Server :: XP Clients Can No Longer Login To Samba Domain

Aug 26, 2010

I use OpenSuse 11.3 and I successfully built a samba/openldap server. However the raoming profiles were not working so I removed the roaming profile part of the samba and the openldap using ldap account manager. I also rejoined a couple of the computers back to the domain successfully (it was not an instaneous join, it took a good minute or 2 to join each pc). Now I cannot cannot login to any of these computers with the domain credentials. I can share using the UNC path no problem and this was working find about 1 week ago.

On 1 of the computers Iw as able to finally get a log file saying this:

View 2 Replies


ADVERTISEMENT

Server :: Roaming Profiles Not Working On For Opensuse 11.3 Samba Domain On Xp Clients?

Aug 26, 2010

On all of my xp clients no matter what the username is is I am continously getting the error saying that the profile cannot be found. I just built this domain recently and since day 1 the roaming profiles have not worked.

here is my smb.conf:

# Primary Domain Controller smb.conf
# Global parameters
[global]
unix charset = utf8

[code].....

View 1 Replies View Related

General :: New Windows Xp Clients Can't Join Samba Domain / Fix It?

Aug 18, 2010

We've been running samba on linux for a while and everything was fine. All of a sudden when you add new clients to the domain you get the error message :Logon Failure:unknown user name or bad password. This to me seems like a windows error message and not a samba error. When you remove an existing machine (ie on domain) and then try to rejoin it to the domain you fail.

View 4 Replies View Related

Software :: Configuring Samba Users To Join Clients To The Domain?

Feb 3, 2011

Im currently using an english book to setup my samba server, and im having problems understanding it.

I dont want to use root to join clients to the domain; i prefer creating a plain user.

Ok, so, the steps i follow are:

net groupmap add unixgroup=srvadmins ntgroup="Server Admins"
net groupmap add ntgroup="Domain Admins" unixgroup=dmnadmins rid=512 type=d
net rpc rights grant 'ORAServer Admins' seMachineAccountPrivilege

This way, i have a group called srvadmins with permissions to join clients, a group called dmnadmins with permissions to manage users and other permissions, and root.

Now, users: "root", "dmnadmin"(from dmnadmins group) and "srvadmin" (from srvadmins group) can add machines to domain. Root because is root, srvadmin because i granted permissions, and dmnadmin because is admin

So i wonder, why srvadmins group is needed to be granted privileges?

I tryed to lower dmnadmins privileges by revoking semachineaccountprivilege privilege, but didnt worked

net rpc rights revoke 'ORADomain Admins' seMachineAccountPrivilege

looks like its privileges comes from another group and it user managed to add a machine to the domain correctly.

Ok, so, is this really usefull? why do i need 3 kind of users to be able to join to the domain?

View 3 Replies View Related

Ubuntu Servers :: Create Samba File Share To Windows Domain Clients?

Apr 28, 2010

I feel ashamed for even asking this, since it seems like there's about 3 samba questions here every day. However after an hour of searching, I keep finding strange variants that aren't what I need.

My Goal: Create a single file share on an Ubuntu Server - share it via samba to Windows clients that are on a domain with active directory. It sure would be nice if AD authentication would work - so users don't have to type in a linux user/passsword each time they want to access the share.

In my adventures, I've found the following items (which may overlap)

1. Joining the server to a Windows Domain

2. Turning the server into a Windows Domain Controller

3. Authentication with LDAP (still not quite sure how/what this would do)

4. Stuff with Kerberos

5. Lots of people bickering about Samba 3/4 & how it's impossible to make Samba a PDC.

I'm not sure if I need to make the ubuntu server a domain controller or not...all I want to do is create a file share and share it on the domain...I don't need to make the ubuntu server a domain controller for that, right? Maybe just a member? Maybe nothing at all?

I guess if I want to authenticate stuff correctly (or forward authentication requests? Not sure), I probably need to join the ubuntu server to the domain...I think.

But let's say I do join it to the domain...then how to I create a file share that is authenticated via active directory rather than a local ubuntu server account? I see a dozen guides on joining the server to the domain, but nobody ever mentions sharing the folder over the domain.

The lines are also blurred between joining Ubuntu to the domain and making it a domain controller. What should I keep an eye out to avoid in these tutorials?

I get lost between the Kerberos/LDAP/Samba/WinBind etc...and I have a feeling I don't need all of these for something this simple.

View 1 Replies View Related

Server :: Connecting To A Samba (not On Domain) From Windows Domain Pc?

