Koozali.org: home of the SME Server

Obsolete Releases => SME Server 7.x => Topic started by: David Harper on February 06, 2009, 03:45:22 AM

Title: [solved] Configure Samba Admin Users (template)
Post by: David Harper on February 06, 2009, 03:45:22 AM
In SME Server 7.3, there was a template fragment in /etc/e-smith/templates/etc/samba/smb.conf/ called 11adminUsers.

Customising this template allowed you to map a system group to "Domain Admins" rather than just the admin user.

In SME 7.4, this template fragment has gone. Where has this function been moved to?

Thanks!
Title: Re: Configure Samba Admin Users (template)
Post by: David Harper on February 06, 2009, 04:01:45 AM
For future searchers, this formerly custom template based solution has now been integrated into e-smith-samba.

Just add a new group with description "Domain Admins" and the rest is done automagically.

Solved!
Title: Re: [solved] Configure Samba Admin Users (template)
Post by: shawnbishop on July 05, 2009, 03:39:16 PM
Hi Guys

Shouldnt this be included in the Wiki on the Windows Intergration page??

( I dont have Wiki Access)
Title: Re: [solved] Configure Samba Admin Users (template)
Post by: cactus on July 06, 2009, 09:38:48 AM
( I dont have Wiki Access)
You can easily get it: http://wiki.contribs.org/Help:Contents
Title: Re: [solved] Configure Samba Admin Users (template)
Post by: David Harper on July 06, 2009, 01:34:45 PM
Good idea Shaun.

http://wiki.contribs.org/Windows_Integration#Domain_Admins_group
Title: Re: [solved] Configure Samba Admin Users (template)
Post by: shawnbishop on July 06, 2009, 08:03:58 PM
Sorry then one more bit of info to add to the Wiki..

I am now coming across users in the last few weeks running MS Windows 7, and of course they dont connect to SAMBA domains..but here is some useful info

Windows 7 refused to join to a the Samba domain stating that the domain in question was not available. Having gone through something similar when we finally added Vista clients I expected to have to update Samba to get this to work. Turns out you have to add two reg keys as well. Since it took me a fair bit of search to find this, I thought I’d document the required changes here, if for no other reason to save myself the trouble when I went to do it again…

   1. First you need to be running Samba v3.3.4 or later. Earlier versions have been reported to work, but there are some issues. Since this version is not available in the OS repos (CentOS) I got my copy from the Samba Enterprise site. They carry packages in RHEL, SLES, and Debian flavors and I have been using them for some time.
   2. Next the Windows 7 client needs to have two registry keys added.

      HKLM\System\CurrentControlSet\Services\LanmanWorkstation\Parameters
      DWORD DomainCompatibilityMode = 1
      DWORD DNSNameResolutionRequired = 0
   3. The following key needs to be changed or you will receive an error when trying to login using a domain accout of “The trust relationship between this workstation and the primary domain failed.”

      HKLM\SYSTEM\CurrentControlSet\services\Netlogon\Parameters
      RequireStrongKey = 0

Once these changes were made I was able to join the domain. I did receive an error on the join , but the system seems to be working fine.

found this info at

http://ggts.net/2009/05/17/joining-a-windows-7-system-to-a-samba-domain/

maybe helps..

Title: Re: [solved] Configure Samba Admin Users (template)
Post by: David Harper on July 14, 2009, 01:08:00 PM
AFAIK Windows Vista & Windows 7 are not officially supported as yet.
Title: Re: [solved] Configure Samba Admin Users (template)
Post by: brianr on August 06, 2009, 12:40:39 PM
I have just tried this on a Windows 7 RC1, using SME server 7.4 (no updated samba).  It fails after you re-boot, as you try to logon to the domain, with the error message about the trust relationship could not be established.

This is going to be a problem over the next few months (W7 is scheduled for release in Oct?).  I have quite a few  SMEServers acting as Domain controllers, and sooner rather than later a customer will introduce a W7 workstation, and want to know why it won't connect.

Have opened a bug to see what the devs think.

http://bugs.contribs.org/show_bug.cgi?id=5423
Title: Re: [solved] Configure Samba Admin Users (template)
Post by: cactus on August 06, 2009, 12:46:02 PM
I have just tried this on a Windows 7 RC1, using SME server 7.4 (no updated samba).  It fails after you re-boot, as you try to logon to the domain, with the error message about the trust relationship could not be established.
And you are sure you applied step 3 from the earlier post properly?

   3. The following key needs to be changed or you will receive an error when trying to login using a domain accout of “The trust relationship between this workstation and the primary domain failed.”

      HKLM\SYSTEM\CurrentControlSet\services\Netlogon\Parameters
      RequireStrongKey = 0

Once these changes were made I was able to join the domain. I did receive an error on the join , but the system seems to be working fine.
Title: Re: [solved] Configure Samba Admin Users (template)
Post by: brianr on August 08, 2009, 12:37:25 PM
And you are sure you applied step 3 from the earlier post properly?

yes, just checked again, the reg hack is as required.
Title: Re: [solved] Configure Samba Admin Users (template)
Post by: robwellesley on October 23, 2009, 03:29:15 AM
   1. First you need to be running Samba v3.3.4 or later. Earlier versions have been reported to work, but there are some issues. Since this version is not available in the OS repos (CentOS) I got my copy from the Samba Enterprise site.

Hi

Which packages did you install?  We installed samba, samba-client, and a dependency lbwclient0

http://ftp.sernet.de/pub/samba/experimental/rhel/4/i386/

We then got a bogus message about the possibility of a preexisting machine account, and couldn't join the PC to the domain

Rob
Title: Re: [solved] Configure Samba Admin Users (template)
Post by: Stefano on October 23, 2009, 09:34:44 AM
Hi

Which packages did you install?  We installed samba, samba-client, and a dependency lbwclient0

http://ftp.sernet.de/pub/samba/experimental/rhel/4/i386/

We then got a bogus message about the possibility of a preexisting machine account, and couldn't join the PC to the domain

Rob

this kind of message is OT here and shouldn't be posted without warning people that following your advice they could break their servers..

my 2c
Title: Re: [solved] Configure Samba Admin Users (template)
Post by: David Harper on October 23, 2009, 09:35:57 AM
Perhaps a moderator can lock this thread? Discussion regarding Windows 7 belongs in the referenced bug.
Title: Re: [solved] Configure Samba Admin Users (template)
Post by: chris burnat on October 23, 2009, 10:02:15 AM
Locking topic as requested.
This issue is resolved, additional material is OT and should possibly be treated with caution.