Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss
[Samba] Totally missing the mark here
325 views
Skip to first unread message
Steve Campbell
May 23, 2014, 3:20:01 PM5/23/14
to
I have to say I probably shouldn't have read that version 3 samba book,
but I did, so I'm thoroughly confused about what I should be doing to
get this server configured properly.
I have installed the Sernet rpms on this server. For now, I'm going to
run the AD on the same server as the file shares.
Using the wiki as a guide, I've followed the provisioning but the first
tests don't seem to succeed.
Am I doing this backwards? Should I first make this server a normal
Samba file server that will allow users to mount shares manually before
proceeding on to AD stuff. I'm not seeing how I can have any valid users
or anything following the wiki. It's like it should be Chapter 44
instead of the first prolog.
This is really humbling.
I could use some pointers in how to bring a new server up to an
AD/DC+fileserver.
Thanks for any help. For now, I'll dig in and read as much as I can.
steve campbell
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
but I did, so I'm thoroughly confused about what I should be doing to
get this server configured properly.
I have installed the Sernet rpms on this server. For now, I'm going to
run the AD on the same server as the file shares.
Using the wiki as a guide, I've followed the provisioning but the first
tests don't seem to succeed.
Am I doing this backwards? Should I first make this server a normal
Samba file server that will allow users to mount shares manually before
proceeding on to AD stuff. I'm not seeing how I can have any valid users
or anything following the wiki. It's like it should be Chapter 44
instead of the first prolog.
This is really humbling.
I could use some pointers in how to bring a new server up to an
AD/DC+fileserver.
Thanks for any help. For now, I'll dig in and read as much as I can.
steve campbell
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
Gregory Sloop
May 23, 2014, 3:40:02 PM5/23/14
to
I haven't been following the list carefully, but have you followed the Samba wiki?
http://wiki.samba.org/index.php/Samba_AD_DC_HOWTO
This should get you setup with an AD quite quickly.
I'm not sure about the sernet packages - I've seen _some_ problems in the past, but perhaps those reports are not valid any more. Frankly, compiling your own isn't half hard. [And since there aren't any good [read: current] distro supported packages you end up having to do "manual" updates anyway - so compiling is a little more hard than just installing a package, but also tends to help remove any potential problems/compatibility issues that often crop up from a package
[But that's all mainly an aside. Start with the Wiki and go from there. If it doesn't work be specific with your questions etc.]
-Greg
SC> I have to say I probably shouldn't have read that version 3 samba book,
SC> but I did, so I'm thoroughly confused about what I should be doing to
SC> get this server configured properly.
SC> I have installed the Sernet rpms on this server. For now, I'm going to
SC> run the AD on the same server as the file shares.
SC> Using the wiki as a guide, I've followed the provisioning but the first
SC> tests don't seem to succeed.
SC> Am I doing this backwards? Should I first make this server a normal
SC> Samba file server that will allow users to mount shares manually before
SC> proceeding on to AD stuff. I'm not seeing how I can have any valid users
SC> or anything following the wiki. It's like it should be Chapter 44
SC> instead of the first prolog.
SC> This is really humbling.
SC> I could use some pointers in how to bring a new server up to an
SC> AD/DC+fileserver.
SC> Thanks for any help. For now, I'll dig in and read as much as I can.
SC> steve campbell
http://wiki.samba.org/index.php/Samba_AD_DC_HOWTO
This should get you setup with an AD quite quickly.
I'm not sure about the sernet packages - I've seen _some_ problems in the past, but perhaps those reports are not valid any more. Frankly, compiling your own isn't half hard. [And since there aren't any good [read: current] distro supported packages you end up having to do "manual" updates anyway - so compiling is a little more hard than just installing a package, but also tends to help remove any potential problems/compatibility issues that often crop up from a package
[But that's all mainly an aside. Start with the Wiki and go from there. If it doesn't work be specific with your questions etc.]
-Greg
SC> I have to say I probably shouldn't have read that version 3 samba book,
SC> but I did, so I'm thoroughly confused about what I should be doing to
SC> get this server configured properly.
SC> I have installed the Sernet rpms on this server. For now, I'm going to
SC> run the AD on the same server as the file shares.
SC> Using the wiki as a guide, I've followed the provisioning but the first
SC> tests don't seem to succeed.
SC> Am I doing this backwards? Should I first make this server a normal
SC> Samba file server that will allow users to mount shares manually before
SC> proceeding on to AD stuff. I'm not seeing how I can have any valid users
SC> or anything following the wiki. It's like it should be Chapter 44
SC> instead of the first prolog.