Jun 27, 2011

i need to allow window domain controller user to use file share of linux.windows DC user can see the share file and directories of linux file server but not able to access.

below is brief--

I have a Linux machine which is on my network but not on my domain. I have configured SAMBA FILESERVER for file sharing purpose. I have a Windows XP PC which is on the domain(windows server) that I am trying to connect to a share on the Linux box. I supply my credentials but regardless of which login I use I always get Logon Failure. I have created an account on the Linux machine with the same user name and password as my domain account but so far no luck. Can I connect from a domain PC to a non-domain Linux box? Is there something else I should be checking?

View 14 Replies View Related

Ubuntu Servers :: Active Directory Domain Integration - Allow Domain Users To Authenticate Server And Access File Shares Using Samba

May 13, 2010

The company I work for, as usual, is Microsoft-centric. I'm attempting to integrate my Ubuntu server into the domain to allow domain users to authenticate to the server and access file shares using Samba. Here's my current configuration:

[Code].....

View 9 Replies View Related

CentOS 5 Server :: Samba-3.0.33 - Cannot Change Computer Names In A Samba Domain?

Oct 8, 2009

I have to rename a group of machines in my little samba domain (tbd backend) but there is an ugly bug that makes this impossible. have set 'rename user script' variable corectly, also checked all configurations.When i change computer name in my windows box, it shows an error saying something like "Error calling remote procedure"Looking on server side, username for the machine gets correctly changed in /usr/passwd, and also in samba database.But samba log says:

===============================================================
[2009/10/08 11:10:32, 0] lib/fault.c:fault_report(42)
INTERNAL ERROR: Signal 11 in pid 11052 (3.0.33-3.7.el5_3.1)

[code]....

View 3 Replies View Related

Software :: Set Up Samba To Act As A Domain Login For A Windows 7 PC?

Jul 15, 2010

I have set up Samba to act as a domain login for a Windows 7 PC. The Windows 7 PC has the two correct registry compat entries.

So, I've added "root" to smbpasswd and the Windows machine tries the "LINNIS" server. Authentication is successful, as stated in the Samba log but the Windows machine fails with the following:

"The specified computer account could not be found. Contact an administrator to verify the account is in the domain. If the account has been deleted, unjoin, reboot and rejoin the domain."

I feel like I'm doing something dumb, but the authentication passed so what is it talking about?

Slack 13.1 (Samba 3.5.x)

View 11 Replies View Related

Ubuntu Networking :: Ltsp Server Subnet - Log Clients To The Parent Domain?

Mar 10, 2011

I have an Edubuntu server with two nics joined to the primary windows domain and I can log on with domain credentials and everything is AOK. I used LikewiseOpen 6 to join the server to the primary domain. So, on my Edubuntu server eth1 is connected to the primary domain and has a static IP. eth2 also has a static IP and is the DHCP for the thin client subnet, connected to a switch. IP forwarding is enabled.

DOMAIN - eth1 - Edubuntu Server - eth2 (SUBNET) - switch - clients

So far, so good: I can log on the thin clients with one of the local accounts specified on the Edubuntu server and with that account I can surf the net and, if I supply domain credentials, browse the primary domain. Problem I have is:

I can't work out how to log on to the primary domain with a Active Directory account directly from a thin client. If I try DOMAINuser to log on, after giving the password, the password screen refreshes and 'domainuser@11.*.21.*'s password' appears under the blank password box. The IP in that message is the IP for the subnet and not the primary domain. I feel like I'm miss-understanding some basic simple step but I just can't figure it out.

View 6 Replies View Related

Fedora Installation :: Domain Users Logged Out On Login Using Winbind - Samba

Nov 12, 2010

Have recently setup Samba on a fresh install of Fedora 14 so that I can use it as a workstation in a Windows 2003 (win2k3) domain.

The install of Samba seems to have worked as I can connect to the Domain using ADS and kerberos. selinux and firewall have been disabled until I have it working 100%

The problem lies when i try to login to Gnome or TTY. It begins to create the home directory for the domain user logging in but after a certain process Fedora logs the user out of the system.

Have looked through several log files (/var/log/messages, log.winbindd, log.winbindd-dc-connect) but am unable to debug it any further.

Have posted the config files below which shows the Fedora machine is successfully connected to the domain as it lists its groups, users and validates logon credentials - it just won't logon!

Where i can go about debugging. Also if you need additional configs.

View 1 Replies View Related

Server :: SAMBA Modify The /etc/passwrd Of All The Clients?

