IRC Logs

Network: freenode Channel: #samba

	Enter your search terms Submit search form
	Web www.irclog.org

[00:03]<slzzv>Im using samba as a PDC and ive set the logon path and logon home to blank to force windows boxes to use local profiles. The problem is that logon script = scripts\logon.bat is not getting executed on startup, any ideas what could be causing this?
[00:19]<u2nzzyppya>I'm trying to join a WindowsXP Prof client to a Samba PDC, but I keep getting unknown user name and password. According to the docs I need to use a Samba administrator account... outside of the user root what what that be ?
[00:20]<wyg_x>Uberriffic, you need to use domain_name\root and samba root passwd
[00:22]<u2nzzyppya>Win_X, for username i have tried, "mydomain.com\root" and also just "root". I am using OpenLDAP backend. According to ldapsearch the user "root,ou=Users,dc=mydomain,dc=com" is a Netbios Domain Administrator (or that is what his gecos says)
[00:22]<lnllnz2j2>hey smba people
[00:22]<lnllnz2j2>if've got a little nmbd problem
[00:23]<lnllnz2j2>will nmbd resolve hostnames to request from linux boxes too?
[00:23]<u2nzzyppya>PepperBob: not automagically. ie, you can say, "ping bob" and have it resolve the lookup. You have to use "nmblookup bob"
[00:23]<u2nzzyppya>er.. you cannot say
[00:24]<lnllnz2j2>i see.. that's working
[00:24]<lnllnz2j2>well but
[00:24]<lnllnz2j2>the thing is: i want a debian server running in a windows environment
[00:24]<lnllnz2j2>and for this matter, i want to register it in the windows domain (windows is domain controller)
[00:25]<||aw>you can if you install winbind (don't have to rn the daemon thoug) and add wins to the hosts part of your nsswitch.conf
[00:25]<lnllnz2j2>because i want to have a accessible hostname for my server
[00:25]<u2nzzyppya>PepperBob: do you want this box to be a DC or just a member of the domain?
[00:25]<lnllnz2j2>just member of the domain as any other windows pc. Uberriffic
[00:25]<u2nzzyppya>PepperBob, so you just want winboxes to be able to see your debian server via it's samba NETBIOS name, is that correct?
[00:26]<u2nzzyppya>Win_X, any other ideas?
[00:26]<lnllnz2j2>Uberriffic: for example i want to be able to enter: \\debian\<share> for filesharing and http://debian/.. for web
[00:26]<lnllnz2j2>Uberriffic: it's pure windows environment
[00:27]<lnllnz2j2>Uberriffic: i just want to have it's hostname known in the domain.
[00:27]<u2nzzyppya>PepperBob: you should be able to do that. Be sure to have the "netbios name" set in your samba configuration, and set the "wins server" to that of whatever windows server (probably DC) that is acting as the WINS server
[00:28]<lnllnz2j2>Uberriffic: stupid question: i could not find the point the define the netbios name. but i read nmdb takes the hostname in first place.
[00:28]<lnllnz2j2>Uberriffic: the point where to define....
[00:29]<u2nzzyppya>PepperBob: do a man on smb.conf and then search for "netbios name". It just needs to be registered in your global configuration. IE> "netbios name = MYSERVER"
[00:29]<lnllnz2j2>oh... i should have kept my eyes on TFM
[00:29]<a2njc>Hello, I would like to authenticate MS active directory users on a
[00:29]<a2njc> samba domain member server even if the connection to the primary
[00:29]<a2njc> domain controller goes down. Can I do this with ldap?
[00:30]<a2njc>sorry.
[00:30]<xzezzm>Does anybody know of a larger faq or troubleshooting site for samba? I'm really not experienced enough with it to have the vocabulary to detail my issues.
[00:31]<u2nzzyppya>cbeok: depending on how you want to intermingle windows and samba domain controllers, you cannot have one as PDC and another as BDC, and vise verdsa. According to docs
[00:32]<a2njc>Uberriffic: yeah, I've encounterd that too, however, there seesm to be some difference (I think other than semantic) between a "domain member server" and a PDC.
[00:32]<u2nzzyppya>cbeok: domain member server just means that your samba/ldap box would be a member of the domain. It wouldn't be an authoritiative server. PDC/BDC will be use to answer authentication requests.
[00:36]<lnllnz2j2>btw i found how to enter the domain: smbpasswd -j DOMAIN -r PDC-Name -U Administrator
[00:38]<u2nzzyppya>PepperBob: that makes your debian box member of windows domain ?
[00:38]<lnllnz2j2>Uberriffic: i had no chance to try this, but that's what it said.
[00:39]<lnllnz2j2>mh...
[00:39]<lnllnz2j2>i can't find the -j option for smbpasswd
[00:40]<lnllnz2j2>i even can't find any -r option
[00:40]<a2njc>Uberriffic: blimey. I'm wondering if there is a way to cache user's credentials to be authenticated against in the case that the connection to the pcd is down.
[00:40]<a2njc>Uberriffic: urp. I gotta go. thanks.
[00:41]<lnllnz2j2>oh dear... net join will join the domain
[01:05]<svzzsxygn>we seem to have two parts out of three for the puzzle solved, but want mswin administrators to be able to manage a share's security permissions.
[01:07]<svzzsxygn>we know the winbind part works because we have pam successfully letting people login via their active directory info..
