Click to See Complete Forum and Search --> : Win 2k Advanced Server + LInux (Samba) in a domain woes!


atif
04-13-2003, 04:22 PM
G'day Folks!
I currently have a win 2k domain of 3 computers- win2k server, win 2k, linux. I would like join the samba box to the domain with the win 2k PDC authenticating everyone. Does that mean wins support is not needed? Shouldn't my PDC provide all the wins services?

I followed the how-to from samba.org. Created machine accounts on PDC (win 2k adv server machine)

On the linux side, I successfully added the samba machine to the domain using the needed smpasswd -j blah -r blah .......
=> Changed password for domain.
=> Joined domain Aes-Sedai

I would like to further mention that I can ping both machines by IP only. On linux can ping both by name alone. Ping samba machine from windows get: unknown host atif

On windows side, I can see the samba client in my network places and active directory, but
when I try to access the computer, I get the following error message:

\\Atif is not successful. The network path is not found.

(Atif is the name of the linux box = samba)

Thankyou for reading, please help if you can.

Please find herein my smb.conf file:

Best regards,

Atif

netx2
04-15-2003, 10:29 PM
If you are wanting your Windows 2000 server to handle the authentication for your samba server there is a few things that you need to do. Winbind Makes this easier. It allows Linux to view Windows Users and Groups as Native Linux Users and Groups. If you are using the RPM, winbind is there (has been since the 2.2.2 release). Quickly, here is an overview of changes that have to be made to your smb conf file:

security = domain
encrypt passwords = yes
*** These are probably already set since you said that your linux box was able to join the domain***

winbind uid = 10000-20000
winbind gid = 10000-20000

Do some research on winbind, there is also a change to the nsswitch file that you will have to make. Also, start the winbind daemon.

This should work quite well, I am impressed with how far winbind has come. I hope that this helps you out some.