Jan 25, 2010

Learning samba. The samba on a server and the samba on clients arent the same conf. OK; but it pam/nsswitch is set to compat only, can the /etc/passwd be automatically updated from the server to the clients?

shall it need ldap on the server ?

View 1 Replies View Related

Server :: SLES 11.2 Samba Server With Win7 Clients?

Feb 26, 2010

I just installed SLES 11.2 X86_64 and have SMB Server started after adding 2 lines to smb.conf:1. NTMLv2 = Yes2. name resolve order = wins bcast host lmhostsThere are also 02 new DWORD lines I add to Win7 clientsHKEY_LOCAL_MACHINESystemCurrentControlSetServicesLanManWorkstationParameters 1.DomainCompatibilityMode = 12. DNSNameResolutionRequired = 0Of course a few number of modifications I made from Yast to enable SMB Server and Client, and bcast as well. Now I am able to join my Linux Domain without error at first reboot from win7, but it seems spending a long time about 30 secs for auth. even I test on a very fast network system, all with core quad 3GHZ CPU and 4GB DDR2I would like to mention here that before I made the above changes I did a lot of different modifications onto my win7 clients (I found many suggestions online), and all seems mess up and never work; Then I had to reinstall win7 from scratch and just add 02 lines as above, but it works.

View 3 Replies View Related

Networking :: Can't Print From Clients To Printer On Samba Server

Jul 22, 2009

I am having FC11 with an HP prineter attached my firewall is disabled I trying to print from my laptops after I have setup samba and shared the printer , It was working fine when I was installing FC4 and FC5 I am not sure what is missing when I tried to print from the XP box I got "Test pge failed to print" error what I have really noticed in the xp and vista box is that when I go to the printer settings inside control panel , pressing the ports tab and checking to what port I am printing I see that the port "\samba-serverprinter" is not created there this is the log

[code]...

View 1 Replies View Related

Server :: SAMBA To Share Network HDD With Permissions To Clients?

Jan 12, 2011

In my work I want to build up a Linux based network, where windows and linux clients are going to share a Thecus network drive.Each client will have specific permissions for accessing the samba shares. I have installed Ubuntu SRV 10.4 with gui and webmin.

View 1 Replies View Related

OpenSUSE Network :: Transfer Speed Between Samba Server And Win Clients

Mar 12, 2010

I have the problems with transfer speed between samba and Windows XP clients.

Samba server configuration:
Quad Core 6600 CPU.
4 Gb RAM
OpenSUSE 11.2 with kernel "2.6.31.12-0.1-desktop"
Samba - samba-3.5.1-1.1.i586
Test: 4 GB File copying. One file.

Transfer speed from Samba Server to Windows 7 and XP clients:
(Windows clients copy file from Server share -> to local drive)
From Server to Windows 7 client 1:
85-90 Mb/sec
From Server to Windows 7 client 2:
90-100 Mb/sec
From Server to XP1 client 3
75-100 Mb/sec

Transfer speed from Windows 7 and XP clients TO Samba Server:
(client copy file from local drive -> to server Share)
From Server to Windows 7 client 1:
12-20 Mb/sec
From Server to Windows 7 client 2:
30-35 Mb/sec
From Server to Windows XP client 1
20-27 Mb/sec

(Copying file from Windows local drive to Windows remote share)
From Window 7 client 1 TO Windows XP client 1
40-50 Mb/sec
From Window 7 client 2 TO Windows XP client 1
50-60 Mb/sec

Copying file from Windows 7 client 2 share -> TO Windows XP client 1 show me 100-120 Mb/sec speed permanent.
Copying file from Linux hosts to NFS server is stable 50-90
Mb/sec bidirectional.

This part of my smb.conf file
Code:
# version at /usr/share/doc/packages/samba/examples/smb.conf.SUSE if the
# samba-doc package is installed.
# Date: 2009-10-27
[global]
log level = 1
debug level = 0
max log size = 50 .....

I have very slow write speed when copying file from Windows clients to Samba Share. Samba speed is slower than Windows native clients connections ?

View 9 Replies View Related

Server :: Replace Windows AD With SAMBA - Restrict Clients Not To Change IP

Feb 14, 2011

I want to replace Windows AD with SAMBA I want to know what policies restrictions I can get in SAMBA as compared to windows AD - whether it is possible to restrict clients not to change IP, access cdrom or control panel.

View 1 Replies View Related

General :: New Samba Server Cannot Add Win PC To Domain

Mar 15, 2010

I've been fighting with the Samba server for a while and I'm a bit frustrated at this point. When I try to add machines to my domain I get the "The username could not be found error" here is my smb.conf...