SC> This is really humbling.
SC> I could use some pointers in how to bring a new server up to an
SC> AD/DC+fileserver.
SC> Thanks for any help. For now, I'll dig in and read as much as I can.
SC> steve campbell
Steve Campbell
May 23, 2014, 4:10:02 PM5/23/14
to
Thanks Greg,
That's the link I was following. I got down to the line for testing
connectivity:
/usr/local/samba/bin/smbclient -L localhost -U%
And I received an error, (I've been glaring at the screen all day and
can't remember the message, but it's the first thing done other than
starting samba, so I figure it's a botched job).
The smb.conf file seems awful short as well. There's other readings out
there with lots more to it, so I may follow those for a while and see if
I don't get further lost.
You all have a happy holiday if you're in the parts of the world that
celebrates.
Thanks all.
steve
That's the link I was following. I got down to the line for testing
connectivity:
/usr/local/samba/bin/smbclient -L localhost -U%
And I received an error, (I've been glaring at the screen all day and
can't remember the message, but it's the first thing done other than
starting samba, so I figure it's a botched job).
The smb.conf file seems awful short as well. There's other readings out
there with lots more to it, so I may follow those for a while and see if
I don't get further lost.
You all have a happy holiday if you're in the parts of the world that
celebrates.
Thanks all.
steve
Gregory Sloop
May 23, 2014, 4:20:01 PM5/23/14
to
Can't you run it again, and paste the results? [Seems like a 5 second task - a couple of minutes tops.]
[And if you're thinking: "Writing down that and copying is such a pain..." I'd suggest you do it use putty from a remote machine - it makes cut/paste quite a lot easier.]
-Greg
SC> Thanks Greg,
SC> That's the link I was following. I got down to the line for testing
SC> connectivity:
SC> /usr/local/samba/bin/smbclient -L localhost -U%
SC> And I received an error, (I've been glaring at the screen all day and
SC> can't remember the message, but it's the first thing done other than
SC> starting samba, so I figure it's a botched job).
SC> The smb.conf file seems awful short as well. There's other readings out
SC> there with lots more to it, so I may follow those for a while and see if
SC> I don't get further lost.
SC> You all have a happy holiday if you're in the parts of the world that
SC> celebrates.
SC> Thanks all.
SC> steve
[And if you're thinking: "Writing down that and copying is such a pain..." I'd suggest you do it use putty from a remote machine - it makes cut/paste quite a lot easier.]
-Greg
SC> Thanks Greg,
SC> That's the link I was following. I got down to the line for testing
SC> connectivity:
SC> /usr/local/samba/bin/smbclient -L localhost -U%
SC> And I received an error, (I've been glaring at the screen all day and
SC> can't remember the message, but it's the first thing done other than
SC> starting samba, so I figure it's a botched job).
SC> The smb.conf file seems awful short as well. There's other readings out
SC> there with lots more to it, so I may follow those for a while and see if
SC> I don't get further lost.
SC> You all have a happy holiday if you're in the parts of the world that
SC> celebrates.
SC> Thanks all.
SC> steve
Rowland Penny
May 23, 2014, 4:50:01 PM5/23/14
to
On 23/05/14 21:01, Steve Campbell wrote:
> Thanks Greg,
>
> That's the link I was following. I got down to the line for testing
> connectivity:
>
> /usr/local/samba/bin/smbclient -L localhost -U%
>
> And I received an error, (I've been glaring at the screen all day and
> can't remember the message, but it's the first thing done other than
> starting samba, so I figure it's a botched job).
Without knowing what the error message said, nobody is going to be able
> Thanks Greg,
>
> That's the link I was following. I got down to the line for testing
> connectivity:
>
> /usr/local/samba/bin/smbclient -L localhost -U%
>
> And I received an error, (I've been glaring at the screen all day and
> can't remember the message, but it's the first thing done other than
> starting samba, so I figure it's a botched job).
to help you ;-)
>
> The smb.conf file seems awful short as well. There's other readings
> out there with lots more to it, so I may follow those for a while and
> see if I don't get further lost.
>
just add anything to it without fully understanding what is going to
happen if you do.
If in doubt, please ask any questions.
Rowland
Marc Muehlfeld
May 23, 2014, 4:50:01 PM5/23/14
to
Hello Steve,
Am 23.05.2014 22:01, schrieb Steve Campbell:
> That's the link I was following. I got down to the line for testing
> connectivity:
>
> /usr/local/samba/bin/smbclient -L localhost -U%
>
> And I received an error, (I've been glaring at the screen all day and
> can't remember the message, but it's the first thing done other than
> starting samba, so I figure it's a botched job).
