Samba és Winxp prof kapcsolat_hogyan?

Linux-kezdő

Hello.

Adott egy samba server, beconfigurálva, WinMe, Win98 alatt Win_Nt tartomány bejelenkzés után a felhasználok a felhasználónév+ jelszóval be tudnak jelentkezi , lefut a script meghajtó csatolás (user home könyvtár+ public). Ez tökkéletesen megy. De az Xp prof-nál, hogy kell a tartományba léptetni, hogy a script lefutása után megtörténnyenek a meghajtó automatikus csatolás, úgy az Me-ben. Mert ezt nem tudtam beállítani.

A linux alatt létrehoztam root felhasználot samba jelszóval.Azt tudom hol kell a kliensen a domainba lépést belőni, saját gép tulajdonságok számítógépnév módosítás tartomány név beir, és utána kéri a felhasználó nevet meg jelszót. Ide beirom a root-ot és a pass-t , de azt írja hogy " A felhasználónév nem található"

Ha lehetséges részletes leírású segítséget kérnék.
Segítséget előre is kösz.

  • 1696 megtekintés

( suttora | 2007. 03. 12., h – 23:53 )

Ide beirom a root-ot és a pass-t , de azt írja hogy " A felhasználónév nem található"

Ide azt a user - password párost kell megadni amit az smb.conf [global] részében az "admin users =" után beírsz. Ez - az álmoskönyvek szerint - ne a linuxos root legyen. Csak egy sima gyaloguser a linuxon.

Egy - működő - példa:

#======================= Global Settings =====================================
[global]
#
server string = Samba Server
netbios name = HAZAI
workgroup = OTTHON
#
# Domain control
admin users = xxxxxxx
passdb backend = smbpasswd
domain master = yes
preferred master = yes
local master = yes
os level = 66
unix password sync = yes
#
passwd chat = *new*password* %n\n *new*password* %n\n *changed*
passwd program = /usr/bin/passwd
add user script = /usr/sbin/useradd %u
add group script = /usr/sbin/groupadd %g
add user to group script = /usr/sbin/usermod -G %g %u
add machine script = /usr/sbin/useradd -g machines -c "Machine in the domain" -d /dev/null -s /bin/false %u
delete user script = /usr/sbin/userdel %u
delete user from group script = /usr/sbin/deluser %u %g
delete group script = /usr/sbin/groupdel %g
#
hosts allow = 192.168.1. 127.0.0.1
interfaces = 192.168.1.1
encrypt passwords = yes
security = user
smb passwd file = /etc/samba/private/smbpasswd
#
domain logons = yes
logon path = \\%L\profiles\%U
logon script = %U.bat
logon home = \\syspc\%U\winprofile
logon drive = H:
#
printcap name = /etc/printcap
printing = lprng
load printers = yes
#
wins support = yes
dns proxy = no
#
max log size = 250
log level = 2
log file = /var/log/samba/samba.%m.log

[homes]
comment = Home Directories
browseable = no
writable = yes

[netlogon]
comment = Network Logon Service
public = yes
share modes = no
path = /netlogon

[Profiles]
path = /profiles
browseable = no
guest ok = yes
create mask = 0600
directory mask = 0700

Megprobálom minnél előbb kiporbálni, csak pont most szált el az alaplapon. Ha megrenováltam szólok, hogy sikerült -e. A segítséget köszi.
Egyébként a netbios = a gép nevével , vagyrosszul gondolom, mert ha igen akkor ide kell a többi xp-s nevét is felsorolni?

Ez az én smb.conf-fom (Mandrake 10.0/samba3.0.2a)
Az admin user sor mint lehetőség benne sem volt, az már én irtam bele.
De még mindig valami nem jó. Munkacsorotba léptet, de tartományba nem akkarja.
Remélem valaki megtatálja a hibá , vagy hibákat.

