Topic: samba access ?

[philippe peltier]

Hello folks !

Got a strange problem :
I set up a SME 5.5 with samba into a NT domain.
The samba is not domain controller, is member of the domain and its workgroup is defined as the domain.
I defined the users as they are in the domain (I did this via server-manager), and except for a XP station who can access his home directory, all W98 stations are getting kicked at the network neighborhood when they try to open the SME server icon by a msgbox form '/servername/ipc$' asking them for a password.

I know this from NT when the station is not recognized by the server, but I do not know how to fix that with samba.
All the users are defined as members of the 'everyone' group on the sme server and are administrators in the NT domain.

Somebody got an idea ?

tnx.

--
Phil.

[schotty]

I guess that the passwords are different -the winxx passwords are different to the users on the sme server....

Usernames and passwords have to be the same on winxx and on e-smith server

[Bill Talcott]

I have the same setup, with 5.5 handing "internet stuff" and an existing NT4 PDC handing "network stuff". Everything works fine, so long as the Windows and SME username/password is the same. Are the 9x clients logging on to the domain, or with a local username/password and caching the network logon?

[Darryl Pearle]

I know this might be obvious but.. Win 9x clients set up to log on to the domain?
Network Neighbourhood - Properties - Configuration - Client For Microsoft Networks - Properties - Logon to Windows NT Domain check & give it domain name.

I've got a few Win98 clients opening up shares on an SME Server that is not domain controller.. seems OK.

[philippe peltier]

WIn 9X clients are already logging on to the domain, that's why I'm stuck.
Passwords are identical on both domain and samba, and win 9X clients still do not log on the samba server.
I think the problem is elsewhere.
If you have an idea, feel free...

[ryan]

Is it possible your win98 users are clicking cancel on the 'windows' logon that comes after a domain logon?  SME will not check with the PDC, so your users must be logged into Windows using their username and password that is on SME.  Just a thought..

ryan

[philippe peltier]

Alas, they do not cancel their logon and are well logged on the domain...
tnx anyway.

[Bill Talcott]

There is some stuff in smb.conf that can be customized for using SME in a domain, but not as the domain controller. Our setup has some issues that prevent me from trying it, but you may want to look at the samba docs and see if changing anything there will help. I think you can tell samba to use the domain for passwords...

[Boris]

Try to uncheck "workgroup or domain controller" box in the workgroup settings of server-manager. Your both servers may conflict over domain controller status for netBIOS domain.

[Greg Zartman]

Philippe,

Just to get things straight:  Your SME machine IS NOT the primary domain controller for your domain.  Is this correct?    If this is the case, what machine on your network is authenticating domain access?

Keep is mind that SME is not configured to act as a domain member.  As such, you will have authentication issues if you try to stick SME in a domain situation unless you reconfigure SME to act as a domain member.

With that said, are you sure that your windows network is a server-client type network (i.e., one that is setup to use a domain) or a peer-to-peer network (i.e. one that is configured to use a workgroup).

If your network is setup to use a domain, have a read of this howto:
http://www.leiinc.com/repository/Linux/Mitel_SME_Server/HowToGuides/SME_DomainClientHowto.htm

If you network is setup to use a domain, then take Bill's advice and set  
"Workgroup and Domain Controller" to "NO" in the server-manager.

Greg Zartman

[Darryl Pearle]

This is all very strange.

Here is a rundown of my setup, which works great. It's very simple, I didn't have to any tricks or workarounds just setup in server-manager. IP addresses changed to protect the innocent.

Domain controller: SME Server 5.5, ip 10.0.0.10
Under the Workgroups heading:
    Windows Workgroup: EASTWOOD
    Server Name: GODZILLA
    Workgroup & Domain Controller? YES
    Roaming Profiles? NO

Domain member: SME Server 5.5, ip 10.0.0.17
Under the Workgroups heading:
    Windows Workgroup: EASTWOOD
    Server Name: FUNKYCHICKEN
    Workgroup & Domain Controller? NO
    Roaming Profiles? NO

Windows 98 Client: static hand-assigned ip addr on same network with the servers
Under the Client for Microsoft Networks protocol in Network Neighborhood properties:
   Logon to Windows NT Domain: yes
   Windows NT Domain: EASTWOOD
Under Net. Neighb. properties, Identification tab:
   Computer Name: RODAN
   Workgroup: EASTWOOD

On both servers I have set up identical usernames and passwords.

This setup allows me to log into the domain run by GODZILLA and when I go to look at shares on FUNKYCHICKEN no password prompts.

Possibly if you are using SME server 5.6 this is a problem with the new version of Samba?

Or is your NT domain controller an actual Windows machine and maybe Samba is not playing nicely with it?

[philippe peltier]

Greg,

I followed the howto step by step and my SME 5.5 did correctly join the domain. Is is viewde by the PDC as a BDC now, and... Only XP and NT stations can still access it...I'm losing my latin...

Is there a place where I can download the original 5.5 smb.conf templates ?
I want to reinit completely the SMB.conf but I'm afraid my templates are a bit different of the original ones... So I need to reinstall the origian ones.

Tnx a lot for your help.

--
Phil.

Greg Zartman wrote:
>
> Philippe,
>
> Just to get things straight:  Your SME machine IS NOT the
> primary domain controller for your domain.  Is this
> correct?    If this is the case, what machine on your network
> is authenticating domain access?
>
> Keep is mind that SME is not configured to act as a domain
> member.  As such, you will have authentication issues if you
> try to stick SME in a domain situation unless you reconfigure
> SME to act as a domain member.
>
> With that said, are you sure that your windows network is a
> server-client type network (i.e., one that is setup to use a
> domain) or a peer-to-peer network (i.e. one that is
> configured to use a workgroup).
>
> If your network is setup to use a domain, have a read of this
> howto:
> http://www.leiinc.com/repository/Linux/Mitel_SME_Server/HowToGuides/SME_DomainClientHowto.htm
>
> If you network is setup to use a domain, then take Bill's
> advice and set
> "Workgroup and Domain Controller" to "NO" in the
> server-manager.
>
> Greg Zartman

[Brian Read]

send me your email address, and i'll email them to you off my unchanged SME 5.5 server...

brianr at bjsystems.co.uk

cheers

Brian