* What was the error you have received? Please run the command
again, if you can't remember the error.
* Is Samba listening on all ports it should?
https://wiki.samba.org/index.php/Samba_port_usage#Port_usage_when_Samba_runs_as_DC
* What do the Samba logs say?
* Please review the HowTo for steps you have missed.
Regards,
Marc
Am 23.05.2014 22:01, schrieb Steve Campbell:
> That's the link I was following. I got down to the line for testing
> connectivity:
>
> /usr/local/samba/bin/smbclient -L localhost -U%
>
> And I received an error, (I've been glaring at the screen all day and
> can't remember the message, but it's the first thing done other than
> starting samba, so I figure it's a botched job).
again, if you can't remember the error.
* Is Samba listening on all ports it should?
https://wiki.samba.org/index.php/Samba_port_usage#Port_usage_when_Samba_runs_as_DC
* What do the Samba logs say?
* Please review the HowTo for steps you have missed.
Regards,
Marc
Andrew Bartlett
May 25, 2014, 5:20:02 AM5/25/14
to
On Fri, 2014-05-23 at 12:38 -0700, Gregory Sloop wrote:
> I haven't been following the list carefully, but have you followed the Samba wiki?
>
> http://wiki.samba.org/index.php/Samba_AD_DC_HOWTO
>
> This should get you setup with an AD quite quickly.
> I'm not sure about the sernet packages - I've seen _some_ problems in
> the past, but perhaps those reports are not valid any more. Frankly,
> compiling your own isn't half hard. [And since there aren't any good
> [read: current] distro supported packages you end up having to do
> "manual" updates anyway - so compiling is a little more hard than just
> installing a package, but also tends to help remove any potential
> problems/compatibility issues that often crop up from a package
Ubuntu finally started shipping a distro-supported package with a
> I haven't been following the list carefully, but have you followed the Samba wiki?
>
> http://wiki.samba.org/index.php/Samba_AD_DC_HOWTO
>
> This should get you setup with an AD quite quickly.
> I'm not sure about the sernet packages - I've seen _some_ problems in
> the past, but perhaps those reports are not valid any more. Frankly,
> compiling your own isn't half hard. [And since there aren't any good
> [read: current] distro supported packages you end up having to do
> "manual" updates anyway - so compiling is a little more hard than just
> installing a package, but also tends to help remove any potential
> problems/compatibility issues that often crop up from a package
current Samba 4.1 in it, so these days may finally be over. It would be
good to hear some feedback on if it all worked out, as it is based on
the work I and others did for a merge Samba 4.x debian package.
Andrew Bartlett
--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
Steve Campbell
May 27, 2014, 7:40:01 AM5/27/14
to
wondering about my procedure more that what was wrong. Anyway....
Here's the command and resultant error:
smbclient -L localhost -U%
Connection to localhost failed (Error NT_STATUS_CONNECTION_REFUSED)
Here's what I'm running currently:
samba --version
Version 4.1.7-SerNet-RedHat-8.el6
The first error in the logs showing failure:
Failed to find object DC=cn,DC=cnpapers,DC=net for attribute
fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of
DC=cn,DC=cnpapers,DC=net to calculate reference dn
And on and on in the logs:
task_server_terminate: [dreplsrv: Failed to load partitions:
WERR_DS_DRA_INTERNAL_ERROR
task_server_terminate: [Cannot start Winbind (domain controller): Failed
to find record for CN in /var/lib/samba/private/secrets.ldb: No such
object: (null): Have you provisioned the CN domain?]
task_server_terminate: [kdc: hdb_samba4_create_kdc (setup KDC
database) failed]
This is why I'm questioning my procedure, and using the wiki
instructions. It appears there is tons I'm not seeing that needs to be done.
Thanks for all the patience. More reading for now.
Rowland Penny
May 27, 2014, 8:00:02 AM5/27/14
to
On 27/05/14 12:51, Steve Campbell wrote:
> I'm going to try and provision this all over again as I'm not sure the
> Windows guy here was providing the right answers. I'll read up on
> those domain answers and do it again without help and see where I get.
>
> The wiki indicates I need to remove my smb.conf file. Is there
> anything else needed to re-provision (keep in mind the original may
> have been completely botched). I'm still wondering where the
> secrets.tdb gets created since "Using Samba" seems to indicate I need
> to create it manually, as I recall.
