Ubuntu Servers :: Samba, PDC: Windows Xp Unable To Join The Domain?

Dec 18, 2010

I've been configuring a PDC using samba I used this tutorial url as reference. It seems all went well during the installation and configuration not until when I try to join a windows machine to the domain.

Scenario: When the authentication dialog box prompts the username and password of the domain administrator. I supply root as username and its corresponding password. Then I will prompt an error "The user name could not be found. But, I have noticed that when I supply a wrong password of root the it will prompt "Login failure: unknown user name or bad password. It seems that the windows machine was able to recognize the account somehow.

ADVERTISEMENT

Ubuntu Servers :: Samba PDC - XP Client Can't Join Domain?

Mar 31, 2011

I am practising setting up a small network using UBUNTU as a PDC through SAMBA to service xp clients.

I have sucessfully setup DNS on the Ubuntu server using Bind9 and can nslookup from both the client and the server by FQDN and can also ping ipaddress.

I have setup a basic smb.conf file however when I try to add the xp client to the domain I get an error message saying a domain controller for the domain could not be contacted.

I have disabled the firewalls on both the server and the xp client and still get the same error message when trying to join the domain. I've checked my network settings on the client, its set to use a static IP address and the DNS server and WINS server are set as my Ubuntu Samba PDC address.

I haven't been able to see anything odd in the smb.conf file that might cause this issue. I can connect directly to the shares using the samba network account that I created by going to start run and typing in the unc path.

Not sure what the cause of this issue is, I thought it might be a DNS issue on the client. One odd thing I noticed is that when I do nslookup using just the server name and not the FQDN i get a message in dos saying that the default server cannot be found but says that the server name for the [ipadress] cannot be found. It does list the correct ip.

I'm not sure what is causing the problem of stopping my xp client from joining the Ubuntu Samba PDC. I'm using UBUNTU server 10.04.

View 1 Replies View Related

General :: New Windows Xp Clients Can't Join Samba Domain / Fix It?

Aug 18, 2010

We've been running samba on linux for a while and everything was fine. All of a sudden when you add new clients to the domain you get the error message :Logon Failure:unknown user name or bad password. This to me seems like a windows error message and not a samba error. When you remove an existing machine (ie on domain) and then try to rejoin it to the domain you fail.

View 4 Replies View Related

Networking :: Can't Join Windows 2000 Domain Using Net Ads Join?

Sep 19, 2008

I?m trying to change the Windows server to Linux. I?m using Ubuntu 8.04 LTS with Samba 3.02. Security is ads so the server is a domain server. The good thing is I had it working where as windows could see the share files and Ubuntu could see the windows files. I started downloading files into the share directory and started setting up permission. I rebooted the server and now I can not join the domain using net ads join.I can join using RPC but share don?t work.I can see my domain users and groups using wbinfo. I using Windows2k in native mode and Realm is pointing to the domain.

View 2 Replies View Related

OpenSUSE Network :: Domain- Incapable MS Windows Version To Join Suse Domain?

Jun 9, 2010

I was wondering if there is any way to enable an MS Windows client that is otherwise unable of joining a domain to join a domain controlled by (open)SUSE? Is that inability only for joining a Windows based domain but a client that runs XP Home Edition or similar domain- incapable version of Windows could join a domain if it was controlled by Linux?Pardon my newbie style, but answer doesn't have to be detailed step-by-step, just yes/no answer with some pointers would do. I am not new to linux but new to network services... search engines weren't friendly when asked this question at the search bar...

View 2 Replies View Related

Fedora :: Samba As BDC On F11 And WinXP SP3 Not Join In Domain

Sep 28, 2009

I have installed Fedora 11 and all updates. Samba 3.4.1. When join to domain from WinXP box with sp3 show error. The specified network password is not correct.

View 9 Replies View Related

Software :: Configuring Samba Users To Join Clients To The Domain?

Feb 3, 2011

Im currently using an english book to setup my samba server, and im having problems understanding it.

I dont want to use root to join clients to the domain; i prefer creating a plain user.

