Topic: [solved] Configure Samba Admin Users (template)

[David Harper]

In SME Server 7.3, there was a template fragment in /etc/e-smith/templates/etc/samba/smb.conf/ called 11adminUsers.

Customising this template allowed you to map a system group to "Domain Admins" rather than just the admin user.

In SME 7.4, this template fragment has gone. Where has this function been moved to?

Thanks!

[David Harper]

For future searchers, this formerly custom template based solution has now been integrated into e-smith-samba.

Just add a new group with description "Domain Admins" and the rest is done automagically.

Solved!

[shawnbishop]

Hi Guys

Shouldnt this be included in the Wiki on the Windows Intergration page??

( I dont have Wiki Access)

[cactus]

( I dont have Wiki Access)

You can easily get it: http://wiki.contribs.org/Help:Contents

[David Harper]

Good idea Shaun.

http://wiki.contribs.org/Windows_Integration#Domain_Admins_group

[shawnbishop]

Sorry then one more bit of info to add to the Wiki..

I am now coming across users in the last few weeks running MS Windows 7, and of course they dont connect to SAMBA domains..but here is some useful info

Windows 7 refused to join to a the Samba domain stating that the domain in question was not available. Having gone through something similar when we finally added Vista clients I expected to have to update Samba to get this to work. Turns out you have to add two reg keys as well. Since it took me a fair bit of search to find this, I thought I’d document the required changes here, if for no other reason to save myself the trouble when I went to do it again…

   1. First you need to be running Samba v3.3.4 or later. Earlier versions have been reported to work, but there are some issues. Since this version is not available in the OS repos (CentOS) I got my copy from the Samba Enterprise site. They carry packages in RHEL, SLES, and Debian flavors and I have been using them for some time.
   2. Next the Windows 7 client needs to have two registry keys added.

      HKLM\System\CurrentControlSet\Services\LanmanWorkstation\Parameters
      DWORD DomainCompatibilityMode = 1
      DWORD DNSNameResolutionRequired = 0
   3. The following key needs to be changed or you will receive an error when trying to login using a domain accout of “The trust relationship between this workstation and the primary domain failed.”

      HKLM\SYSTEM\CurrentControlSet\services\Netlogon\Parameters
      RequireStrongKey = 0

Once these changes were made I was able to join the domain. I did receive an error on the join , but the system seems to be working fine.

found this info at

http://ggts.net/2009/05/17/joining-a-windows-7-system-to-a-samba-domain/

maybe helps..

[David Harper]

AFAIK Windows Vista & Windows 7 are not officially supported as yet.

[brianr]

I have just tried this on a Windows 7 RC1, using SME server 7.4 (no updated samba).  It fails after you re-boot, as you try to logon to the domain, with the error message about the trust relationship could not be established.

This is going to be a problem over the next few months (W7 is scheduled for release in Oct?).  I have quite a few  SMEServers acting as Domain controllers, and sooner rather than later a customer will introduce a W7 workstation, and want to know why it won't connect.

Have opened a bug to see what the devs think.

http://bugs.contribs.org/show_bug.cgi?id=5423

[cactus]

I have just tried this on a Windows 7 RC1, using SME server 7.4 (no updated samba).  It fails after you re-boot, as you try to logon to the domain, with the error message about the trust relationship could not be established.

And you are sure you applied step 3 from the earlier post properly?

   3. The following key needs to be changed or you will receive an error when trying to login using a domain accout of “The trust relationship between this workstation and the primary domain failed.”

      HKLM\SYSTEM\CurrentControlSet\services\Netlogon\Parameters
      RequireStrongKey = 0

Once these changes were made I was able to join the domain. I did receive an error on the join , but the system seems to be working fine.

[brianr]

And you are sure you applied step 3 from the earlier post properly?

yes, just checked again, the reg hack is as required.

[robwellesley]

   1. First you need to be running Samba v3.3.4 or later. Earlier versions have been reported to work, but there are some issues. Since this version is not available in the OS repos (CentOS) I got my copy from the Samba Enterprise site.

Hi

Which packages did you install?  We installed samba, samba-client, and a dependency lbwclient0

http://ftp.sernet.de/pub/samba/experimental/rhel/4/i386/

We then got a bogus message about the possibility of a preexisting machine account, and couldn't join the PC to the domain

Rob

[Stefano]

Hi

Which packages did you install?  We installed samba, samba-client, and a dependency lbwclient0

http://ftp.sernet.de/pub/samba/experimental/rhel/4/i386/

We then got a bogus message about the possibility of a preexisting machine account, and couldn't join the PC to the domain

Rob

this kind of message is OT here and shouldn't be posted without warning people that following your advice they could break their servers..

my 2c

[David Harper]

Perhaps a moderator can lock this thread? Discussion regarding Windows 7 belongs in the referenced bug.

[chris burnat]

Locking topic as requested.
This issue is resolved, additional material is OT and should possibly be treated with caution.