#======================= Global Settings =====================================
[global]

#
workgroup = OTTHON
admin user = root
; netbios name =
server string = Samba Server %v
; message command = /usr/bin/linpopup "%f" "%m" %s; rm %s
printcap name = cups
load printers = yes
printing = cups
# printer admin = @
printer admin = @adm
# This should work well for winbind:
; printer admin = @"Domain Admins"
log file = /var/log/samba/log.%m
max log size = 50
; log level = 3
; hosts allow = 192.168.1. 192.168.2. 127.
; guest account = pcguest
map to guest = bad user
security = user
; password server =
; password server = *
; password level = 8
; username level = 8
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
unix password sync = Yes
pam password change = yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n
; username map = /etc/samba/smbusers
include = /etc/samba/smb.conf.%m
; winbind uid = 10000-20000
; winbind gid = 10000-20000
; winbind separator = +
; winbind use default domain = yes
; template homedir = /home/%D/%U
; obey pam restrictions = yes
; template shell = /bin/bash
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
; interfaces = 192.168.12.2/24 192.168.13.2/24
; remote browse sync = 192.168.3.25 192.168.5.255
# Cause this host to announce itself to local subnets here
; remote announce = 192.168.1.255 192.168.2.44
local master = yes
os level = 66
domain master = yes
preferred master = yes
domain logons = yes
; logon script = %m.bat
logon script = %U.bat
; logon path = \\%L\Profiles\%U
logon home = \\%L\%U\.profile
; add user script = /usr/sbin/useradd -d /dev/null -g machines -c 'Machine Account' -s /bin/false -M %u
; add user script = /usr/share/samba/scripts/smbldap-useradd.pl -w -d /dev/null -g machines -c 'Machine Account' -s /bin/false %u
# Script for domain member for adding local accounts for authenticated users:
; add user script = /usr/sbin/useradd -s /bin/false %u
; domain admin group = root @adm
; domain guest group = nobody @guest
; ldap admin dn = cn=root,dc=mydomain,dc=com
; ldap ssl = start_tls
# start_tls should run on 389, but samba defaults incorrectly to 636
; ldap port = 389
; ldap suffix = dc=mydomain,dc=com
; ldap server = ldap.mydomain.com
; name resolve order = wins lmhosts bcast
; wins support = yes
; wins server = w.x.y.z
; wins proxy = yes
dns proxy = no
; preserve case = no
; short preserve case = no
; default case = lower
; case sensitive = no
client code page = 852
character set = ISO8859-2
#============================ Share Definitions ==============================
[homes]
comment = Home Directories
browseable = no
writable = yes

; vfs object = /usr/lib/samba/vfs/recycle.so
; vfs options= /etc/samba/recycle.conf
# You may want to prevent abuse of your server disk space, and spread of virii
; veto files = /*.eml/*.nws/*.dll/*.mp3/*.MP3/*.mpg/*.MPG/*.vbs/*.VBS/
# Un-comment the following and create the netlogon directory for Domain Logons
[netlogon]
; comment = Network Logon Service
path = /home/samba/netlogon
; guest ok = yes
writable = yes
;root preexec = /usr/bin/ntlogon -u %U -g %G -o %a -d /var/lib/samba/netlogon/
;root postexec = rm -f /var/lib/samba/netl
; [Profiles]
; path = /home/samba/profil
; browseable = no
; guest ok = yes
; writable = no
#
; root preexec = PROFILE=/var/lib/samba/profiles/%u; if [ ! -e $PROFILE ]; \
; then mkdir -pm700 $PROFILE; chown %u.%g $PROFILE;fi
[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
# to allow user 'guest account' to print.
guest ok = yes
writable = no
printable = yes
create mode = 0700
# =====================================
# print command: see above for details.
# =====================================

; lpq command = lpq -P %p
; lprm command = cancel %p-%j
# /usr/share/doc/samba-/docs/Samba-HOWTO-Collection.pdf
[print$]
path = /var/lib/samba/printers
browseable = yes
read only = yes
write list = @adm root
guest ok = yes