Ok, so, the steps i follow are:

net groupmap add unixgroup=srvadmins ntgroup="Server Admins"
net groupmap add ntgroup="Domain Admins" unixgroup=dmnadmins rid=512 type=d
net rpc rights grant 'ORAServer Admins' seMachineAccountPrivilege

This way, i have a group called srvadmins with permissions to join clients, a group called dmnadmins with permissions to manage users and other permissions, and root.

Now, users: "root", "dmnadmin"(from dmnadmins group) and "srvadmin" (from srvadmins group) can add machines to domain. Root because is root, srvadmin because i granted permissions, and dmnadmin because is admin

So i wonder, why srvadmins group is needed to be granted privileges?

I tryed to lower dmnadmins privileges by revoking semachineaccountprivilege privilege, but didnt worked

net rpc rights revoke 'ORADomain Admins' seMachineAccountPrivilege

looks like its privileges comes from another group and it user managed to add a machine to the domain correctly.

Ok, so, is this really usefull? why do i need 3 kind of users to be able to join to the domain?

View 3 Replies View Related

CentOS 5 Server :: Samba PDC+LDAP, Failed To Join Domain For Win2k8?

Dec 8, 2009

I've setup my samba pdc with ldap, and I can see my shared files (public), which i think is an indication that my samba is working. But I can't seems to get my win2k8 machine to join my domain.

My domain admin is : root system admin: root password for both domain admin and system admin are the same The message that I get from Win2k8 when I try to join a domain is "The specified computer account could not be found. Contact an administrator to verify the account is in the domain. If the account has been deleted unjoin, reboot, and rejoin the domain"

[Code]...

View 2 Replies View Related

Ubuntu :: Networking / Setup A Domain And Directory Server Similar In Function To Windows Server W/ AD And Join Other Machines To The Domain

Aug 21, 2009

I've got a home server running Ubuntu Server 9.04 and several machines running Ubuntu Desktop (9.04 and 8.04) and Windows (XP, Vista and 7). Now what I want to do is to create a domain and directory server similar in function to Windows Server w/ AD and join my other machines to the domain, but am not sure where to start. I already have file shares with Samba but now I want to setup a domain.

View 3 Replies View Related

Ubuntu :: Unable To Join AD Domain?

Jun 9, 2010

I put a Lucid 10.04 box on a Windows AD network. I want it to join the domain. I used likewise-open5_5.0.3991.1-0ubuntu2_i386

I ran

1. sudo apt-get update
2. sudo apt-get install likewise-open
3. sudo domainjoin-cli join fqdn of your domain Administrator
4. sudo update-rc.d likewise-open defaults
5. sudo /etc/init.d/likewise-open start

After step 3, I get

Joining to AD Domain: mydomain dot local

With Computer DNS Name: ubuntu dot mydomain dot local

Administrator(at)MYDOMAIN dot LOCAL's password: [I entered it]

Error: Lsass Error [code 0x00080047]
40286 (0x9D5E) LW_ERROR_LDAP_SERVER_DOWN - Unknown error

Im just a Windows schlep new to Linux. I dont even know where to find things like /etc/nsswitch.conf--winbind, let alone how to edit them.

"You are only allowed to post URLs to other sites after you have made 15 posts or more" It took me an hour to get this to post. I attached a text file without all the spaces and 'dots'.

View 6 Replies View Related

Fedora Servers :: How To Replace Windows Domain Controller With Samba

Nov 26, 2010

First of all I am new user on fedora forum and I love Linux (special Redhat flavours) and want to replace windows into Linux Everywhere. I am having some issue in configuring PDC on Fedora,I want to replace my company Windows Domain controller and file server into fedora file and PDC, I tried from web and through 389-directory server but didn't succeed even once, how to configure PDC with Samba 4 + 389-directory Server, I have heard samba 4 is having awesome support and its better then windows DC, configuring Complete PDC. (Whatever need to configure PDC i.e. DNS, SAMBA 4, SWAT, WEBMIN, 389-Directory Server, Windows sync,).

View 4 Replies View Related

Ubuntu Servers :: Setup A DHCP Server And SAMBA As Windows Domain Controller?

