Topic: Kubuntu and SME (domain controller) using samba

[vanceibz]

i still cant get this working, i have re-installed ubuntu, samba, winbind and followed the instrucctions to configure the domain.  

On sme i entered:

signal-event machine-account-create ClientName$
smbpasswd -a -m ClientName$

Then:

vance@vance-desktop:~$ sudo net rpc join -D VS -U administrator
Password:
Could not connect to server VS-SERVER
The username or password was not correct.
Connection failed: NT_STATUS_LOGON_FAILURE
vance@vance-desktop:~$

i also get the following:

vance@vance-desktop:~$ wbinfo -g
Error looking up domain groups
vance@vance-desktop:~$ wbinfo -u
Error looking up domain users
vance@vance-desktop:~$

I can however see the server shared drives...no user authentication.


This must be a password problem (i am using the password configured on my ubuntu workstation)...when i created the user on sme using the above command it didnt ask me to enter a password , is there a default password?

[Stefano]

vance@vance-desktop:~$ sudo net rpc join -D VS -U administrator
Password:
Could not connect to server VS-SERVER
The username or password was not correct.
Connection failed: NT_STATUS_LOGON_FAILURE
vance@vance-desktop:~$

have you tried

Code: [Select]


sudo net rpc join -D VS -U admin


and putting sme admin's password?

ciao
Stefano

[stephen noble]

yes,
sme has an admin user
not administrator

[vanceibz]

Thanks for response ppl..

It seems i'm getting a little further...

when using admin i get:

vance@vance-desktop:~$ sudo net rpc join -D VS -U admin
Password:
[2007/05/12 09:52:02, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(350)
  Error in domain join verification (credential setup failed): NT_STATUS_ACCESS_DENIED
 
Unable to join domain VS.

Just to clarify, when using any username that isnt admin, that may exist on sme or not i get:

vance@vance-desktop:~$ sudo net rpc join -D VS -U administratordddd
Password:
Could not connect to server VS-SERVER
The username or password was not correct.
Connection failed: NT_STATUS_LOGON_FAILURE

when using net rpc testjoin:

vance@vance-desktop:~$ net rpc testjoin

[2007/05/12 10:12:55, 0] passdb/secrets.c:secrets_init(66)
  Failed to open /var/lib/samba/secrets.tdb
[2007/05/12 10:12:55, 0] passdb/secrets.c:secrets_init(66)
  Failed to open /var/lib/samba/secrets.tdb
[2007/05/12 10:12:55, 0] passdb/secrets.c:secrets_init(66)
  Failed to open /var/lib/samba/secrets.tdb
[2007/05/12 10:12:55, 0] passdb/secrets.c:secrets_init(66)
  Failed to open /var/lib/samba/secrets.tdb
[2007/05/12 10:12:55, 0] rpc_client/cli_pipe.c:get_schannel_session_key(2443)
  get_schannel_session_key: could not fetch trust account password for domain 'VS'
[2007/05/12 10:12:55, 0] utils/net_rpc_join.c:net_rpc_join_ok(70)
  net_rpc_join_ok: failed to get schannel session key from server VS-SERVER for domain VS. Error was NT_STATUS_CANT_ACCESS_DOMAIN_INFO
Join to domain 'VS' is not valid
vance@vance-desktop:~$

Also when using the signal and passwd command, is the ClientName$ the workstation name, in my case vance-desktop?

vance

[vanceibz]

!! Ok i think i sorted my problem!!

I entered:


sudo chmod 777 /var/lib/samba/secrets.tdb

giving me the following:

vance@vance-desktop:~$ sudo net rpc testjoin
[2007/05/12 10:22:18, 0] utils/net_rpc_join.c:net_rpc_join_ok(70)
  net_rpc_join_ok: failed to get schannel session key from server VS-SERVER for domain VS. Error was NT_STATUS_ACCESS_DENIED
Join to domain 'VS' is not valid

then simply:

vance@vance-desktop:~$ sudo net rpc join
Joined domain VS.

I'm going to test if things work..

vance

[stephen noble]

>http://wiki.contribs.org/Mepis
>To check your client values > K menu > Setting Configuration > Internet and Networking > Samba
>ClientName is the NetBIOS Name, NOTE: you must add the trailing $

I'm pretty sure chmod 777 isn't a good idea

[misnerspace]

I haven't used domain authentication, just let the users map whatever they require on the server themselves (which means that they have to log into the server when they want to access the shares - once per session)

Hi TrevorB, Suse seems to be up and running which is great and they can access the network shares. The only thing I need to do none is enable them to access their home directories on the server. Is there a simple way of doing this? Hope you can help, thanks for all the help so far.

NB I'm also experimenting with Ubuntu on another PC in terms of domain authentication, if I get anywhere with this I'll let you all know[/quote]

[vanceibz]

Ok, i think everything is working fine.. i set the chmod permissions back to normal.

Thanks for all the help

[TrevorB]

The only thing I need to do none is enable them to access their home directories on the server. Is there a simple way of doing this?

All I do is in the File Browser select File>Connect to Server and then select Windows Share as the Service Type. Options are:

Server - e-smith or whatever you called the server
Share - users logon
Folder - blank
User - users logon
Domain Name - workgroup
Name to use for connection - whatever they want to know this connection as

Trevor B

[misnerspace]

thanks TrevorB for all your help, were going to be one step closer to an open source school!