LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Networking (https://www.linuxquestions.org/questions/linux-networking-3/)
-   -   joining a samba domain (https://www.linuxquestions.org/questions/linux-networking-3/joining-a-samba-domain-70098/)

ikw38 07-04-2003 11:56 AM

joining a samba domain
 
Hi,
I have gotten rid on Vendow$ XPEE and wnet back to W2K.
Now Ihave everything ready to join the Samba Domian but I keep getting this error--

---------------------------
Network Identification
---------------------------
The following error occurred attempting to join the domain "smis":

Logon failure: unknown user name or bad password.
---------------------------
OK
---------------------------
I am trying to make it logon as "ROOT"

what do I need to do here I think finally I am going to get this to work..

Thanks and quick answer would greatly apreciated,

ikw38

ikw38 07-04-2003 02:26 PM

Can any help me here??

david_ross 07-04-2003 02:28 PM

Try disabling "sign or seal".

ikw38 07-04-2003 02:38 PM

Sorry I don't understand "sogn or seal " is this something in Vendows?

Thanks

david_ross 07-04-2003 03:19 PM

Check that the following registry key is set as below:
Code:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters]
"requiresignorseal"=dword:00000000


ikw38 07-04-2003 04:13 PM

OK I set that and now I get this error when I try to get W2K to join the Domain called SMIS

---------------------------
Network Identification
---------------------------
The following error occurred attempting to join the domain "SMIS":

The credentials supplied conflict with an existing set of credentials.
---------------------------
OK
---------------------------
I try to log on as root and the other account I have and the samething happens ..
What is wrong here??


Thanks,ikw38

ikw38 07-04-2003 04:38 PM

Here is my SMB.CONF file for review...
[global]
# netbios bla, bla, bla
workgroup = SMIS
netbiosname = SAMBA_PDC
server string = Linux net

# LogSamba
log file = /var/log.%m

# PDC's
domain master = YES
prefered domain = YES
domain logons = YES
os level = 65
security = DOMAIN
ENCRYPT PASSWORDS = YES


# Passwords
encrypt passwords = yes
update encrypted = yes
password level = 4

# Administration. PDC
domain admin users = root

# Performance
short preserve case = yes
max log size = 5000
case sensitive = no
default case = lower
mangle case = no
dead time = 15yes
read raw = yes
write raw = yes
socket options = TCP_NODELAY
oplocks = yes
fake oplocks = no
debug level = 2
preserve case = yes
getwd cache = yes


printing = cups
load printers = yes

[homes]
path = /home/%u
comment = samba users
browseable = yes
writeable = yes



I also want to share my Epson Printer from Linux to W2K as well
can someon help me out here.

Thanks

ikw38 07-04-2003 07:14 PM

Can anyone help me out here?
I 'll try anything to get this right.
THanks

ikw38 07-05-2003 12:46 AM

Anyone got any ideas here.
I can't believe that you can't take a W2K workstation and join a Linux Domain.
There has to be away.
I can see them both from both directions.
But I can't join the Domain so I will have security and printer privalages.
So anyone that could I would eeply apreciate it...... :-)

ikw38 07-05-2003 09:02 AM

Ok I ran this test from the terminal using the smbclinet -L xxxxx

these are the results and I think it is a matter of doing something very simple here to fix this here are the results

Unknown parameter encountered: "prefered domain"
Ignoring unknown parameter "prefered domain"
Unknown parameter encountered: "prefered domain"
Ignoring unknown parameter "prefered domain"
Unknown parameter encountered: "domain admin users"
Ignoring unknown parameter "domain admin users"
added interface ip=192.168.1.100 bcast=192.168.1.255 nmask=255.255.255.0
Got a positive name query response from 192.168.1.100 ( 192.168.1.100 )
Password:
session setup failed: NT_STATUS_LOGON_FAILURE

What can I do to fix this??
Thanks,
ikw38

jamrock 07-05-2003 09:24 AM

I am trying to understand the difficulty that you are having.

It sounds as if you are trying to add a Windows 2000 machine to a Samba PDC. I may need to get the full history of the Samba configuration but let me try something.

