samba Not starting

[Ray Bell]

I have a rx660 server and tring to start samba and it fail. I add the following entry to smb.conf:

# Some defaults for winbind (make sure you're not using the ranges
# for something else.)
idmap uid = 20000-34000
idmap gid = 20000-34000
template homedir = /dev/null
template shell = /bin/false
; template primary group = "Domain Users"
winbind use default domain = yes
winbind enum users = yes
winbind enum groups = yes
winbind cache time = 300
# no is default
winbind nested groups = No

When I start up samba I get the following error:
[2007/10/24 15:32:38, 1] nsswitch/winbindd.c:main(978)
winbindd version 3.0.22 based HP CIFS Server A.02.03.01 started.
Copyright The Samba Team 2000-2004
[2007/10/24 15:32:38, 0] nsswitch/winbindd_util.c:init_domain_list(540)
Could not fetch our SID - did we join?
[2007/10/24 15:32:38, 0] nsswitch/winbindd.c:main(1079)
unable to initialize domain list

Anyway what can I do to get this started...

[Sameer_Nirmal]

The error indicates the machine SID is not found by winbindd. Did you run samba_setup ?There should be an entry in smb.conf like
security = domain

Usually the above entry and SID creation is done by samba_setup. You can run command
# smbpasswd -j -p
to create the SID.

[Steven E. Protter]

Shalom,

assuming smb.conf is correct and you are joining a windows domain.

net rpc join domaincontroller -U username

#give password when prompted.

You need a user that is empowered to add machines to the domain. Get that from the windows admins.

Also, none of this will work at all without the very latest CIFS/9000 release from http://software.hp.com

With the help of the response center in Israel and the USA I solved a similar problem today.

SEP

[Ray Bell]

Wow...

I have never set up samba before and we just
implemented a centrify active directory set up here and now I'm total lost. We are just testing this server to see how it would work and I need to probably start at gorund 1. Do anyone have a cook book on setting up samba. This is going to be very difficult as I see. I did not knwo about running the setup_samba and none of that stuff.

[Doug Burton · Accepted solution]

Hot dog, I'm almost at another hat...


This is not the end all be all of setups but it is something that worked for me. Hope it helps...

Make sure you installed the latest CIFS and Kerberos software as mentioned above. I did not use LDAP.

Make sure Samba is stopped: stopsmb

1. Run "samba_setup".
2. Do you wish to continue with the configuration? y
3. Configure this HP CIFFS Server to - - BE - - a WINS server? n
4. Configure this HP CIFFS Server to use an existing WINS server? y
5. Enter IP or DNS name:
6. Confirm: y
7. Configure this HP CIFFS server to use an NDS LDAP directory server? n
8. Choose a role for your server: 4 (ADS member)
9. Confirm ADS: y
10. Enter the name you wish the HP CIFFS Server to be known or hit enter to use the default: (it'll use your HP-UX hostname )
11. Enter the fully qualified realm name:
12. Is this correct: y
13. Enter the fully qualified server name of the ADS Domain Controller:
14. Confirm it: y
15. Enter Domain Controller Administrators name:
16. Confirm it: y
17. Enter Domain Administrators password:
18. Enter password again:
19. View smb.conf parameters: 1

Test Kerberos:

20. Kerberos test at command line: kinit
21. Password:
If it returns without an error (or nothing at all but the command line), we are good.
22. Make sure MD5 is used in the Kerberos config file (change if needed): cat /etc/krb5.conf
default_tkt_enctypes = DES-CBC-MD5
default_tgs_enctypes = DES-CBC-MD5

Join the domain:

23. Run this: net ads join -U -d 10 2> /tmp/join.out.`date +%Y%m%d`
24. Enter the password
25. Look for "return code = 0" at the end of the file: tail /tmp/join.out.`date +%Y%m%d`

26. Start Samba: startsmb

27. Another little test to run: Do steps #20 and #21
28. Now run this: smbclient -L -k

If you share filesystems to Windows and Samba has started:

29. From the Unix command line: smbclient /// -U
30. Password:
31. You'll get an "smb: \>" prompt. Type ls to see what your allowed to see in whatever fileshare you specified above.
32. Type exit to get out of the Samba prompt.

Test from Winders by opening a DOS window:

33. At the command line: net view \\
You should see the shares available from the target HP-UX server.

Now for my /etc/opt/smb.conf file:

#
# Location of Samba files and directories:
# /etc/opt/samba - The config file (smb.conf) and
# user mapping (smbusers.map) file location.
# /etc/rc.config.d/samba - Startup file
# /sbin/init.d/samba - Startup file
# /sbin/rc2.d/S900samba - The init 2 startup link
# /sbin/rc1.d/K100samba - The init 1 kill link
# /opt/samba - Program files
# /var/opt/samba - Some lock files and such
# /var/adm/samba - Log file directory (this is not a standard location)
#
# Global parameters
[global]
preferred master = auto
domain master = auto
domain logons = no
encrypt passwords = yes
realm = <#11 above>
wins server = <#5 above>
wins support = no
workgroup =
netbios name =
server string =
security = ADS
password server = <#5 above>
username map = /etc/opt/samba/smbusers.map
username level = 0
syslog = 0
log file = /var/adm/samba/samba.log.%m
#log level = 10
max log size = 5000
local master = yes
short preserve case = No
dos filetime resolution = Yes
case sensitive = Yes
guest account = wins
...

[Ray Bell]

I have done this and need to get with our dns admin and it should work. Thanks for the cook book and thi is exactly what I needed to complete this tasks...