Koozali.org: home of the SME Server
Obsolete Releases => SME Server 7.x => Topic started by: vanceibz on May 03, 2007, 04:19:08 PM
-
Hi guys,
I am setting up kubuntu workstations to work in a sme domain. I have several windows xp workstations working perfectly with sme, setting up users, printers, shared drives, etc.. but i seem to be stuck when configuring samba (on kubuntu) to see the sme server domain.
I want to be able to login kubuntu with the users configured on the sme..
Anyone has any advice?
Thanks in advance guys
Vance
-
Although being for Mepis, maybe this guide will help: http://wiki.contribs.org/Mepis
-
thanks, i will give it a go..
-
I am getting the following error when trying to join the domain, the user and password does exist as i am using them to login into windows...
----
[2007/05/04 14:08:54, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(350)
Error in domain join verification (credential setup failed): NT_STATUS_ACCESS_DENIED
----
Any ideas what it means? I am very new to ubuntu...
Vance
-
I seem to have been locked out.. When trying to gain sudo privileges to modify a file I am getting the following
password:
sudo: pam_authenticate: User not known to the underlying authentication module
How can i find the password or reset the changes i made...
Also any application i try to open...simply closes down.
-
Hi, I got the same problem with Xubuntu 7.04 Feisty Fawn. And SME 7.1.3
I have used the wiki from Mepis http://wiki.contribs.org/Mepis and the Howto: “NT Domain Authentication” from http://ubuntuforums.org/showthread.php?t=5409&highlight=samba+network+domain.
I get the same error when I tray to join the Domain
“utils/net_rpc_join.c:net_rpc_join_newstyle(350)
Error in domain join verification (credential setup failed): NT_STATUS_ACCESS_DENIED”
I can see the users of the domain with wbinfo –u .
If I tray to join the domain with a nonexistent account I get the error
“Could not connect to server SERVER9
The username or password was not correct.
Connection failed: NT_STATUS_LOGON_FAILURE”
If I tray to join with a user account that exist but had no administrative right on the domain I get
“Creation of workstation account failed
User specified does not have administrator privileges
Unable to join domain MYDOMAIN"
So the SME server actually verify both the name and password ok.
SERVER9 is the name of the server, MYDOMAIN is the domain name.
Can anybody help? I have to get it running in my daughter’s school, the windows XP part working perfect even with roaming profiles and directory redirection. But wee have to ad 15 machines with xubuntu to the network.
Regards Bo
-
I'm trying to do the same with edubuntu but am having no real success which is a great shame, I'll keep on trawling the internet for ubuntu + samba...
Does anyone know of any other Linux distribution that can work with SME via samba?
-
I'm trying to do the same with edubuntu but am having no real success which is a great shame, I'll keep on trawling the internet for ubuntu + samba...
Does anyone know of any other Linux distribution that can work with SME via samba?
I use openSUSE OK.
But have you done asmbpasswd -a -m ClientName$and then tried to add the machine?
I was having the same problems with openSUSE until I did the smbpasswd trick.
Trevor B
-
Hi
I have used the smbpasswd trick. Before that I could not get any contact with the server. Now I can use wbinfo and get information, but that’s all.
Someone has mentioned that the old SME 7.0 have no problems.???
Regards Bo
-
after this step
signal-event machine-account-create ClientName$
smbpasswd -a -m ClientName$
you should have something like this
cat /etc/samba/smbpasswd mepisdell3$:5019:XXXXXXXXXXXXXX:488489592A86:[W ]:LCT-4618BBBC:
show us exactly what you type next
net rpc join -D WorkGroup -U admin
-
Stupid question often asked by stupid people.
I found the fault. I typed the machine name wrong when I created the machine account.
So I will write 100 times “Remember that accounts name are case sensitive”
For i =1 to 100
Print “Remember that accounts name are case sensitive”
Next i
Now the server recognizes the machine, and users can log on to that machine.
I will now figure out how to make template for the users and store their settings on the server.
The plan is that all documents should be in the same folder as they use on the XP machines.
Both Linux and XP are running Open-Office.
I’m happy that you guided me in the right way
Regards Bo
-
Hi TrevorB, I've been looking into OpenSuse and I have to admit that it seems fantastic, the only problem now is that I seem to have been converted from Ubuntu to OpenSuse and nowfaced with a new challege of joing my Suse clients to SME via samba. You don't have a link to a 'how to guide' by any chance?....thanks!
-
Hi TrevorB, I've been looking into OpenSuse and I have to admit that it seems fantastic, the only problem now is that I seem to have been converted from Ubuntu to OpenSuse and nowfaced with a new challege of joing my Suse clients to SME via samba. You don't have a link to a 'how to guide' by any chance?....thanks!
Well....
I just used YAST to try and add the workstation to the domain. It returned with the dreaded "Connection failed: NT_STATUS_LOGON_FAILURE" or similar.
I then logged into the smeserver and used the smbpasswd trick for that PC and then went back to the workstation and used YAST again.
This time it worked... :D
I haven't used domain authentication, just let the users map whatever they require on the server themselves (which means that they have to log into the server when they want to access the shares - once per session).
Trevor B
-
Hi TrevorB, thanks for the info, I know this may seem like a stupid question as I'm very new to Suse but how do you install winbind on Suse? I'm trying out the 'Mempis' method on Suse and I know I need winbind, maybe its installed already as part of the samba suite. Long day at the 'office' and my brain seems to be slowing down rapidly.
-
I'm very new to Suse but how do you install winbind on Suse?