Quote:

The credentials supplied conflict with an existing set of credentials.
This message normally occurs when you have a mapping to the existing server name and you are trying to add a machine to the domain. Make sure that nothing is mapped (e.g. drives) on the Windows 2000 machine.

In the # PDC's section of your smb.conf file change the line to

security = user

Security = domain suggests that a domain controller other than the PDC is going to authenticate users.

You may want to comment out these two lines.

update encrypted = yes
password level = 4

I have never seen them before and don't know what they do.

Here are the standard documents for creating a Samba PDC. Use the IBM tutorial first.

http://www-1.ibm.com/servers/esdd/tu...mba/index.html


http://networking.earthweb.com/netos...le.php/1144701

http://networking.earthweb.com/netos...le.php/1151091


Remember to include the

domain logons = yes

command in your smb.conf file. This is required for Windows 2000/XP logons even though the literature suggests otherwise.

I strongly recommend that you use vi or some other text editor to create your smb.conf file. Swat and Webmin add all kinds of unnecessary stuff to the file.

jamrock 07-05-2003 09:33 AM

By the way, Windows XP clients can be added to a Samba domain. A few additional steps need to be taken. See the chapter on client configuration.

ikw38 07-06-2003 03:14 PM

Ok I went out and redid my SMB.CONF file, now I can see each other fine. I can set it up in Vendow$ to print to Linux -ok?! ( using the wrong printer driver causes bad prints but prints-Unfortunatly Epson changed it printer driver in WIndows to printer port which means that they are getting like the old winmodems _Proprietary_somebody is sleeping with M$)

Anyway I can not join the DOMAIN STILL
I can not Print from Linux to windows using anything except a number 2 pencil.

Could someone tell what is wrong here- I have no firewalls up, I have done the registry trick in Windows.
Here is my smb.conf (currently)

I have never seen anything hard to do ..... Are you guys sure it can be done? Or are we living in Fantasty Island??

[global]
workgroup = SMIS
netbios name = Linux_Server
server string = Linux Server %v

security = share
encrypt passwords = yes
browsable = yes
local master = yes
domain master = yes
os level = 99
preferred master = yes
domain logons = yes
domain admin group = @ntadmins hosts allow = 192.168.1.100/24 127.
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

log file = /var/log/samba/%m.log
max log size = 0

printcap = /etc/printcap
load printers = yes
printing = lprng
use client driver = yes

#========================= Share Definitions ========================
[printers]
comment = All Printers
path = /var/spool/samba
browsable = no
public = yes
writable = no
printable = yes

[public]
comment = A public share for vendor docs, etc.
path = /usr/public
public = yes
create mask = 0755
force directory mode = 0755
writable = yes

[temp]
comment = A place to drop off temporary files
path = /tmp
public = yes
create mask = 0755
force directory mode = 0755
writable = yes

[docs]
comment = Main Document Share for important Corporate Documents
path = /doc
public = yes
create mask = 0755
force directory mode = 0755
writable = yes

[home]
comment = Home directory for %U
path = /home/%U
browsable = yes
public = no
hide dot files = yes
writeable = yes
create mask = 0755
directory mask = 0755
username = %U

jamrock 07-06-2003 03:36 PM

Quote:

I have never seen anything hard to do ..... Are you guys sure it can be done? Or are we living in Fantasty Island??
You appear to be missing out a step. Let us go step by step.

I don't think it is hard. I have done it for several customers.

I use a Samba server with Windows 2000 Professional clients in my office. We even have a Windows 2000 member server running a MS SQL application.

Your security settings are incorrect. Change it to read

security = user

This is very important.

Comment out the following line. I have never used it and I don't know what it does. You can add it back once we get your machines added to the network.

domain admin group = @ntadmins hosts allow = 192.168.1.100/24 127.

Tell me how you added your users to the Linux machine.

ikw38 07-06-2003 05:09 PM

smbpasswd -r PLATO -j SMIS
is how I have tried to add the machines. I will go back and change the securuty to users once again.
ANd I will comment out that line-


All times are GMT -5. The time now is 08:17 AM.