Apr 6, 2010

Does anyone have a link to a tutorial on how to set up a DHCP server and SAMBA as a windows domain controller? I can't really find good detailed guides by searching google.

View 2 Replies View Related

Ubuntu Servers :: Use Samba+winbind To Authenticate Desktop Against A Windows 2008 R2 Domain

Aug 3, 2011

Intent is to use samba+winbind to authenticate Ubuntu desktop against a Windows 2008 R2 domain (seems like I was able to get it working temporarily but it stopped working after some time). Quick overview of the issue: winbind is failing to lookup group ID's for a domain user causing the domain user to receive group errors on login and an inability to use domain groups in other configuration (sudoers, etc)

- Very basic install, boot to Ubuntu Desktop 10.04 LTS 64bit install, basic install options, perform software updates

- Following an Ubuntu AD HowTo [URL]

- Install kerberos, samba, winbind packages

- Make changes to krb5.conf, smb.conf, files in pam.d/ (to make the home directory and restrict login based on group membership, which works even in the half-working state but requires SID instead of text name)

After a reboot I can login as a domain account but I get the following error(s):

groups: cannot find name for group ID #####

##### is usually a number that ranges from 10000 to 10020, based on the smb.conf line regarding idmap I will get multiple group errors (one for each group that the user belongs to that winbind can't lookup for whatever reason, some groups can be resolved - see below) If I log-out and then log-in as a local user I can run the following command: id username The output returns something similar to the following:

uid=10002(username) gid=10003(domain users) groups=10003(domain users),10033,10032,10031,10030,10029,10028,10027,1 0026,10025,10024,10023,10022,10021(some group),10020,10019,10018(some other group),10017,10016,10015,10014,10013,10012,10011(s ome other other group),10010,10009,10008,10007

On a working system (Ubuntu 10.10 and when 10.04 decides to work) each group is followed by parenthesis' and the name of the group, this result clearly shows that some groups can be looked up but for some reason other groups are failing An output of /var/log/samba/log.winbind produces the following entries (that are logged when you run the id command)

[2011/08/03 19:04:39, 1] winbindd/winbindd_ads.c:1137(lookup_groupmem)
lsa_lookupsids call failed with NT_STATUS_PIPE_BROKEN - retrying...
[2011/08/03 19:04:39, 1] winbindd/winbindd_ads.c:1137(lookup_groupmem)
lsa_lookupsids call failed with NT_STATUS_PIPE_BROKEN - retrying...

The above repeats for what looks to be each group that fails (based on count of entries)If I use wbinfo I can resolve text group name to SID and SID to GID

wbinfo -n groupname (returns proper SID)
wbinfo -s SID (returns proper text group name)
wbinfo -Y SID (returns proper linux mapped group ID)

Following that process for a group that my user belongs to that is not resolving (via the id username command) will return the group ID (GID) properly (even though id username fails to lookup info for that same GID) Version Information:

uname -a
Linux hostname 2.6.32-33-generic #71-Ubuntu SMP Wed Jul 20 17:27:30 UTC 2011 x86_64 GNU/Linux
lsb_release -a
No LSB modules are available.

[code]....

View 3 Replies View Related

Ubuntu Servers :: Create Samba File Share To Windows Domain Clients?

Apr 28, 2010

I feel ashamed for even asking this, since it seems like there's about 3 samba questions here every day. However after an hour of searching, I keep finding strange variants that aren't what I need.

My Goal: Create a single file share on an Ubuntu Server - share it via samba to Windows clients that are on a domain with active directory. It sure would be nice if AD authentication would work - so users don't have to type in a linux user/passsword each time they want to access the share.

In my adventures, I've found the following items (which may overlap)

1. Joining the server to a Windows Domain

2. Turning the server into a Windows Domain Controller

3. Authentication with LDAP (still not quite sure how/what this would do)

4. Stuff with Kerberos

5. Lots of people bickering about Samba 3/4 & how it's impossible to make Samba a PDC.

I'm not sure if I need to make the ubuntu server a domain controller or not...all I want to do is create a file share and share it on the domain...I don't need to make the ubuntu server a domain controller for that, right? Maybe just a member? Maybe nothing at all?