[01:07]<svzzsxygn>and we know that shares work in the ordinary sense because we can see them..
[01:08]<svzzsxygn>but we want to be able to do things more interesting than Everyone can see or nobody can, letting people see them if they're in a correct (windows) group.
[01:08]<svzzsxygn>..or some see and some other group edit, etc.
[01:08]<svzzsxygn>the gal tasked to do it has been poring through chapter 16 but is feeling a bit lost
[01:10]<svzzsxygn>she cheerfully found she can set things +i (immutable) on the unix side to be rather brutal about read only status, but the gui would be more her style.
[01:10]<svzzsxygn>any ideas or a more specific URL and/or subparagraph would be handy. tia
[01:17]<svzzsxygn>hm restarting winbind seems to have done the trick. most odd.
[01:18]<svzzsxygn>unless of course, that's to be expected for mswin compatibility ;P
[01:37]<svzzsxygn>should we be able to (on the unix side, from a shell prompt) chgrp files into groups that only exist on the active directory?
[01:43]<xzezzm>I came to try and get answers, but I can't define my problem well for lack of vocabulary.
[01:44]<svzzsxygn>yeah well, I used to make my bucks using samba to *flee* windows, not merge with the borg ;P
[01:44]<svzzsxygn>well, uh, hazard me a guess, and maybe I can translate your stuff a little further.
[01:47]<svzzsxygn>for instance, just describe what you expected to see (or hope to get) and what you're seeing instead?
[01:48]<xzezzm>What I was trying to do, is make it so that my work laptop (required to have Windows) can use my home printers, and access resources on the file server.
[01:49]<xzezzm>When I try to connect, I get errors. Different ones, depending on which way I try to access and what I try to access.
[01:50]<xzezzm>For example, if I go through run->\\prof (servername) I get "resource is no longer available"
[01:51]<xzezzm>If I try to add the laptop to the workgroup, then view workgroup computers, I get "cannot access resource. Perhaps you do not have permission....network path not found"
[01:51]<xzezzm>When I tried to add the printer, I can see HAZARD as a workgroup, but nothing in it.
[01:52]<svzzsxygn>I know there used to be this handy stray file called DIAGNOSIS.TXT
[01:53]<svzzsxygn>it sort of walked in slow motion through just getting a network link up as far as a single share
[01:53]<xzezzm>I'm updating my slocate db now.
[01:54]<svzzsxygn>I suppose the filename *might* have changed but that was a rather darn cool thing, often as not I wouldn't get to question 6 and someone would have already whapped their forehead with a big *doh* as it worked
[01:54]<xzezzm>Heh.
[01:54]<xzezzm>I'll hope it still exists.
[01:54]<xzezzm>slocate DIAGNOSIS.TXT returns nothing. :-(
[01:54]<svzzsxygn>well if it doesn't in the current kit the FAQ might have replaced it with a fast link to the modern equiv.
[01:55]<xzezzm>As well as in small case.
[01:55]<xzezzm>I tried the faq on Samba's page, but it had little to no useable info in it.
[01:55]<svzzsxygn>.o( windows troubleshooter unix style :)
[01:55]<xzezzm>Just like "what is Samba" "How do I help" etc.
[01:55]<svzzsxygn>oh hm
[01:55]<xzezzm>I asked in here if anybody knew of a larger FAQ or other troubleshooting site, but got no reply.
[01:56]<svzzsxygn>I can probably dig it up out of old notes but it'd be at my house
[01:56]<svzzsxygn>by that time someone will have probably beat me to it
[01:56]<xzezzm>Well, I'll be idling in here until I get it right. Perhaps longer if I start enjoying Samba.
[01:57]<xzezzm>I tend to be absent often, because I move from place to place, but I use screen at home, so I can rejoin and catch up.
[01:58]<xzezzm>SO if you do happen across that file, I'd love a copy. If not, somebody will eventually come in here who's bored enogh to step me through some troubleshooting.
[02:00]<svzzsxygn>hazard: well at the least, if I have the old DIAGNOSIS.TXT in hand, I can walk through the geeky version of it myself, maybe update it for the modern age
[02:00]<svzzsxygn>and then I can throw it on my wiki :)
[02:01]<xzezzm>I'd like the geeky version too, if I may.
[02:03]<xzezzm>Well, while we may both be perverse, my respect for you still declined after that statement.
[02:03]<xzezzm>;-)
[02:04]<xzezzm>Dirty duck lover.
[02:05]<brt>:))
[02:06]<xzezzm>http://www.funix.org/fr/linux/fichiers/DIAGNOSIS.txt
[02:06]<xzezzm>IT's kind of old, but hopefully most will be close enough.
[02:09]<xzezzm>You know it ust occurred to me that I never resolved one of my original issues.
[02:10]<xzezzm>testparm reports that "passdb expand explicit = yes is deprecated"
[02:10]<xzezzm>But I checked through the config, and couldn't find that anywhere.
[02:11]<brt>2.2 is sooo old..
[02:11]<svzzsxygn>yeah yeah and mountains fart dust
[02:12]<svzzsxygn>but the just step by step nature of that file is a good thing.
[02:12]<svzzsxygn>anyway

Back to #samba
Or go to some related logs:
#azureus
#php
#gentoo
#blender
#netbsd