>
> steve
>
Before you do anything, please reply to my earlier email, oh and STOP
read 'using Samba' it is like the curates egg, it is only good in parts. ;-)
Rowland
> Windows guy here was providing the right answers. I'll read up on
> those domain answers and do it again without help and see where I get.
>
> The wiki indicates I need to remove my smb.conf file. Is there
> anything else needed to re-provision (keep in mind the original may
> have been completely botched). I'm still wondering where the
> secrets.tdb gets created since "Using Samba" seems to indicate I need
> to create it manually, as I recall.
>
> steve
>
Before you do anything, please reply to my earlier email, oh and STOP
read 'using Samba' it is like the curates egg, it is only good in parts. ;-)
Rowland
Steve Campbell
May 27, 2014, 8:00:03 AM5/27/14
to
On 5/27/2014 7:36 AM, Steve Campbell wrote:
>
I'm going to try and provision this all over again as I'm not sure the
Windows guy here was providing the right answers. I'll read up on those
domain answers and do it again without help and see where I get.
The wiki indicates I need to remove my smb.conf file. Is there anything
else needed to re-provision (keep in mind the original may have been
completely botched). I'm still wondering where the secrets.tdb gets
created since "Using Samba" seems to indicate I need to create it
manually, as I recall.
steve
Windows guy here was providing the right answers. I'll read up on those
domain answers and do it again without help and see where I get.
The wiki indicates I need to remove my smb.conf file. Is there anything
else needed to re-provision (keep in mind the original may have been
completely botched). I'm still wondering where the secrets.tdb gets
created since "Using Samba" seems to indicate I need to create it
manually, as I recall.
steve
Rowland Penny
May 27, 2014, 8:00:04 AM5/27/14
to
Domain=[DOMAIN] OS=[Unix] Server=[Samba 4.1.6-Ubuntu]
Sharename Type Comment
--------- ---- -------
IPC$ IPC IPC Service (Samba 4.1.6-Ubuntu)
share_b Disk
home Disk
testshare Disk
sysvol Disk
netlogon Disk
Domain=[DOMAIN] OS=[Unix] Server=[Samba 4.1.6-Ubuntu]
Server Comment
--------- -------
Workgroup Master
--------- -------
WORKGROUP
>
> Here's what I'm running currently:
>
> samba --version
> Version 4.1.7-SerNet-RedHat-8.el6
>
> The first error in the logs showing failure:
>
> Failed to find object DC=cn,DC=cnpapers,DC=net for attribute
> fsmoRoleOwner - Cannot find attribute fsmoRoleOwner of
> DC=cn,DC=cnpapers,DC=net to calculate reference dn
>
> And on and on in the logs:
>
> task_server_terminate: [dreplsrv: Failed to load partitions:
> WERR_DS_DRA_INTERNAL_ERROR
>
> task_server_terminate: [Cannot start Winbind (domain controller):
> Failed to find record for CN in /var/lib/samba/private/secrets.ldb: No
> such object: (null): Have you provisioned the CN domain?]
>
> task_server_terminate: [kdc: hdb_samba4_create_kdc (setup KDC
> database) failed]
followed the wiki, what page(s) in particular ?
Rowland
Marc Muehlfeld
May 27, 2014, 8:10:01 AM5/27/14
to
Hello Steve,
Am 27.05.2014 13:51, schrieb Steve Campbell:
>> smbclient -L localhost -U%
>> Connection to localhost failed (Error NT_STATUS_CONNECTION_REFUSED)
Does Samba listen on localhost, too (respectively 0.0.0.0)?
> The wiki indicates I need to remove my smb.conf file. Is there anything
> else needed to re-provision (keep in mind the original may have been
> completely botched).
Remove the smb.conf and everything below /usr/local/samba/private/
(there are the databases of your AD and other stuff created during the
provisioning).
_BUT_: If you re-provision, you will loose all changes happend since the
provisioning/classicupgrade! E. g. if machines had changed their
passwords, they won't be able to login any more and have to re-joined.
So think twice if you really want to start from scratch. :-)
> I'm still wondering where the secrets.tdb gets
> created since "Using Samba" seems to indicate I need to create it
> manually, as I recall.
'Using Samba' is 12 years old! So be carefully. A lot changed since that
time. Expecially with Samba AD.
# ls -la /usr/local/samba/private/secrets.?db
-rw------- 1 root root 1286144 27. Mai 13:26
/usr/local/samba/private/secrets.ldb
-rw------- 1 root root 696 27. Mai 13:34
/usr/local/samba/private/secrets.tdb
Regards,
Marc
Am 27.05.2014 13:51, schrieb Steve Campbell:
>> smbclient -L localhost -U%
>> Connection to localhost failed (Error NT_STATUS_CONNECTION_REFUSED)
> The wiki indicates I need to remove my smb.conf file. Is there anything
> else needed to re-provision (keep in mind the original may have been
> completely botched).