I guess if I want to authenticate stuff correctly (or forward authentication requests? Not sure), I probably need to join the ubuntu server to the domain...I think.

But let's say I do join it to the domain...then how to I create a file share that is authenticated via active directory rather than a local ubuntu server account? I see a dozen guides on joining the server to the domain, but nobody ever mentions sharing the folder over the domain.

The lines are also blurred between joining Ubuntu to the domain and making it a domain controller. What should I keep an eye out to avoid in these tutorials?

I get lost between the Kerberos/LDAP/Samba/WinBind etc...and I have a feeling I don't need all of these for something this simple.

View 1 Replies View Related

Ubuntu Networking :: How To Join 9.10 In A Windows Domain

Feb 12, 2010

I've installed Ubuntu 9.10 in my office desktop. as a newbie in the world of linux, i really do not know much about it. I want to join my desktop in our domain. i already have the ip addresses of the DNS servers but i dunno where to put it. i've installed likewise open and try to join the domain but it displays the following errors: Manual Configuration Required:

The configuration stage 'open ports to DC' cannot be completed automatically. Please manually perform the following steps and rerun the domain join: Some required ports on the domain controller could not be contacted. Please update your firewall settings to ensure that the following ports are open to 'MARVEL2.LBPNET':

88 UDP
389 UDP
464 UDP
445 TCP

View 1 Replies View Related

Ubuntu :: How To Join Computer To A Windows Domain

May 15, 2011

How to join ubuntu computer to a windows domain ?

View 3 Replies View Related

Debian :: Join Machines To Windows Domain AD?

Aug 22, 2010

I have 15 or so debian lenny machines, and a xen server that I would like to join to the windows 2003 AD domain controller. The main goal is I would like the windows / linux user names and passwords to be the same on each system. Only 10 or so users need access to the machines but the passwords sometimes are different. How should I go about accomplishing this ?

I was told that openldap may be a solution. But from what I've read about it sounds like its just a mimic or window AD and doesnt sync with it, at least natively ?

View 2 Replies View Related

General :: Join Computer To A Windows Domain?

Mar 11, 2010

I am new to Debian Linux and I have just installed the software. How can I join the computer to a Windows domain? How can I configure the network?

View 1 Replies View Related

OpenSUSE Network :: Join Windows Domain

Nov 19, 2010

Where can I find information about how to get OpenSUSE 11.3 to join a Windows Domain that uses Kerberos?

View 1 Replies View Related

Ubuntu Networking :: Likewise Error When Attempting To Join Windows Domain

Jun 10, 2010

I'm having a problem getting likewise to connect to a Windows 2008 R2 server on our network.

[code]....

Error: Lsass Error [code 0x00080047] 9502 (0x251E) DNS_ERROR_BAD_PACKET - A bad packet was received from a DNS server. Potentially the requested address does not exist. I have already read up on this a little bit. Both servers are within a minute of each other, so I am not concerned about server timing. I am not sure where to go from this point. Everything I have read seems to indicate that this should "just work".

View 9 Replies View Related

Fedora Networking :: Join To Windows Domain / Box Automatically Added In DNS?

Dec 2, 2010

is it possible to join a Fedora box to a Windows Domain. Will the box be automatically added in DNS?How do I configure Fedora afterwards so I can login with a domain user on the box?

View 1 Replies View Related

OpenSUSE Network :: Can't Join Windows Server 2008 Domain?

Jul 5, 2010

I have too many problems to join my OpenSuSE 11.2 with Samba 3.5.4 in a Windows 2008 Active directory Forest (MYDOMAIN.LOCAL). I have updated Samba to 3.5.4 after read that default 11.2 version have too many bugs. Now, when I try to join the Domain MYDOMAIN.LOCAL via yast i have only an undebuggable error "unknown error". For yast, my Suse is joined but i'm unable to authenticate, i can't see "MYDOMAIN.LOCAL" at KDM login and if i try to lookup forest i have this error:

Code:
wbinfo -u
Error looking up domain users
but i'm able to retrive ticket via kinit
Code:
# kinit Administrator
Password for Administrator@MYDOMAIN.LOCAL:

[Code]...

have you a samba version tested against Active Directory 2008? can you link me the repository or help me to solve this?

