Topic: New Setup with Two Servers

[Tom Glover]

I am getting ready to change over my current win2k and NT4 servers to SME-Servers. My servers are in two locations, both connected to the internet with DSL, static IP's. I have a router/firewall on each end that are connected to each other by way of VPN IPsec. Because of speed (or lack thereof) of the connections, we have those in location 1 logging into server-1 and those at location 2 logging into server-2. During login they map their home drive, and each of the two shared folders on each of the two servers. The servers are set up as server-1 being the primary domain controller and server-2 being the secondary domain controller.

So my question is: How do I accomplish the same using my two new SME-Servers instead?

Tom

[Belthazar]

Tom

I found the following article on the web, maybe this might help.

Regards

Belthazar

*******************************************************************************************
Re: [e-smith-devinfo] [ANNOUNCEMENT]SME Domain Client HowTo

* From: Sean Gray
* Subject: Re: [e-smith-devinfo] [ANNOUNCEMENT]SME Domain Client HowTo
* Date: Fri, 17 Jan 2003 13:22:39 -0800

Hope you don't mind, but I made some corrections for 5.6 they are below.
BTW,nice work!

Sean

STEP 1:  Create a custom template fragment directory for  smb.conf:

[root@testbed /]# mkdir -p /etc/e-smith/templates-custom/etc/smb.conf/
[root@testbed /]#

____________________________________________________________________

STEP 2:  Copy the relevant, default,  smb.conf template fragments to the
smb.conf custom template location:

[root@testbed root]# cd /etc/e-smith/templates-custom/etc/smb.conf/
[root@testbed smb.conf]#
 
[root@testbed smb.conf]# cp
/etc/e-smith/templates/etc/smb.conf/11guestOk .
[root@testbed smb.conf]#

root@testbed smb.conf]# cp
/etc/e-smith/templates/etc/smb.conf/11passwordServer .
[root@testbed smb.conf]#

DELETED

root@testbed smb.conf]# cp
/etc/e-smith/templates/etc/smb.conf/11security .
[root@testbed smb.conf]#

EDITED
root@testbed smb.conf]# cp
/etc/e-smith/templates/etc/smb.conf/11smbPasswdFile .
[root@testbed smb.conf]#

Note:  This step has you accessing the smb.conf custom template
directory and copying then  the appropriate fragments to the current
location using the "." current directory alias.
____________________________________________________________________

STEP 3:  Edit 11guestOk template fragment:

[root@testbed root]# pico 11guestOk

--In Pico--

{
# If this parameter is 'yes' for a service, then no password is
# required to connect to the service.
}
guest ok = yes

Save and exit pico using Ctrl-x.
____________________________________________________________________

STEP 4:  Edit 11passwordServer:

[root@testbed root]# pico 11passwordServer

--In Pico--

{
# Use password server option only with security = server
# ; password server =
}

password server =

Note:  Do not include <> around the PDC Netbios name.

Save and exit pico using Ctrl-x.
____________________________________________________________________

STEP 5:  deleted
____________________________________________________________________

STEP 6:  Edit 11security template fragment:

[root@testbed root]# pico 11security

--In Pico--

# Security mode. Most people will want user level security. See
# security_level.txt for details.
}
security = domain

Save and exit pico using Ctrl-x.
____________________________________________________________________

STEP 7:  Edit 11smbPasswdFile template fragment:

[root@testbed root]# pico 11smbPasswdFile

--In Pico--

#smb passwd file = /etc/smbpasswd

Save and exit pico using Ctrl-x.
____________________________________________________________________

STEP 8:  Create a WINS server entry in the configuration database:

[root@testbed root]# /sbin/e-smith/db dbfile setprop smb WINSServer Address of your PDC>
[root@testbed root]#

Note:  Do not include <> around the WINS Server IP address.  Also not
that the WINS server IP address is almost always the IP address of the
PDC.
____________________________________________________________________

STEP 9:  Expand /etc/smb.conf template fragments:

EDITED
[root@testbed root]# /sbin/e-smith/expand-template /etc/smb.conf
[root@testbed root]#
_______________________________________________________________

STEP 10:  Add this SME machine to the desired domain:

[root@testbed root]# smbpasswd -j -r -U

Password:
Joined domain .
[root@testbed smb.conf]#

Note:  Do not include <> around the domain, PDC netbios name, or domain
admin username.  Also note that the domain admin username is the
username that is used to grant domain privileges.  If another SME server
is the PDC, then the domain admin username is "admin."
____________________________________________________________________

