Samba a NT

[punok]

> > > Strucne receno musite na Linuxu vytvorit ucet pro stanici, pridat
stanici
> > vytvorit ucet pro stanici ?
> > to jako, jestlize se stanice jmenuje ST1 a na ni je prihlasen uzivatel
petr,
> > tak mam v linuxu vutvorit ucet ST1?
>
> Skoro tak. Ten ucet ma tvar ST1$. Staci pridat radek do /etc/passwd
> (shadow). Shell ani domovsky adresar neni potreba.
>
> > > do smbpasswp pomoci smbpasswd -a -m jmeno_stanice$.
> > proc smbpasswp a ne smbpasswd (neni to jen preklep ?)
> >
>
> Pardon je. Navic to ma byt smbpasswd -a -m ST1. Ten $ se ke
> jmenu pridava do /etc/passwd (nejak jsem to napoprve zmotal :-)).


Vztvoril jsem na linuxu potrebne uctz pro stanice ST1 a ST2
/etc/passwd
/etc/shadows
ucty st1$ a st2$
(pokud jde o stanice - jsou yde rozlisovana velka a mala pismena ?
 protoze netbiosove jmeno stanice je ST1 a ne st1 - ale zkousel jsem to i s
velkymi ST1 a nepomohlo)

tyto stanice jem pridal do smbpasswd
ambpasswd -a -m
dal jsem jim nulove hesla (smbpasswd ST1$ - to je doufam dobre)

a do smbusers jsem dal
nova = novak

navic mam vytvoreny linuxovy ucet admin, ktery jsem vytvoril i do samby
a u tohoto uctu bych chtel, aby mel opravneni prirazovani do domeny

domena se jmenuje DOMAIN
hostname = server
netbios = SERVER

************************************************************
zde je muj smb.conf

[global]
        workgroup = DOMAIN
        netbios name = SERVER
        server string = Samba Server
        security = DOMAIN
        encrypt passwords = Yes
        update encrypted = Yes
        null passwords = Yes
        password server = server
        log file = /var/log/samba/log.%m
        max log size = 50
        socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
        domain groups = domain,admin
        domain admin group = admin
        domain admin users = admin
        domain logons = Yes
        os level = 65
        preferred master = Yes
        domain master = Yes
        dns proxy = No

[netlogon]
        path = /dev/null
        public = No
        browseable = No
        writeable = No

[homes]
        comment = Home Directories
        read only = No
        browseable = No

[public]
        comment = z
        path = /z
        read only = No
        guest ok = Yes

*********************************

No a ted opet nevim jak dal.
Jsem prihlaseny na stanici ST1 jako uzivatel novak, do pracovni skupiny
DOMAIN - ne do domeny
pokud se z NT zkusim priradit do domeny (tj. pres nastaveni site - zmena
identifikace - clen domeny DOMAIN + vytvorit ucet v domene , kde jako
uzivatelske jmeno pouziji admin a prislusne (zatim nulove) heslo, tak se mi
vrati hlaska - Nelze pridat nebo zmenit ucty v domene. Zadane informacee o
uctu nemaji pridelena dostatecna privilegia k vytvareni nebo zmene uctu.
To same jsem zkousel i s rootem - stejny vysledek.

[2000/05/25 09:29:54, 0] passdb/smbpassfile.c:trust_password_lock(119)
  trust_password_lock: cannot open file /etc/DOMAIN.SERVER.mac - Error was
nen. souborem ani adres..em.
[2000/05/25 09:29:54, 0] passdb/smbpassfile.c:trust_get_passwd(288)
  domain_client_validate: unable to open the machine account password file
for machine SERVER in domain DOMAIN.


pokud na serveru provedu "smbclient -L server" vypada vse OK
added interface ip=192.1.1.1 bcast=192.1.255.255 nmask=255.255.0.0
Password:
Domain=[DOMAIN] OS=[Unix] Server=[Samba 2.0.6]

        Sharename      Type      Comment
        ---------      ----      -------
        public         Disk      z
        IPC$           IPC       IPC Service (Server 2KP)

        Server               Comment
        ---------            -------
        ST1
        ST2
        SERVER               Samba Server

        Workgroup            Master
        ---------            -------
        DOMAIN               SERVER



ale pokud provedu "smbclient -L server -U admin"  tak dostanu odpoved:
added interface ip=192.1.1.1 bcast=192.1.255.255 nmask=255.255.0.0
Password:
session setup failed: ERRSRV - ERRbadpw (Bad password - name/password pair
in a Tree Connect or Session Setup are invalid.)

a v logu "log.server" je pak tento vypis:

[2000/05/25 09:40:50, 0] passdb/smbpassfile.c:trust_password_lock(119)
  trust_password_lock: cannot open file /etc/DOMAIN.SERVER.mac - Error was
nen. souborem ani adres..em.
[2000/05/25 09:40:50, 0] passdb/smbpassfile.c:trust_get_passwd(288)
  domain_client_validate: unable to open the machine account password file
for machine SERVER in domain DOMAIN.
[2000/05/25 09:40:50, 1] smbd/reply.c:reply_sesssetup_and_X(909)
  Rejecting user 'admin': authentication failed


? opet nevim jak dal