba/winbindd_idmap.tdb
[...etc.]
Other than a "swift kick to the n00b" does anyone have any observations to share about differences in installation defaults between Samba.org vs Samba-on-Ubuntu?
PS, since I notice all n00b posts are answered with "can we see your smb.conf file...", here it is. Still learning, so be kind.
Thanks,
--mdutch
Code:
[global]
workgroup = JAM2
netbios name = SMB
server string = %h Domain Controller %v
interfaces = bond0, lo
bind interfaces only = Yes
map to guest = Bad User
obey pam restrictions = Yes
passdb backend = tdbsam
pam password change = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
unix password sync = Yes
syslog = 0
log file = /var/log/samba/log.%m
max log size = 1000
name resolve order = wins lmhosts hosts bcast
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
printcap name = cups
show add printer wizard = No
add user script = /usr/sbin/adduser --quiet --disabled-password --gecos "" %u
add group script = /usr/sbin/addgroup --force-badname %g
delete group script = /usr/sbin/groupdel %g
add user to group script = /usr/sbin/adduser %u %g
delete user from group script = /usr/sbin/deluser %u %g
add machine script = /usr/sbin/adduser -g machines -c "%u machine account" -d /var/lib/samba -s /bin/false '%u'
logon script = jamlogin.bat
logon path =
logon drive = H:
logon home = \\%L\%u\.win_profile\%m
domain logons = Yes
os level = 33
domain master = Yes
wins support = Yes
panic action = /usr/share/samba/panic-action %d
idmap uid = 10000-20000
idmap gid = 20000-30000
template shell = /bin/bash
winbind enum users = Yes
winbind enum groups = Yes
winbind use default domain = Yes
[homes]
comment = Home Directories
path = /samba/home/%u
valid users = %S, %D%w%S
read only = No
create mask = 0775
directory mask = 0775
inherit acls = Yes
browseable = No
[netlogon]
comment = Network Logon Service
path = /samba/netlogon
guest ok = Yes
browseable = No
[profiles]
comment = Users profiles
path = /samba/home/profiles/
create mask = 0600
directory mask = 0700
browseable = No
[printers]
comment = SMB Print Spool
path = /var/spool/samba
guest ok = Yes
printable = Yes
use client driver = Yes
browseable = No
[print$]
comment = Printer Drivers
path = /var/lib/samba/printers
[app]
comment = app samba share
path = /home/samba/app
read only = No
create mask = 0770
directory mask = 0770
guest ok = Yes
[jam]
comment = JAM Corporate Data
path = /home/samba/jam
read only = No
create mask = 0770
directory mask = 0770
[web]
comment = Website backups
path = /var/www
create mask = 0775
directory mask = 0775
guest ok = Yes