(there are the databases of your AD and other stuff created during the
provisioning).
_BUT_: If you re-provision, you will loose all changes happend since the
provisioning/classicupgrade! E. g. if machines had changed their
passwords, they won't be able to login any more and have to re-joined.
So think twice if you really want to start from scratch. :-)
> I'm still wondering where the secrets.tdb gets
> created since "Using Samba" seems to indicate I need to create it
> manually, as I recall.
time. Expecially with Samba AD.
# ls -la /usr/local/samba/private/secrets.?db
-rw------- 1 root root 1286144 27. Mai 13:26
/usr/local/samba/private/secrets.ldb
-rw------- 1 root root 696 27. Mai 13:34
/usr/local/samba/private/secrets.tdb
Regards,
Marc
Steve Campbell
May 27, 2014, 9:10:01 AM5/27/14
to
https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO
I am using this command to provision:
/usr/local/samba/bin/samba-tool domain provision --use-rfc2307 --interactive
I'm using the old version 3 book to make sure I understand the questions
that "--interactive" asks, in particular, the ones about the domain.
I'm fairly certain that those domain questions might be the biggest part
of the problem.
steve
L.P.H. van Belle
May 27, 2014, 9:20:02 AM5/27/14
to
Steve.
Look at my scripts, yes they are debian based, but look what the commands do.
convert it to red hat.
The order of what the scripts are doing are most important.
Or go for debian and just use my scripts.
look here https://secure.bazuin.nl/scripts/
when i start with a virtual server with only ssh installed, i install 3 servers;
2 DC's and 1 member in about 15 min, with bidirectional sysvol sync.
Greetz,
Louis
>-----Oorspronkelijk bericht-----
>Van: camp...@cnpapers.com
>[mailto:samba-...@lists.samba.org] Namens Steve Campbell
>Verzonden: dinsdag 27 mei 2014 15:02
>Aan: sa...@lists.samba.org
>Onderwerp: Re: [Samba] Totally missing the mark here
Look at my scripts, yes they are debian based, but look what the commands do.
convert it to red hat.
The order of what the scripts are doing are most important.
Or go for debian and just use my scripts.
look here https://secure.bazuin.nl/scripts/
when i start with a virtual server with only ssh installed, i install 3 servers;
2 DC's and 1 member in about 15 min, with bidirectional sysvol sync.
Greetz,
Louis
>-----Oorspronkelijk bericht-----
>Van: camp...@cnpapers.com
>[mailto:samba-...@lists.samba.org] Namens Steve Campbell
>Verzonden: dinsdag 27 mei 2014 15:02
>Aan: sa...@lists.samba.org
>Onderwerp: Re: [Samba] Totally missing the mark here
Rowland Penny
May 27, 2014, 9:30:02 AM5/27/14
to
I thought that you were using the sernet packages, but from the above
command it would seem that you have compiled samba4 yourself.
I personally always pass all the info at once i.e.
samba-tool domain provision --realm=example.com --domain=EXAMPLE
--adminpass=P4ssw0rd* --use-rfc2307 --server-role='dc'
Your realm is usually the same as your DNS domain name and the domain
should be the first part of your realm but in UPPERCASE ;-)
NOTE TO MARC:
This really should be in the wiki, not just telling people to do it
interactively, especially if you are not going to show the questions
that will be asked. Would you like me to re-write that section and send
it to you ?
>
> I'm using the old version 3 book to make sure I understand the
> questions that "--interactive" asks, in particular, the ones about the
> domain.
>
to the wiki and ask questions here.
> I'm fairly certain that those domain questions might be the biggest
> part of the problem.
>
Marc Muehlfeld
May 27, 2014, 9:40:02 AM5/27/14
to
Hello Rowland,
Am 27.05.2014 15:19, schrieb Rowland Penny:
> I personally always pass all the info at once i.e.
> samba-tool domain provision --realm=example.com --domain=EXAMPLE
> --adminpass=P4ssw0rd* --use-rfc2307 --server-role='dc'
>
> Your realm is usually the same as your DNS domain name and the domain
> should be the first part of your realm but in UPPERCASE ;-)
>
> NOTE TO MARC:
> This really should be in the wiki, not just telling people to do it
> interactively, especially if you are not going to show the questions
> that will be asked. Would you like me to re-write that section and send
> it to you ?
