Thread: Can't get domain logons working with samba as PDC
hello. i'm having trouble getting samba work pdc. i've been following tutorials digging through logs week. guess time post help. super-fun troubleshooting?
environment follows:
ubuntu server 10.04 lts, upgraded of morning running samba 3.4.7
mixed workstations of win7 pro , few xp pro.
failure message is: "the specified network name no longer available" when attempting join domain.
errors logs:
[2011/12/28 18:18:16, 2] smbd/uid.c:276(change_to_user)
change_to_user: smb user nobody (unix user nobody, vuid 100) not permitted access share ipc$.
[2011/12/28 18:18:16, 0] smbd/service.c:942(make_connection_snum)
can't become connected user!
sure logged out of before submitting credentials, i'm not sure why i'm getting error or why trying sign on "nobody".
however, worst of winbind. log, get:
here testparm of /etc/samba/smb.confcode:[2011/12/28 18:17:13, 1] lib/server_mutex.c:71(grab_named_mutex) not lock auth [2011/12/28 18:17:13, 0] winbindd/winbindd_cm.c:782(cm_prepare_connection) cm_prepare_connection: mutex grab failed auth [2011/12/28 18:17:41, 1] winbindd/winbindd_cm.c:977(cm_prepare_connection) failed tcon_x nt_status_logon_failure [2011/12/28 18:17:41, 0] winbindd/winbindd.c:190(winbindd_sig_term_handler) got sig[15] terminate (is_parent=0) [2011/12/28 18:17:41, 0] libsmb/namequery.c:75(saf_store) saf_store: refusing store 0 length domain or servername! [2011/12/28 18:18:16, 1] winbindd/winbindd_cm.c:977(cm_prepare_connection) failed tcon_x nt_status_logon_failure [2011/12/28 18:20:13, 0] libsmb/namequery.c:75(saf_store) saf_store: refusing store 0 length domain or servername! [2011/12/28 18:20:13, 1] winbindd/winbindd_cm.c:977(cm_prepare_connection) failed tcon_x nt_status_end_of_file [2011/12/28 18:21:06, 1] lib/util_tdb.c:521(tdb_wrap_log) tdb(/var/run/samba/mutex.tdb): tdb_lock failed on list 85 ltype=1 (interrupted system call) [2011/12/28 18:21:06, 0] lib/util_tdb.c:69(tdb_chainlock_with_timeout_internal) tdb_chainlock_with_timeout_internal: alarm (40) timed out key auth in tdb /var/run/samba/mutex.tdb [2011/12/28 18:21:06, 1] lib/server_mutex.c:71(grab_named_mutex) not lock auth [2011/12/28 18:21:06, 0] winbindd/winbindd_cm.c:782(cm_prepare_connection) cm_prepare_connection: mutex grab failed auth [2011/12/28 18:22:26, 1] lib/util_tdb.c:521(tdb_wrap_log) tdb(/var/run/samba/mutex.tdb): tdb_lock failed on list 85 ltype=1 (interrupted system call) [2011/12/28 18:22:26, 0] lib/util_tdb.c:69(tdb_chainlock_with_timeout_internal) tdb_chainlock_with_timeout_internal: alarm (40) timed out key auth in tdb /var/run/samba/mutex.tdb [2011/12/28 18:22:26, 1] lib/server_mutex.c:71(grab_named_mutex) not lock auth [2011/12/28 18:22:26, 0] winbindd/winbindd_cm.c:782(cm_prepare_connection) cm_prepare_connection: mutex grab failed auth
here smb.conf (redacted)code:load smb config files /etc/samba/smb.conf rlimit_max: rlimit_max (1024) below minimum windows limit (16384) processing section "[homes]" processing section "[profile]" processing section "[netlogon]" loaded services file ok. server role: role_domain_pdc
code:[global] workgroup = rps netbios name = auth wins support = yes name resolve order = hosts wins bcast socket options = so_keepalive tcp_nodelay so_sndbuf=8192 so_rcvbuf=8192 domain logons = yes domain master = yes preferred master = yes local master = yes os level = 33 security = user encrypt passwords = yes valid users = @rpsusers admin users = @rpsadmins add user script = /usr/sbin/useradd %u add group script = /usr/sbin/groupadd %g add machine script = /usr/sbin/adduser -n -g machines -c machine -d /dev/nul$ delete user script = /usr/sbin/userdel %u delete user group script = /usr/sbin/deluser %u %g delete group script = /usr/sbin/groupdel %g logon path = \\%l\profile\%u # logon script = %u.bat hide files = /desktop.ini/ntuser.ini/ntuser.*/thumbs.db/ log level = 2 map guest = bad user template shell = /bin/bash template homedir = /home/%d/%u idmap uid = 10000-20000 idmap gid = 10000-20000 [homes] comment = home directories browseable = no writeable = yes valid users = @rpsusers [profile] comment = profiles path = /home/samba/profile guest ok = yes browseable = no create mask = 0600 directory mask = 0700 writeable = yes profile acls = yes [netlogon] comment = network logon service path = /home/samba/netlogon guest ok = yes writeable = no
first of all, why using winbind? need winbind integrate system existing active directory.
2nd.
need set dhcp or manually conigure nics on windows point wins / netbios resolution ubuntu box. domain depends on wins / netbios.
oh , 3rd. if want save headaches. try zentyal.
Forum The Ubuntu Forum Community Ubuntu Specialised Support Ubuntu Servers, Cloud and Juju Server Platforms [ubuntu] Can't get domain logons working with samba as PDC
Ubuntu
Comments
Post a Comment