Can not Browse to a UNIX SAMBA share from Win using simple name

[Michael Gildersleeve]

I have configured a CIFS, SAMBA in security = ads, using winind to create and populate the smbpasswd file and have shares for the Windoz users. I can browse from my PC using the fqdn and the IP address but not when I use the simple name or \\serverNAME. DNS is on the Win2003 AD server and looks OK. I can ping and nslookup myUnix server using fqdn. IP, and simple name BUT am unable to browse to the server shares. I can from another HP-UX server browse the shares using the simple name. Does anyone have a suggestio?
N.B. Everything was working fine and then I changed myUnix server name, and all of the conf files, also changed the DNS on the Win2003 AD server. After this it no worka no more.

[Mike Hassell]

Michael,

If I understand your question correctly, you are unable to use the basic hostname to connect to a samba share from a windows box. However, you can reach the samba server via FQDN and IP.

I would look at the MS DNS server first and make sure that not only the A record was updated with your new hostname, but also the reverse lookup (PTR) record has been updated as well.

I also recommend that in the future, you decide on a hostname *before* you build the server. Changing something system wide like this can cause all kinds of problems.

Good luck, let us know what your reverse lookup zone data looks like.

Peace,
Mike

[Geoff Wild]

Did you add the server to ADS?

Also - you should set SECURITY=DOMAIN

See my steps here on how to get CIFS and ADS working:

http://forums1.itrc.hp.com/service/forums/questionanswer.do?threadId=949365

Rgds...Geoff

[Michael Gildersleeve]

Mike H.
The DNS records are correct, both forward and reverse pointer records.
As stated above, The server can be ping'd using FQDN,IP and simple or Hostname and nslookup finds all as well from PC's and other UNIX servers.
The reason for a name change is so that I can work on my production server, which this is a clone of, until I upgrade it. There are alot of processes and things that require ProdServer to be a certain IP and Name and it was suggested to do this rather than make a DNS alias. When upgrade of Prod is completed this will become another Hostname/IP.
I do not believe that it is my HP software -
# swlist | grep J4269AA
J4269AA B.04.00.02 LDAP-UX Integration
# swlist | grep CIFS
B8724AA A.02.02 CIFS Client
B8725AA A.02.02.01 HP CIFS Server
# swlist |grep Kerb
KRB5CLIENT C.1.3.5.03 Kerberos V5 Client Version 1.3.5.03
PAMKerberos B.11.11.14 PAM-Kerberos and Kerberos Support
T1417AA B.11.11.04 Kerberos Server Version 2.1 and its Administration Utilities

Geoff,
I can browse \\Myserver.MyDomain.com and \\10.1.2.x Resolves like a pro. So, smb.conf and everything else is working. Tickets are issued and security is working. I created a share that only a certain user can browse and that works. The \\Hostname resolution returns Windoz can not find "\\Myserver". Samba logs go wild, as I have log level = 3
See attachment.
Yes, server was added to AD, The net ads join command will add the server, I also checked, I join with the Win2003 Admin password, which was changed after the AD implimentation, and join is successful. Looked at your steps and that is what I did, I had posted similar to a SAMBA AD question. Help, I'm losing my hair.
Also, ADS vs SHARE or DOMAIN I don't see the point, as it works FQDN?
Thanks for all the posts. I will assign pts but we need a winner here!

[Peter Nikitka]

Hi,

the short name will not work, when UNIX server and PC are not in the same DNS domain, or in a domain recorded in /etc/resolv.conf (or windows pendant), IMHO:

pc: pchost.sub1.mycompany.de
HP: hpsrv1.sub2.mycompany.de

Try again after you put something like this into resolv.conf (drop a 'domain' line if existing):

search sub1.mycompany.de sub2.mycompany.de
...

mfG Peter

[Yang Qin_1]

> the short name will not work, when UNIX server and PC are not in the same DNS domain, or in a domain recorded in /etc/resolv.conf (or windows pendant)

My HPUX SAMBA share with Windows AD works with "short name"

Windows AD Domain: mycompany.com
HPUX Domain: eu.mycompany.com

/etc/netconf:
domain eu.mycompany.com
nameserver xxx.xxx.xxx.xxx

smb.conf:
# Global parameters
[global]
workgroup =
realm = mycompany.COM
server string = myhost
security = DOMAIN
null passwords = Yes
password server = OURDC1.MYCOMPANY.COM
syslog = 0
log file = /var/opt/samba/log.%m
max log size = 1000
local master = No
ldap ssl = no
idmap uid = 10000-20000
idmap gid = 10000-20000
template shell = /bin/sh
winbind separator = +
winbind use default domain = Yes
read only = No
short preserve case = No
dos filetime resolution = Yes


Yang

[Chirag Parekh]

Hi Michael,

Since the name of the server was changed you will have to add/join the Unix server to the PDC (Primary Domain Controller) in your environment by running the below located under /opt/samba/bin

smbpasswd -J -U

Chirag.