[pdf-generator]
path = /var/tmp
guest ok = No
printable = Yes
comment = PDF Generator (only valid users)
#print command = /usr/share/samba/scripts/print-pdf file path win_path recipient IP doc_name &
print command = /usr/share/samba/scripts/print-pdf %s ~%u //%L/%u %m %I "%J" &

# This one is useful for people to share files
;[tmp]
; comment = Temporary file space
; path = /tmp
; read only = no
; public = yes

# A publicly accessible directory, but read only, except for people in
# the "staff" group
[public]
comment = Public tanarok
path = /home/samba/public
public = yes
writable = yes
write list = @tanarok
# Audited directory through experimental VFS audit.so module:
# Uncomment next line.
; vfs object = /usr/lib/samba/vfs/audit.so

#
#

;[fredsprn]
; comment = Fred's Printer
; valid users = fred
; path = /homes/fred
; printer = freds_printer
; public = no
; writable = no
; printable = yes

;[fredsdir]
; comment = Fred's Service
; path = /usr/somewhere/private
; valid users = fred
; public = no
; writable = yes
; printable = no

;[pchome]
; comment = PC Directories
; path = /usr/pc/%m
; public = no
; writable = yes

;[public]
; path = /usr/somewhere/else/public
; public = yes
; only guest = yes
; writable = yes
; printable = no

;[myshare]
; comment = Mary's and Fred's stuff
; path = /usr/somewhere/shared
; valid users = mary fred
; public = no
; writable = yes
; printable = no
; create mask = 0765

Sikerült megoldani a beléptetést a tartományba, csak még egy probléma van, hogy a profilokat nem akkarja menteni a profiles könyvtárba. home/samba/profiles könyvtár létre hozva, 777-jog megadva. A mbelépéskor a WINDOWS ezt az üzenete adja: A Windows nem találja a központi profiljának a kiszolgálón tárolt példányát, ezért a helyi profiljával próbálja meg bejelentkeztetni. A profilon végrehajtott módosításokat kijelentkezéskor nem fogja másolni a rendszer a kiszolgálóra. A hibát okozhatják például hálózati problémák, vagy az, hogy nincsenek elégséges biztonsági engedélyei. Ha a probléma továbbra is fennáll, lépjen kapcsolatba a hálózati rendszergazdával.

RÉSZLETEK - A hozzáférés megtagadva.

Mellékelem az smb.conf-ot így találán valaki megtalálja a hibát. Mert én egyenlőre nem találom.
Segítséget előre köszönöm.

[global]

#
workgroup = OTTHON
admin user = root
; netbios name =
server string = Samba Server %v
; message command = /usr/bin/linpopup "%f" "%m" %s; rm %s
printcap name = cups
load printers = yes
printing = cups
# printer admin = @
printer admin = @adm
# This should work well for winbind:
; printer admin = @"Domain Admins"
log file = /var/log/samba/log.%m
max log size = 50
; log level = 3
; hosts allow = 192.168.1. 192.168.2. 127.
; guest account = pcguest
map to guest = bad user
security = user
; password server =
; password server = *
; password level = 8
; username level = 8
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
unix password sync = Yes
pam password change = yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*UNIX*password* %n\n *ReType*new*UNIX*password* %n\n
; username map = /etc/samba/smbusers
include = /etc/samba/smb.conf.%m
; winbind uid = 10000-20000
; winbind gid = 10000-20000
; winbind separator = +
; winbind use default domain = yes
; template homedir = /home/%D/%U
; obey pam restrictions = yes
; template shell = /bin/bash
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
; interfaces = 192.168.12.2/24 192.168.13.2/24
; remote browse sync = 192.168.3.25 192.168.5.255
# Cause this host to announce itself to local subnets here
; remote announce = 192.168.1.255 192.168.2.44
local master = yes
os level = 66
domain master = yes
preferred master = yes
domain logons = yes
; logon script = %m.bat
logon script = %U.bat
logon path = \\%L\Profiles\%U
;logon home = \\%L\%U\.profile
; add user script = /usr/sbin/useradd -d /dev/null -g machines -c 'Machine Account' -s /bin/false -M %u
; add user script = /usr/share/samba/scripts/smbldap-useradd.pl -w -d /dev/null -g machines -c 'Machine Account' -s /bin/false %u
# Script for domain member for adding local accounts for authenticated users:
; add user script = /usr/sbin/useradd -s /bin/false %u
; domain admin group = root @adm
; domain guest group = nobody @guest
; ldap admin dn = cn=root,dc=mydomain,dc=com
; ldap ssl = start_tls
# start_tls should run on 389, but samba defaults incorrectly to 636
; ldap port = 389
; ldap suffix = dc=mydomain,dc=com
; ldap server = ldap.mydomain.com
; name resolve order = wins lmhosts bcast
; wins support = yes
; wins server = w.x.y.z
; wins proxy = yes
dns proxy = no
; preserve case = no
; short preserve case = no
; default case = lower
; case sensitive = no
client code page = 852
character set = ISO8859-2
#============================ Share Definitions ==============================
[homes]
comment = Home Directories
browseable = no
writable = yes

; vfs object = /usr/lib/samba/vfs/recycle.so
; vfs options= /etc/samba/recycle.conf
# You may want to prevent abuse of your server disk space, and spread of virii
; veto files = /*.eml/*.nws/*.dll/*.mp3/*.MP3/*.mpg/*.MPG/*.vbs/*.VBS/
# Un-comment the following and create the netlogon directory for Domain Logons
[netlogon]
; comment = Network Logon Service
path = /home/samba/netlogon
; guest ok = yes
writable = yes
;root preexec = /usr/bin/ntlogon -u %U -g %G -o %a -d /var/lib/samba/netlogon/
;root postexec = rm -f /var/lib/samba/netl
[Profiles]
path = /home/samba/profiles
browseable = no
guest ok = yes
writable = no
#
; root preexec = PROFILE=/var/lib/samba/profiles/%u; if [ ! -e $PROFILE ]; \
; then mkdir -pm700 $PROFILE; chown %u.%g $PROFILE;fi
[printers]
comment = All Printers
path = /var/spool/samba
browseable = no
# to allow user 'guest account' to print.
guest ok = yes
writable = no
printable = yes
create mode = 0700
# =====================================
# print command: see above for details.
# =====================================

; lpq command = lpq -P %p
; lprm command = cancel %p-%j
# /usr/share/doc/samba-/docs/Samba-HOWTO-Collection.pdf
[print$]
path = /var/lib/samba/printers
browseable = yes
read only = yes
write list = @adm root
guest ok = yes

[pdf-generator]
path = /var/tmp
guest ok = No
printable = Yes
comment = PDF Generator (only valid users)
#print command = /usr/share/samba/scripts/print-pdf file path win_path recipient IP doc_name &
print command = /usr/share/samba/scripts/print-pdf %s ~%u //%L/%u %m %I "%J" &

# This one is useful for people to share files
;[tmp]
; comment = Temporary file space
; path = /tmp
; read only = no
; public = yes

# A publicly accessible directory, but read only, except for people in
# the "staff" group
[public]
comment = Public tanarok
path = /home/samba/public
public = yes
writable = yes
write list = @tanarok
# Audited directory through experimental VFS audit.so module:
# Uncomment next line.
; vfs object = /usr/lib/samba/vfs/audit.so

#
#

;[fredsprn]
; comment = Fred's Printer
; valid users = fred
; path = /homes/fred
; printer = freds_printer
; public = no
; writable = no
; printable = yes

;[fredsdir]
; comment = Fred's Service
; path = /usr/somewhere/private
; valid users = fred
; public = no
; writable = yes
; printable = no

;[pchome]
; comment = PC Directories
; path = /usr/pc/%m
; public = no
; writable = yes

;[public]
; path = /usr/somewhere/else/public
; public = yes
; only guest = yes
; writable = yes
; printable = no

;[myshare]
; comment = Mary's and Fred's stuff
; path = /usr/somewhere/shared
; valid users = mary fred
; public = no
; writable = yes
; printable = no
; create mask = 0765