Code:
[global]
workgroup = INMANONE
netbios name = PDC
server string = Inman Domain Controller
os level = 64
security = user
passdb backend = tdbsam
domain logons = yes
domain master = yes
local master = yes .....

View 3 Replies View Related

Server :: How To Set Log Off Scripts For Samba Domain Users?

Sep 21, 2010

I want to set a log off script for samba domain users. Actually I am facing a huge temp files related problem. So I want to set a batch file which will run when domain user log off. When user logout then batch file run and delete all temp files.I have already set batch file local group policy and it works for me, but I wants to set it from server side.

View 1 Replies View Related

Server :: Possible To Use Kerberos For Samba Authentication Without A Domain?

Oct 14, 2010

I have a samba server for company file shares but we do not use domain services or active directory service. Each workstation is its own standalone system. (And we want to keep it this way.) I would like to have some centralized authentication though, and it looks like Kerberos will provide that. After a lot of searching though, I can't find any instructions for setting up samba to authenticate users using kerberos without an ADS (active directory service) or domain. Is this possible?

View 1 Replies View Related

Server :: Samba Domain (PDC) - Could Not Update ICEAuthority

Feb 1, 2011

I'm configuring a classroom based on Linux (just Linux, without Windows) with user mobility. What I want is that any student will use its own 'username/password' on whatever computer getting its own data and without having to define every user on every computer. As far as Samba is very useful, even when I don't need Windows support I decided to base the solution on Samba. Right now I still have some problems and the solution doesn't work in my test environment. I defined a PDC (Samba 3.5 Domain Controller) on a Fedora 13 with 'homes', starting nmb and smb and it seems to work. On a Ubuntu 10.10 Workstation I built a Samba 'Domain Member Server' starting nmb, smb and winbind.

First question: should I define 'homes' on this server or not? I assumed 'not' as the 'homes' you have to use are the ones defined on the PDC, not on the DMS.
Second question: does winbind run just on DMS? Not on the PDC too?

I defined the DMS 'machine' and some domain users on the PDC and I could 'join' the DMS to the PDC without any problem (join rpc ...) From the workstation I can use smbclient seeing a domain with two servers, one of which is the controller. I can connect to the home shares using the domain users which are authorized by the PDC. On the DMS I paid attention on nsswitch.conf and pam file running 'pam-auth-update'. So 'webinfo -u' provides a list of users on the domain, local users and domain users. The problem arrives when I try to connect from the session login screen on the workstation to 'mydomainmyuser'. PDC validates the user, if the password is right, and I get connected but not to my PDC homes.

Instead I get some errors starting with:
'could not update ICEAuthoriy file /home/mydomain/myuser/.ICEAuthority'
It seems I'm in an empty space in an open but useless session which I can close later on.

Hereafter you will see the short smb.conf reported by testparm:
PDC
[global]
workgroup = TESO-DOM
server string = Samba Server Version %v
interfaces = lo, wlan0
bind interfaces only = Yes .....

View 6 Replies View Related

Server :: Openldap And Samba As Domain Controller?

Feb 13, 2010

i have configured samba as file server in fedora 11,it works fine for both windows and linux machines .but i want to configure ldap and samba as domain controller. Googled a lot on internet every thing is confusing me .

View 2 Replies View Related

Server :: Samba Unable To Authenticate In NT Domain

May 3, 2010

We're still using an NT Domain Server, and Samba is already configured properly. But the problem is if the shared folder is configured in samba to be accessed by group and not the domain username, authentication fails even if the user is member of the group.

Example#1: (authentication successful)
[sharedfolder]
valid users = domain+username

Example#2:
[sharedfolder] (authentication fails)
valid users = @domaingroup

Samba version is samba-3.0.33

View 2 Replies View Related

Server :: Samba - What If My Windows Domain Controller Is Down?

Feb 27, 2011

My Windows 2003 domain has three domain controllers. All of them are configured as global catalog servers, but my krb.conf and krb5.conf only contain a reference to one of them. What if the DC referenced is down? Should my files reference the other DCs? The contents of my files follow...

krb.conf
--------
MYDOMAIN.COM dc01.MYDOMAIN.COM:88
MYDOMAIN.COM dc01.MYDOMAIN.COM:749 admin server[code]...........

View 1 Replies View Related

Server :: Configure Samba For Multiple AD Domain Controllers?

Mar 2, 2011

How do I configure samba such that AD authentication still works when a DC is down? Do I need multiple kdc, admin_server, and kpasswd_server entries in krb5.conf?