I'm currently working on a large re-write of the classicupgrade HowTo.
But one of my next tops on my roadmap is to do some improvements in the
AD HowTo.
If you send me a draft of that section, I will directly include it.
Regards,
Marc
Am 27.05.2014 15:19, schrieb Rowland Penny:
> I personally always pass all the info at once i.e.
> samba-tool domain provision --realm=example.com --domain=EXAMPLE
> --adminpass=P4ssw0rd* --use-rfc2307 --server-role='dc'
>
> Your realm is usually the same as your DNS domain name and the domain
> should be the first part of your realm but in UPPERCASE ;-)
>
> NOTE TO MARC:
> This really should be in the wiki, not just telling people to do it
> interactively, especially if you are not going to show the questions
> that will be asked. Would you like me to re-write that section and send
> it to you ?
But one of my next tops on my roadmap is to do some improvements in the
AD HowTo.
If you send me a draft of that section, I will directly include it.
Regards,
Marc
Steve Campbell
May 27, 2014, 10:10:02 AM5/27/14
to
<snip>
it give me mostly the same executables?
correct. How would I start over?
Regardless of how bad the "Using Samba" book might be for a Samba 4
implementation, it does provide very good information about what Domains
are and how they are viewed (at least for me, the Windows Domain idiot).
I don't mean to argue.
I feel sort of guilty for using the list as a learning tool. There just
isn't much out there other places.
>
> NOTE TO MARC:
> This really should be in the wiki, not just telling people to do it
> interactively, especially if you are not going to show the questions
> that will be asked. Would you like me to re-write that section and
> send it to you ?
>
>>
>> I'm using the old version 3 book to make sure I understand the
>> questions that "--interactive" asks, in particular, the ones about
>> the domain.
>>
> Please take that copy of 'using Samba' and get rid of it ;-) Just
> refer to the wiki and ask questions here.
>
>> I'm fairly certain that those domain questions might be the biggest
>> part of the problem.
>>
>
> Could be.
>
steve
> You are starting to confuse me now ;-)
> I thought that you were using the sernet packages, but from the above
> command it would seem that you have compiled samba4 yourself.
How would the sernet packages differ from the compiled version? Doesn't
> I thought that you were using the sernet packages, but from the above
> command it would seem that you have compiled samba4 yourself.
it give me mostly the same executables?
>
> I personally always pass all the info at once i.e.
> samba-tool domain provision --realm=example.com --domain=EXAMPLE
> --adminpass=P4ssw0rd* --use-rfc2307 --server-role='dc'
>
> Your realm is usually the same as your DNS domain name and the domain
> should be the first part of your realm but in UPPERCASE ;-)
OK, I'm almost certain what I used for the interactive answers were not
> I personally always pass all the info at once i.e.
> samba-tool domain provision --realm=example.com --domain=EXAMPLE
> --adminpass=P4ssw0rd* --use-rfc2307 --server-role='dc'
>
> Your realm is usually the same as your DNS domain name and the domain
> should be the first part of your realm but in UPPERCASE ;-)
correct. How would I start over?
Regardless of how bad the "Using Samba" book might be for a Samba 4
implementation, it does provide very good information about what Domains
are and how they are viewed (at least for me, the Windows Domain idiot).
I don't mean to argue.
I feel sort of guilty for using the list as a learning tool. There just
isn't much out there other places.
>
> NOTE TO MARC:
> This really should be in the wiki, not just telling people to do it
> interactively, especially if you are not going to show the questions
> that will be asked. Would you like me to re-write that section and
> send it to you ?
>
>>
>> I'm using the old version 3 book to make sure I understand the
>> questions that "--interactive" asks, in particular, the ones about
>> the domain.
>>
> Please take that copy of 'using Samba' and get rid of it ;-) Just
> refer to the wiki and ask questions here.
>
>> I'm fairly certain that those domain questions might be the biggest
>> part of the problem.
>>
>
> Could be.
>
Rowland Penny
May 27, 2014, 10:30:02 AM5/27/14
to
On 27/05/14 15:04, Steve Campbell wrote:
> <snip>
>> You are starting to confuse me now ;-)
>> I thought that you were using the sernet packages, but from the above
>> command it would seem that you have compiled samba4 yourself.
> How would the sernet packages differ from the compiled version?
> Doesn't it give me mostly the same executables?
Well yes, but they will be found in different places, take samba-tool
> <snip>
>> You are starting to confuse me now ;-)
>> I thought that you were using the sernet packages, but from the above
>> command it would seem that you have compiled samba4 yourself.
> How would the sernet packages differ from the compiled version?
> Doesn't it give me mostly the same executables?
for instance, with sernet it will be in /usr/bin , but if you compile
samba4 yourself it will be found in /usr/local/samba/bin
>>
>> I personally always pass all the info at once i.e.
>> samba-tool domain provision --realm=example.com --domain=EXAMPLE
>> --adminpass=P4ssw0rd* --use-rfc2307 --server-role='dc'
>>
>> Your realm is usually the same as your DNS domain name and the domain
>> should be the first part of your realm but in UPPERCASE ;-)
>
> OK, I'm almost certain what I used for the interactive answers were
> not correct. How would I start over?
>
can take snapshots of this) , then decide whether to go with the sernet
packages, use the backport packages (if using wheezy) or compile samba
yourself, once you make your decision, stick with it.
> Regardless of how bad the "Using Samba" book might be for a Samba 4
> implementation, it does provide very good information about what
> Domains are and how they are viewed (at least for me, the Windows
> Domain idiot). I don't mean to argue.
>
there are two types of domains, NT4 and AD, Samba4 can do both, but you
really should be aiming for an AD domain and there is a lot of better
info out there in the internet, than what you will find in that book.
> I feel sort of guilty for using the list as a learning tool. There
> just isn't much out there other places.
concerned we should help others as far as we can. As for finding
information on the internet, I suspect that you are not using the right
search terms, try using 'active directory' or 'AD' instead of 'samba' or
'samba4'.
Rowland
Steve Campbell
May 27, 2014, 11:10:02 AM5/27/14
to
something different. He found some instructions using configure/make and
was trying to do that. I stopped him before doing so.
Upon trying to remove sernet and then update sernet, we discovered that
some of the packages are being updated, and we couldn't do either remove
or update the packages.
So I removed the individual packages (as opposed to all the packages as
a wildcard). We are now installing from the git directories. He's a
little concerned because he's not a Linux guy and I'm only going to be
around for a few months, and packages are just so easy for a new guy.
I'll inform you of our progress.
I hadn't considered the AD-vs-NT4 domains. Glad you mentioned that. And
thanks for the understanding and patience.
Rowland Penny
May 27, 2014, 12:00:01 PM5/27/14
to
forced to be stable, I would recommend that you use the latest stable
package (if you are going to compile it yourself) :
samba.org/samba/ftp/stable/samba-4.1.7.tar.gz
Rowland
Steve Campbell
May 27, 2014, 12:30:03 PM5/27/14
to
Right again. He downloaded 4.2-pre
We've wiped that and downloaded the file you suggested. I've unzipped
and untarred that. There is a configure in the root folder
(samba-4.1.7). The wiki indicates that there should be a samba-master
folder (when using git). Can I assume that I should use the configure in
that root folder?
Rowland Penny
May 27, 2014, 12:40:01 PM5/27/14
to
./configure
make
make install
This supposes that you are running as root, otherwise the last command
will have to be run with sudo.
I take it that you have installed all the required packages to compile
Samba, if you are not sure, take a look here:
https://wiki.samba.org/index.php/Samba_4/OS_Requirements
Install everything that you haven't got installed, then start the
compile, good luck ;-)
Rowland
Steve Campbell
May 27, 2014, 12:40:03 PM5/27/14
to
Steve Campbell
May 27, 2014, 1:40:02 PM5/27/14
to
That 4.2 version would allow me to provision.
The new 4.1.7 version fails on provision with the following:
ldb: module schema_load initialization failed : No such object
ldb: module rootdse initialization failed : No such object
ldb: module samba_dsdb initialization failed : No such object
ldb: Unable to load modules for /usr/local/samba/private/sam.ldb: (null)
samdb_connect failed
VFS connect failed!
ERROR(<class 'samba.provision.ProvisioningError'>): Provision failed -
ProvisioningError: Your filesystem or build does not support posix ACLs,
which s3fs requires. Try the mounting the filesystem with the 'acl' option.
File
"/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/domain.py",
line 398, in run
use_rfc2307=use_rfc2307, skip_sysvolacl=False)
File
"/usr/local/samba/lib64/python2.6/site-packages/samba/provision/__init__.py",
line 2052, in provision
raise ProvisioningError("Your filesystem or build does not support
posix ACLs, which s3fs requires. Try the mounting the filesystem with
the 'acl' option.")