View 2 Replies View Related

Ubuntu Servers :: Active Directory Domain Integration - Allow Domain Users To Authenticate Server And Access File Shares Using Samba

May 13, 2010

The company I work for, as usual, is Microsoft-centric. I'm attempting to integrate my Ubuntu server into the domain to allow domain users to authenticate to the server and access file shares using Samba. Here's my current configuration:

[Code].....

View 9 Replies View Related

Server :: Unable To Join Machine To Samba PDC

Jan 4, 2011

I am facing a problem which joining my linux machine to SAMBA Primary Domain Controller (Running on Centos 5). I am able to join Windows XP machine to the domain, but i have no idea how to do it on Linux Client.

View 1 Replies View Related

Server :: Connecting To A Samba (not On Domain) From Windows Domain Pc?

Jun 27, 2011

i need to allow window domain controller user to use file share of linux.windows DC user can see the share file and directories of linux file server but not able to access.

below is brief--

I have a Linux machine which is on my network but not on my domain. I have configured SAMBA FILESERVER for file sharing purpose. I have a Windows XP PC which is on the domain(windows server) that I am trying to connect to a share on the Linux box. I supply my credentials but regardless of which login I use I always get Logon Failure. I have created an account on the Linux machine with the same user name and password as my domain account but so far no luck. Can I connect from a domain PC to a non-domain Linux box? Is there something else I should be checking?

View 14 Replies View Related

CentOS 5 Server :: Cannot Join Windows 7 To Samba PDC

Sep 2, 2010

Good evening, I get the following error when prompted for my user name and password credentials that have access to the domain rights on the server. After typing in root and the password I get the following.

"The specified computer account could not be found. Contact an administrator to verify the account is in the domain. If the account has been deleted, unjoin, reboot and rejoin the domain."

Posted below is my smb.conf file, however I feel like I am screwing up the last steps with group-mapping, net commands, and creating accounts.

[global]
workgroup = SCRUGGSHOME
passdb backend = tdbsam
printcap name = cups
add user script = /usr/sbin/useradd -m %u

[Code].....

View 15 Replies View Related

Networking :: Join Ad With Samba, Preperation On The Windows Machine?

Jul 6, 2011

but is there any thing i need to make sure on the domain controller for me to be able to join the domain with a linux machine alright?

View 2 Replies View Related

Networking :: When Logon On Samba Domain The Windows XP Does Not Load Profiles From Samba?

Jan 3, 2011

I have update my linux server from mandriva 9 to mandriva 2010

I was working using samba 2.2.8 and now I have samba 3.5.3.I have transfer all passwd and smbpasswd to new linux.I have convert smbpasswd to tdbsam

when i am using win xp to logon on samba domain the windows XP does not load profiles from samba. I think that the problem is NTUSER.DAT storing in /home/user/profile

The same profile is working using samba 2.2.8 but not working in samba 3.5.3..

View 1 Replies View Related

Ubuntu Servers :: Unable To Setup The Domain - How To Use Two Domain Names

Feb 16, 2011

i have registered two domain names that i want to use to connect to my ubuntu server. I was wondering how to do this i was looking at bind9 but that didn't work that great. The server is behind a router with firewall i can connect to it using the external IP address but i like to use the two domain names if that is possible.

View 3 Replies View Related

Fedora Networking :: Windows Sever 2k3 Domain Controller / Use Machine With Samba As Secondary Domain Controller?

Apr 28, 2009

At the school i work in i have a server2k3 server that provides a domain to all the windows clients, aswell as a fedora server that acts as an imaging machine and webserver.

Im rather concious of the fact that if for any reason the Server2k3 server was to die there is no backup of active directory, or anything that can take its place whilst a replacement is found.