View 3 Replies View Related

Server :: Recreate Samba PDC - Local And Domain SIDs

Aug 26, 2010

One of our servers crashed due to hard drive problems. We were able restore data from backups; however the only info on the samba PDC portion of the server we have are the local and domain SIDs. Armed with only this info; is there a way to recreate the previous domain so the users and machine accounts could recognize it?

View 1 Replies View Related

Server :: Samba PDC - Error On Adding New Machine In Domain

Jul 5, 2010

I'm setting up a PDC Samba server on centos5.4. All tasks are well done but on adding new machine in my domain I have a this error message: Error occurred when attempt to join your machine in domain "invalid user name".

samba.log
Code:
[2010/07/05 12:34:55, 2] smbd/sesssetup.c:setup_new_vc_session(1212)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2010/07/05 12:34:55, 2] smbd/sesssetup.c:setup_new_vc_session(1212)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old resources.
[2010/07/05 12:34:55, 2] auth/auth.c:check_ntlm_password(309)
check_ntlm_password: authentication for user [root] -> [root] -> [root] succeeded
[2010/07/05 12:34:55, 2] rpc_server/srv_samr_nt.c:_samr_lookup_domain(2919)
Returning domain sid for domain RAPHAELLO -> S-1-5-21-3852106609-489253481-401883016
smb.conf .....

I think that the machine account is missed or miss matched.

View 1 Replies View Related

Server :: Samba Role Domain Member Security Ads

Oct 21, 2010

CentoS 5.5
[root@osra ~]# rpm -q samba3x
samba3x-3.3.8-0.52.el5_5.2
[root@osra ~]# rpm -q krb5-workstation
krb5-workstation-1.6.1-36.el5_5.5
Domain controller windows 2k3 sp3

I follow those guides: [URL] and [URL]. I join the domain, I can test the user
[root@osra ~]# wbinfo -a mbottalico%
plaintext password authentication succeeded
challenge/response password authentication succeeded

[root@osra ~]# wbinfo -u
administrator
guest
krbtgt

[root@osra ~]# wbinfo -g
utenti wins
dhcp users
dhcp administrators
computer del dominio
controller di dominio
getent passwd and group ok without "DOMAIN+"
kinit e klist ok.

I can browser the samba server, but I can enter on "temp", but not in "test" (access denied)
[root@osra ~]# smbclient \\osra\test -U administrator
Enter administrator's password:
Domain=[DOMAINSHORT] OS=[Unix] Server=[Samba 3.3.8-0.52.el5_5.2]
smb: > ls
NT_STATUS_NETWORK_ACCESS_DENIED listing * (I noticed only writing this message)

[root@osra ~]# smbclient \\osra\tmp -U administrator
Enter administrator's password:
Domain=[DOMAINSHORT] OS=[Unix] Server=[Samba 3.3.8-0.52.el5_5.2]
smb: > dir .....
53488 blocks of size 2097152. 49908 blocks available
smb: > q
0 blocks of size 0. 511 blocks available .....

View 2 Replies View Related

Server :: Nameresolution Timeout After Longer Samba Runtime

Nov 3, 2010

We are running several server with SLES10SP3 and samba. After the service is running for a while we are getting timeouts for 15-20 seconds during a ping on the fqdn before he can resolv the name, same happens with traceroute and ssh. ping on a ip is successfull at once and nslookup is not showing any errors.

After a restart of the smb, nmb and winbind services the nameresolution is functioning normally again.

I honestly dont know where to start looking, this is a virtualized system and i checked the hypervisor (vsphere) logs but those turned out clean.

View 2 Replies View Related

Ubuntu Servers :: Samba As Domain Member Server Authentication

Apr 20, 2010

I've been working for hours with Samba on Ubuntu Server 9.10 (Samba version 3.4.0), trying to get it setup simply as a fileserver that performs authentication to an NT 4 server (yes, I know, old and out of date). After much struggling, I finally realized that my configuration *was* working when the clients connecting (from XP, and Win2k clients, mostly) were actually joined to the domain (where the PDC is the NT 4 Server) and logged into the domain.For various reasons, many of the Windows clients at this location don't actually log into the domain, even though they have login/passwords that are valid users on the domain and they'll typically have some drives mapped to the PDC.

By the way, I have this working on another Linux box running Samba 3.0.28, so I'm sure it's possible, I'm just lost as to how to do it.I can provide plenty more information if it would help diagnose the situation. Does anyone have an idea of how I can get this to work? I'm sure it's possible, since the exact scenario worked in a recent version of Samba.

View 1 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved