Re: [Rocks-Discuss] Samba: Yes? No?
Bart Brashers
huge deal. I don't have a full step-by-step, but it goes something like
this:
- Install RPMs (samba, samba-common, samba-client, I think one is
already installed)
- Edit /etc/samba/smb.conf for your domain and your shares
- Edit /etc/sysconfig/iptables to include these lines just after the "#
Preamble" section:
------begin------
#samba
-A INPUT -p tcp -m tcp --dport 137 --syn -j ACCEPT
-A INPUT -p udp -m udp --dport 137 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 138 --syn -j ACCEPT
-A INPUT -p udp -m udp --dport 138 -j ACCEPT
-A INPUT -p tcp -m tcp --dport 139 --syn -j ACCEPT
-A INPUT -p udp -m udp --dport 139 -j ACCEPT
------end------
- service iptables restart
- Edit /etc/krb5.conf for your domain
- chkconfig smb on
- service smb start
- /usr/kerberos/bin/kinit WINUS...@DOMAIN.COM
- net ads join -U WINUSERNAME%[password]
- Wait for an annoyingly long time for your machine to show up in
Windows DNS and NETBIOS
- Browse from Windows to \\frontend-name
I had to specify the path to kinit because the one from java was first
in my path -- it took me too long to figure that one out! I was getting
the wrong response, based on directions at
http://samba.org/samba/docs/man/Samba-HOWTO-Collection/domain-member.htm
l#ads-member
Of course, WINUSERNAME must have rights to add computers to the Domain.
Note also that "netbios name = " value in /etc/samba/smb.conf will be
the name that will appear in your network neighborhood. It defaults to
the hostname. It can also be set on the "net ads join" command line.
If you have any problems, email me again.
Bart
> -----Original Message-----
> From: npaci-rocks-dis...@sdsc.edu
> [mailto:npaci-rocks-dis...@sdsc.edu] On Behalf Of
> CHE Rocks
> Sent: Wednesday, August 01, 2007 10:41 AM
> To: rockslist
> Subject: [Rocks-Discuss] Samba: Yes? No?
>
>
> Hi all,
>
> Pretty sure that I know the answer but I will ask anyway:
>
> Is it a major ordeal -- or for that matter, is it 1) advised,
> 2) possible -- to get samba working on the frontend of an
> otherwise perfectly functional 4.2.1 cluster?
>
> If it can be done, does anyone have a step-by-step guide handy?
>
> One of our users is fairly adamant about a 'need' for Windows.
>
> Thanks,
>
> Tim
>
>