Miscbrah Posted May 3, 2012 Author Posted May 3, 2012 Gah, same thing with the administrator account and another admin account :/
CyberNerd Posted May 3, 2012 Posted May 3, 2012 Sorry for the dumb question, but did you actually join the server to the domain?
Miscbrah Posted May 3, 2012 Author Posted May 3, 2012 Heh, no it's NOT a dumb question and I'm grateful for all the angles of approach anyone's got. I did join it to the domain yes. It shows up in AD too and pings ok.
Miscbrah Posted May 3, 2012 Author Posted May 3, 2012 Hi! First off, thanks for still helping me out! Both show: root@james:/home/eng# net ads testjoin Join is OK root@james:/home/eng# wbinfo -t checking the trust secret for domain via RPC calls succeeded root@james:/home/eng#
Miscbrah Posted May 3, 2012 Author Posted May 3, 2012 I got: root@james:/home/eng# wbinfo -a jlamb Enter jlamb's password: plaintext password authentication failed Could not authenticate user jlamb with plaintext password Enter jlamb's password: challenge/response password authentication failed error code was NT_STATUS_NO_SUCH_USER (0xc0000064) error messsage was: No such user Could not authenticate user jlamb with challenge/response root@james:/home/eng#
Miscbrah Posted May 3, 2012 Author Posted May 3, 2012 (edited) Output of that one is a huge amount of usernames (from AD) extending up beyond the putty window. Edited May 3, 2012 by Miscbrah
Geoff Posted May 3, 2012 Posted May 3, 2012 What format are the usernames listed in? DOMAIN\user or just user?
cpjitservices Posted May 4, 2012 Posted May 4, 2012 I spent days and days with this and got as far as you got - then gave up!! Be interesting to see how you get on!
Miscbrah Posted May 4, 2012 Author Posted May 4, 2012 I spent days and days with this and got as far as you got - then gave up!! Be interesting to see how you get on! Oh son, I feel you I really do. This marks my FOURTH attempt! Really gotta get this working. But what I don't understand is how ANYONE gets it to work! There's NO complete guide anywhere, and only cryptic error messages to help you which, when googled, reveal forums full of OTHER PEOPLE going "help help I've got the same message" and stony silence after... I'm HUGELY grateful we've got the forum we have, or I'd have been running for the hills by now.
siuko Posted May 4, 2012 Posted May 4, 2012 Have you tried doing wbinfo -u >> output.log This should save ALL the usernames from the wbinfo -u to a text file called output.log Search through this text file and check to see if the username you are testing with is there... just to prove that winbind can actually see the OU you want etc
Miscbrah Posted May 4, 2012 Author Posted May 4, 2012 Have you tried doing wbinfo -u >> output.log This should save ALL the usernames from the wbinfo -u to a text file called output.log Search through this text file and check to see if the username you are testing with is there... just to prove that winbind can actually see the OU you want etc Cheers! Well some wrestling and installing something called "joe" means I can actually search text files now. Yes jlamb is in that file! This account is a member of staff and it's ONLY staff in this text file, not students, which isn't ACTUALLY a problem in this instance but I would like to know how I'd go about getting them in there too! However if that's more trouble then I can't face it. Cheers guys!!
dhicks Posted May 4, 2012 Posted May 4, 2012 What format are the usernames listed in? DOMAIN\user or just user? Or DOMAIN+user? I seem to remember an issue with using "\" as the domain separator character - Linux treats it as an escape character, causing confusion, so I set the domain separator character to be "+" in smb.conf.
CyberNerd Posted May 4, 2012 Posted May 4, 2012 (edited) Control W searches in nano. TBH I've never tried samba in ubuntu. All our file servers are Centos, so that's where my experience lies. Edited May 4, 2012 by CyberNerd
CyberNerd Posted May 4, 2012 Posted May 4, 2012 Or DOMAIN+user? I seem to remember an issue with using "\" as the domain separator character - Linux treats it as an escape character, causing confusion, so I set the domain separator character to be "+" in smb.conf. It shouldn't matter if he uses "use default domain = yes" @Miscbrah - are you restarting the services after you make a change?
siuko Posted May 4, 2012 Posted May 4, 2012 I know this sounds silly... but what isnt working so far? When I setup ubuntu/ntlm/squid etc I did the wbinfo -u and wbinfo -g and it showed that it could read the AD info. I never tried wbinfo -a - and just tried it with my username and it fails on Wrong Password (not that it asks for one) Have you tried just going on further with your setup on the basis that winbind is actually talking with your AD?
siuko Posted May 4, 2012 Posted May 4, 2012 Looking at google posts have you tried this.... I fixed this problem by running this command... net rpc join -U Administrator Before that, I was using "net join -S PDC -U Administrator", which seemed to work, but didn't. Can someone please tell me why this worked to begin with? I'm not sure what the difference is. I think thats the bit that joins your linux box to the domain
Miscbrah Posted May 4, 2012 Author Posted May 4, 2012 Oh man you guys have been so busy - cheers so much for the posts. Lots to try! I'll get experimenting and get back, been off-task a bit today. Really really grateful for the help.
dhicks Posted May 5, 2012 Posted May 5, 2012 I'll get experimenting and get back, been off-task a bit today. If it's any help, joining a Debian Squeeze machine to a Windows domain definatly works as I've just done it - I can log in via SSH with my Active Directory account details and everything. Depending on what, exactly, you're trying to set up and what data is on the server already, you could always start again from scratch with Debian. I've been following my own notes I made in this post: http://www.edugeek.net/forums/nix/48032-configuring-samba.html If you're just trying to set up a file server then FreeNAS seems to be excellent - FreeBSD based, uses ZFS for a filesystem, seems to integrate well with Windows (joins domains, does file permissions, even supports shadow copies to restore prvious version of files).
Miscbrah Posted May 8, 2012 Author Posted May 8, 2012 Cheers so much everyone, been a great help having you all to ask! Unfortunately, this is just too hard now and I've spent a week just getting nowhere with it. And to be honest, it's not teaching me anything it's just mystery after confusing mystery. Time to ditch this horrible horrible thing! Got permission to use another Windows server so getting back to what I know and moving things forward. If I get chance in the summer though I'll re-visit this, and hyats off to ANYONE who's actually got this awful awful thing working ever anywhere! It's been hellish! Enough's enough though, gotta call it a day. Thank you all loads though, renewed my faith a little and I'm sure next time I'll crack it.
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now