Looks like a few problems. But OpenLDAP is installed. I have selinux
running in permissive to get some of the file attributes. I have added
to fstab on all the partitions that matter the following after "defaults"
,user_xattr,acl,barrier=1
Remounted using mount -a and also rebooted.
Seems I'm going backwards.
steve
Rowland Penny
May 27, 2014, 2:10:02 PM5/27/14
to
installed, it will conflict with Samba4 AD. Could you please confirm
what OS you are installing samba4 on.
>
> ,user_xattr,acl,barrier=1
>
> Remounted using mount -a and also rebooted.
provision again.
Rowland
steve
May 27, 2014, 2:10:02 PM5/27/14
to
On Tue, 2014-05-27 at 13:38 -0400, Steve Campbell wrote:
> "/usr/local/samba/lib64/python2.6/site-packages/samba/provision/__init__.py",
> line 2052, in provision
> raise ProvisioningError("Your filesystem or build does not support
> posix ACLs, which s3fs requires. Try the mounting the filesystem with
> the 'acl' option.")
>
> Looks like a few problems. But OpenLDAP is installed. I have selinux
> running in permissive to get some of the file attributes. I have added
> to fstab on all the partitions that matter the following after "defaults"
>
> ,user_xattr,acl,barrier=1
>
> Remounted using mount -a and also rebooted.
>
> Seems I'm going backwards.
>
> steve
Hi
> "/usr/local/samba/lib64/python2.6/site-packages/samba/provision/__init__.py",
> line 2052, in provision
> raise ProvisioningError("Your filesystem or build does not support
> posix ACLs, which s3fs requires. Try the mounting the filesystem with
> the 'acl' option.")
>
> Looks like a few problems. But OpenLDAP is installed. I have selinux
> running in permissive to get some of the file attributes. I have added
> to fstab on all the partitions that matter the following after "defaults"
>
> ,user_xattr,acl,barrier=1
>
> Remounted using mount -a and also rebooted.
>
> Seems I'm going backwards.
>
> steve
No, but try to be a little more systematic. If you think selinux or
openLDAP are getting in the way, kill them and try again. If the error
persists, check that you have installed:
attr
libacl1-dev
libattr1-dev
and
krb5-user
HTH
Steve
lp101
May 27, 2014, 2:10:02 PM5/27/14
to
Hello,
I've had this happen when I had a prior unsuccessful build. I fixed
the provision error by removing directory "/usr/local/samba" and removed
the samba folder that I had unzipped(Samba4.1.7.tar). Started over again
and everything went fine. Your mileage may vary.
-James
I've had this happen when I had a prior unsuccessful build. I fixed
the provision error by removing directory "/usr/local/samba" and removed
the samba folder that I had unzipped(Samba4.1.7.tar). Started over again
and everything went fine. Your mileage may vary.
Steve Campbell
May 27, 2014, 3:10:01 PM5/27/14
to
Trying this now. Certainly can't hurt.
Andrew Bartlett
May 27, 2014, 10:00:03 PM5/27/14
to
directory and start again, the issue comes from re-running provision and
a bug we had in Samba. A fix for this will be in 4.2 (I don't recall if
I backported it).
Andrew Bartlett
--
Andrew Bartlett
http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
Davor Vusir
May 28, 2014, 4:10:02 PM5/28/14
to
Den 23 maj 2014 21:18 skrev "Steve Campbell" <camp...@cnpapers.com>:
>
> I have to say I probably shouldn't have read that version 3 samba book,
but I did, so I'm thoroughly confused about what I should be doing to get
>
> I have to say I probably shouldn't have read that version 3 samba book,
this server configured properly.
>
> I have installed the Sernet rpms on this server. For now, I'm going to
run the AD on the same server as the file shares.
>
>
> Using the wiki as a guide, I've followed the provisioning but the first
tests don't seem to succeed.
>
> Am I doing this backwards? Should I first make this server a normal Samba
>
file server that will allow users to mount shares manually before
proceeding on to AD stuff. I'm not seeing how I can have any valid users or
anything following the wiki. It's like it should be Chapter 44 instead of
the first prolog.
>
> This is really humbling.
>
> I could use some pointers in how to bring a new server up to an
AD/DC+fileserver.
> I could use some pointers in how to bring a new server up to an
>
> Thanks for any help. For now, I'll dig in and read as much as I can.
>
> steve campbell
> Thanks for any help. For now, I'll dig in and read as much as I can.
>
Hi Steve!
Would you mind following this How-to:
https://wiki.samba.org/index.php/WIP/Beginner_HowTo_-_SOHO_business_server?
I'd love to hear if it really flies.
Regards
Davor
0 new messages