If you use Yast (I'm pretty sure it is the Users & Permissions section), it will install winbind if you need it (winbind is used for connecting to the NT domain).
[EDIT]Actually Security & Users, User Management, select the Expert Options/Authentication & User Sources item[/EDIT]
Trevor B
-
i still cant get this working, i have re-installed ubuntu, samba, winbind and followed the instrucctions to configure the domain.
On sme i entered:
signal-event machine-account-create ClientName$
smbpasswd -a -m ClientName$
Then:
vance@vance-desktop:~$ sudo net rpc join -D VS -U administrator
Password:
Could not connect to server VS-SERVER
The username or password was not correct.
Connection failed: NT_STATUS_LOGON_FAILURE
vance@vance-desktop:~$
i also get the following:
vance@vance-desktop:~$ wbinfo -g
Error looking up domain groups
vance@vance-desktop:~$ wbinfo -u
Error looking up domain users
vance@vance-desktop:~$
I can however see the server shared drives...no user authentication.
This must be a password problem (i am using the password configured on my ubuntu workstation)...when i created the user on sme using the above command it didnt ask me to enter a password , is there a default password?
-
vance@vance-desktop:~$ sudo net rpc join -D VS -U administrator
Password:
Could not connect to server VS-SERVER
The username or password was not correct.
Connection failed: NT_STATUS_LOGON_FAILURE
vance@vance-desktop:~$
have you tried
sudo net rpc join -D VS -U admin
and putting sme admin's password?
ciao
Stefano
-
yes,
sme has an admin user
not administrator
-
Thanks for response ppl..
It seems i'm getting a little further...
when using admin i get:
vance@vance-desktop:~$ sudo net rpc join -D VS -U admin
Password:
[2007/05/12 09:52:02, 0] utils/net_rpc_join.c:net_rpc_join_newstyle(350)
Error in domain join verification (credential setup failed): NT_STATUS_ACCESS_DENIED
Unable to join domain VS.
Just to clarify, when using any username that isnt admin, that may exist on sme or not i get:
vance@vance-desktop:~$ sudo net rpc join -D VS -U administratordddd
Password:
Could not connect to server VS-SERVER
The username or password was not correct.
Connection failed: NT_STATUS_LOGON_FAILURE
when using net rpc testjoin:
vance@vance-desktop:~$ net rpc testjoin
[2007/05/12 10:12:55, 0] passdb/secrets.c:secrets_init(66)
Failed to open /var/lib/samba/secrets.tdb
[2007/05/12 10:12:55, 0] passdb/secrets.c:secrets_init(66)
Failed to open /var/lib/samba/secrets.tdb
[2007/05/12 10:12:55, 0] passdb/secrets.c:secrets_init(66)
Failed to open /var/lib/samba/secrets.tdb
[2007/05/12 10:12:55, 0] passdb/secrets.c:secrets_init(66)
Failed to open /var/lib/samba/secrets.tdb
[2007/05/12 10:12:55, 0] rpc_client/cli_pipe.c:get_schannel_session_key(2443)
get_schannel_session_key: could not fetch trust account password for domain 'VS'
[2007/05/12 10:12:55, 0] utils/net_rpc_join.c:net_rpc_join_ok(70)
net_rpc_join_ok: failed to get schannel session key from server VS-SERVER for domain VS. Error was NT_STATUS_CANT_ACCESS_DOMAIN_INFO
Join to domain 'VS' is not valid
vance@vance-desktop:~$
Also when using the signal and passwd command, is the ClientName$ the workstation name, in my case vance-desktop?
vance
-
!! Ok i think i sorted my problem!!
I entered:
sudo chmod 777 /var/lib/samba/secrets.tdb
giving me the following:
vance@vance-desktop:~$ sudo net rpc testjoin
[2007/05/12 10:22:18, 0] utils/net_rpc_join.c:net_rpc_join_ok(70)
net_rpc_join_ok: failed to get schannel session key from server VS-SERVER for domain VS. Error was NT_STATUS_ACCESS_DENIED
Join to domain 'VS' is not valid
then simply:
vance@vance-desktop:~$ sudo net rpc join
Joined domain VS.
I'm going to test if things work..
vance
-
>http://wiki.contribs.org/Mepis
>To check your client values > K menu > Setting Configuration > Internet and Networking > Samba
>ClientName is the NetBIOS Name, NOTE: you must add the trailing $
I'm pretty sure chmod 777 isn't a good idea
-
I haven't used domain authentication, just let the users map whatever they require on the server themselves (which means that they have to log into the server when they want to access the shares - once per session)
Hi TrevorB, Suse seems to be up and running which is great and they can access the network shares. The only thing I need to do none is enable them to access their home directories on the server. Is there a simple way of doing this? Hope you can help, thanks for all the help so far.
NB I'm also experimenting with Ubuntu on another PC in terms of domain authentication, if I get anywhere with this I'll let you all know[/quote]
-
Ok, i think everything is working fine.. i set the chmod permissions back to normal.
Thanks for all the help
-
The only thing I need to do none is enable them to access their home directories on the server. Is there a simple way of doing this?
All I do is in the File Browser select File>Connect to Server and then select Windows Share as the Service Type. Options are:
Server - e-smith or whatever you called the server
Share - users logon
Folder - blank
User - users logon
Domain Name - workgroup
Name to use for connection - whatever they want to know this connection as
Trevor B
-
thanks TrevorB for all your help, were going to be one step closer to an open source school!