Topic: How to connect a Ubuntu 8.04 client to my domain?

[cnpdk]

My SME server is currently running as domain controller and I have two Win2000Pro clients connected to it.

Now I would like to add a Ubuntu 8.04 client to the same domain but until now without much luck.

I installed likewise-open with the GUI on the Ubuntu client and went ahead.

Unfortunately I ended up with the following error message:

---

The configuration stage 'open ports to DC' cannot be completed automatically. Please manually perform the following steps and rerun the domain join:

Some required ports on the domain controller could not be contacted. Please update your firewall settings to ensure that the following ports are open to 'sme-server.cnp-sme':
   88  UDP
   137 UDP
   389 UDP
   464 UDP
   88 TCP
   445 TCP
   464 TCP

---

From the information I have found the default installation of Ubuntu have no firewall that should block these ports.


Do I need to change any settings on the SME server to prepare it for this or should it run flawless like with the Windows clients?

If I do need to make any changes to the SME server: Would someone please help me with a guide or point me in the right direction here?

Any help would be much appreciated

Best regards
Claus

[steever]

I am pretty sure that Likewise will not work because SME is running a NT 4 style domain, and Likewise is trying to connect to an Active Directory style domain controller.

I think it might be easier to update SME to use an ldap backend (see notes at http://bugs.contribs.org/show_bug.cgi?id=1543)and then use these notes https://help.ubuntu.com/community/LDAPClientAuthentication to try to connect an Ubuntu workstation to an ldap server.

Please let me know how you get on ...

Steve

[Stefano]

@cnpdk


have you read this: http://forums.contribs.org/index.php?topic=37587.0?

let us know if you solve your problem

HTH
Ciao
Stefano

[steever]

Stefano, as one of the contributors to Canterbury's web page on getting Ubuntu to auth off SME http://tech.canterburyschool.org/tech/UbuntuWorkstations_2fAuthenticationSetup, I'd like to quote a few things:

First of all, I have not been able to get Hardy's version of Samba/Winbind to play nice with our network.

First, we'll need to add Feisty's main repo to our /etc/apt/sources.list

Next we install the old version of samba, winbind, and smbfs

I am playing around with this as well, but it's hard! That's why they call it hardy!  Hardy to configure.  I feel pretty bad installing old versions of software so that Ubuntu can play nice with samba.

Anyway, take a look at the Canterbury page.  Maybe it will help.

Steve

[cnpdk]

Thanks for taking the time to help me in this matter!

I have now read and to some extend understood your suggested reading.

Please correct me if I am wrong here but I am now of the impression that Ubuntu is trying to log on the domain in a different way than the W2k clients do. Using Likewise-open might be the reason for this.

Since my experience with modified SME servers and future updates are less than positive - to express it in a diplomatic way - I would prefer to keep the SME server as it is.

The question is now how to make Ubuntu connect to the domain in a similar way as the W2k clients. Even though this might be a bit outside the scope of this forum any ideas here would be welcome.


Even though I know that both W2k and XP both are quite old systems and that might be why they can easily connect to the SME server I still find it a bit frustrating that this is hindering me from leaving the MS platforms.

Regarding the SME server being unable to handle the Active Directory style domain controlling and this being possible using ldap I suggest implementing this in the next version or perhaps update.

Best regards
cnpdk

[linuxhelp]

Hi@ALL

Hardy Ubuntu is still beta at current status..

i prefer gutsy on production servers and workstations..

[idp_qbn]

Linuxhelp: Ubuntu 8.04 (Hardy) is LTS status - Long Term Support. In other words, it is the stable release - it passed Beta stage ages ago. In fact 8.10 is due for release next month, but that's really just 8.04 with updated packages and released as an ISO.

Sorry cnpdk, this does not answer your question.

Cheers
Ian

[linuxhelp]

Hello a short comment...

yes it shows LTS=" Long Time Search" for bugs.. if i check out for bugs at bugtracker
my hairs changes color to grey

it is like every software for production take a software and hardware which is on
market for minimum 12 month.. same as M$ Vista..XP.. if SP6 appears it may be stable..

i don't like the "colored and animation-screens" OS should be extremly safe, light and fast..

a OS for 4GB RAM & Quadcore Energyburner does not make sense...

i remember times pc programmers coded OS very efficient to ram without waste...

[jumba]

I'm not sure it'll help, but have you seen this?

http://www.ubuntugeek.com/how-to-add-ubuntu-804-to-win-server-2003-active-directory-domain.html

...maybe it's at least of interest???

[troykd]

I'm not sure it'll help, but have you seen this?

http://www.ubuntugeek.com/how-to-add-ubuntu-804-to-win-server-2003-active-directory-domain.html

...maybe it's at least of interest???

Did anyone get Ubuntu joined using this method?

Any preferred distro's for joining an SME server?

[Stefano]

Did anyone get Ubuntu joined using this method?

no, it will not work because likewise is for AD (Active directory) and not for a NT4 style domain controller (as SME)

Any preferred distro's for joining an SME server?

I'm installing a virtual opensuse to see if I can get it works

Ciao
Stefano

[troykd]

Thanks Stefano,

I find it really odd that it is so difficult, if not impossible to hook up a linux client to a linux based server.

Any current distro's that will connect?  anyone?

[Stefano]

I find it really odd that it is so difficult, if not impossible to hook up a linux client to a linux based server.

well.. pdc, join to a domain are M$ stuff.. having a linux lan, you should use other kind of "network aggregation"

Any current distro's that will connect?  anyone?

I'm waiting opensuse complete installation.. running as virtual machine on virtualbox.. stay tuned

Ciao
Stefano

[Craig Cabrey]

I have found that CentOS 5.2 authenticates to the SME Server perfectly and is actually easy to setup, with a few exceptions of course:
  1. You have to add a Fedora repo or find the rpm and dependencies for   pam_mount.

  2. The login window preferences don't let you get rid of the permissions warning; you have to manually edit the custom.conf file for that.

Other than those two things, CentOS in my opinion is much better for the enterprise, even on the desktop, than Ubuntu when it comes to joining them to a domain.

Craig

[jumba]

Craig:

How would you like to put together a small "HowTo" for setting up CentOS 5.2 work stations to add SME Server domains?

I'm quite sure many people would appreciate that.

Thank you!