STEP 11: Restart samba:

[root@testbed smb.conf]# /etc/rc.d/init.d/smb restart
Shutting down SMB services: [ OK ]
Shutting down NMB services: [ OK ]
Starting SMB services: [ OK ]
Starting NMB services: [ OK ]
[root@testbed smb.conf]#

ORIGINAL BELOW

SME Domain Client Howto

Author:  Greg Zartman
Contributor:  
Release supported: e-smith 4.x, SME 5.x
License: GPL
Last updated: Friday, January 17, 2003 10:06 AM

Problem:  You want to configure an SME server to participate as a member of either a windows domain or another SME (samba) domain.
Solution:  Follow this howto.

STEP 1:  Create a custom template fragment directory for  smb.conf:
[root@testbed /]# mkdir -p /etc/e-smith/templates-custom/etc/smb.conf/
[root@testbed /]#

STEP 2:  Copy the relevant, default,  smb.conf template fragments to the smb.conf custom template location:
[root@testbed root]# cd /etc/e-smith/templates-custom/etc/smb.conf/
[root@testbed smb.conf]#
 
[root@testbed smb.conf]# cp /etc/e-smith/templates/etc/smb.conf/11guestOk .
[root@testbed smb.conf]#

root@testbed smb.conf]# cp /etc/e-smith/templates/etc/smb.conf/11passwordServer .
[root@testbed smb.conf]#

root@testbed smb.conf]# cp /etc/e-smith/templates/etc/smb.conf/11preferredMaster .
[root@testbed smb.conf]#

root@testbed smb.conf]# cp /etc/e-smith/templates/etc/smb.conf/11security .
[root@testbed smb.conf]#

root@testbed smb.conf]# cp /etc/e-smith/templates/etc/smb.conf/11smbPasswdFile .
[root@testbed smb.conf]#

Note:  This step has you accessing the smb.conf custom template directory and copying then  the appropriate fragments to the current location using the "." current directory alias.

STEP 3:  Edit 11guestOk template fragment:
[root@testbed root]# pico 11guestOk

--In Pico--

{
# If this parameter is 'yes' for a service, then no password is
# required to connect to the service.
}
guest ok = yes

Save and exit pico using Ctrl-x.

 STEP 4:  Edit 11passwordServer:
[root@testbed root]# pico 11passwordServer

--In Pico--

{
# Use password server option only with security = server
# ; password server =
}

password server =

Note:  Do not include <> around the PDC Netbios name.

Save and exit pico using Ctrl-x.

STEP 5:  Edit 11preferredMaster template fragment:
[root@testbed root]# pico 11preferredMaster

--In Pico--

{
# Preferred Master causes Samba to force a local browser election on startup
# and gives it a slightly higher chance of winning the election
}

Save and exit pico using Ctrl-x.

STEP 6:  Edit 11security template fragment:
[root@testbed root]# pico 11security

--In Pico--

# Security mode. Most people will want user level security. See
# security_level.txt for details.
}
security = domain

Save and exit pico using Ctrl-x.

STEP 7:  Edit 11smbPasswdFile template fragment:
[root@testbed root]# pico 11smbPasswdFile

--In Pico--

#smb passwd file = /etc/smbpasswd

Save and exit pico using Ctrl-x.

STEP 8:  Create a WINS server entry in the configuration database:
[root@testbed root]# /sbin/e-smith/db configuration setprop smb WINSServer
[root@testbed root]#

Note:  Do not include <> around the WINS Server IP address.  Also not that the WINS server IP address is almost always the IP address of the PDC.

STEP 9:  Expand /etc/smb.conf template fragments:
[root@testbed root]# /sbin/e-smith/expand-templates /etc/smb.conf
[root@testbed root]#

STEP 10:  Add this SME machine to the desired domain:
[root@testbed root]# smbpasswd -j -r -U
Password:
Joined domain .
[root@testbed smb.conf]#

Note:  Do not include <> around the domain, PDC netbios name, or domain admin username.  Also note that the domain admin username is the username that is used to grant domain privileges.  If another SME server is the PDC, then the domain admin username is "admin."

STEP 11:  Restart samba:
[root@testbed smb.conf]# /etc/rc.d/init.d/smb restart
Shutting down SMB services: [ OK ]
Shutting down NMB services: [ OK ]
Starting SMB services: [ OK ]
Starting NMB services: [ OK ]
[root@testbed smb.conf]#

Thats it!!  You should now be able to browse and access shares on the SME domain client from other authenticated domain clients.