So is it possible to use a fedora machine with samba as a secondary domain controller? so it can be used as a login server, and has a copy of AD.

View 1 Replies View Related

Ubuntu Servers :: Samba Domain Not Serving Up Scripts?

Apr 13, 2011

My samba domain controller will not serve up scripts upon login, and acts very slow when not connected to the Internet. Also, network browsing from windows boxes shows no computers on the network once all this happens. Once the net connection comes back up, everything is fine.

Domain server:

Ubuntu 10.04.2 LTS
Samba 3.4.7

Router: Smoothwall Express 3.0-polar-i386 3.0 (update6). Router is set up as DHCP, and appears to be serving up normal IP's when the Internet connection goes down. I can ping the domain server at its normal IP when the connection goes down.

Heres my smb.conf:

Code:

[global]
log file = /var/log/samba/log.%m
passwd chat = *Entersnews*spassword:* %n
*Retypesnews*spassword:* %n

[code]....

This only happens when our internet connection goes down. When its up, everything is works fine.

View 2 Replies View Related

Server :: Samba Unable To Authenticate In NT Domain

May 3, 2010

We're still using an NT Domain Server, and Samba is already configured properly. But the problem is if the shared folder is configured in samba to be accessed by group and not the domain username, authentication fails even if the user is member of the group.

Example#1: (authentication successful)
[sharedfolder]
valid users = domain+username

Example#2:
[sharedfolder] (authentication fails)
valid users = @domaingroup

Samba version is samba-3.0.33

View 2 Replies View Related

Ubuntu Servers :: Samba As Domain Member Server Authentication

Apr 20, 2010

I've been working for hours with Samba on Ubuntu Server 9.10 (Samba version 3.4.0), trying to get it setup simply as a fileserver that performs authentication to an NT 4 server (yes, I know, old and out of date). After much struggling, I finally realized that my configuration *was* working when the clients connecting (from XP, and Win2k clients, mostly) were actually joined to the domain (where the PDC is the NT 4 Server) and logged into the domain.For various reasons, many of the Windows clients at this location don't actually log into the domain, even though they have login/passwords that are valid users on the domain and they'll typically have some drives mapped to the PDC.

By the way, I have this working on another Linux box running Samba 3.0.28, so I'm sure it's possible, I'm just lost as to how to do it.I can provide plenty more information if it would help diagnose the situation. Does anyone have an idea of how I can get this to work? I'm sure it's possible, since the exact scenario worked in a recent version of Samba.

View 1 Replies View Related

Red Hat / Fedora :: Add Windows Xp To Samba Domain (CentOS5.3)?

Sep 6, 2010

I'm stuck with this problem of adding Windows machine to Linux domain. for which samba has been configured as PDC .

operating system : Cent OS 5.3 with updates ., with hostname tester.com
Dnsdomainname = com Code: [global]
workgroup = TESTER
netbios name = TESTER
server string = Samba Server Version %v
interfaces = lo, eth0, 192.168.1.1/24, 192.168.1.2/24
passdb backend = tdbsam
code....

guest ok = Yes now everything work well i.e windows client can access their share. also permissions are set appropriately. Also account for users and particular XP machine are also created.when I try add windows machine to samba domain by changing windows machines domain name to the tester . Windows client gives error of can not connect to domain.If anyone has any idea about this problem of adding windows machines to SAMBA domain pls reply.

View 2 Replies View Related

Software :: Set Up Samba To Act As A Domain Login For A Windows 7 PC?

Jul 15, 2010

I have set up Samba to act as a domain login for a Windows 7 PC. The Windows 7 PC has the two correct registry compat entries.

So, I've added "root" to smbpasswd and the Windows machine tries the "LINNIS" server. Authentication is successful, as stated in the Samba log but the Windows machine fails with the following:

"The specified computer account could not be found. Contact an administrator to verify the account is in the domain. If the account has been deleted, unjoin, reboot and rejoin the domain."

I feel like I'm doing something dumb, but the authentication passed so what is it talking about?

Slack 13.1 (Samba 3.5.x)

View 11 Replies View Related

ADVERTISEMENT