Alors voilà, je configure mon smb.conf afin que Samba soit controleur de domaine. Après cela je crée un compte machine avec la sytaxe suivante:
useradd -g machines -d /dev/null -s /bin/false po01
où "po01" est le nom netbios de l'ordi à intégrer.
puis je l'ajoute au fichier /etc/smbpasswd avec:
smbpasswd -a -m po01
Je crée un utlisateur que je nomme nono avec:
useradd -g users -d /dev/null -s /bin/false nono
smbpasswd -a nono
L'utilisateur root (administrateur samba) est aussi crée.
Maintenant je tente de joindre mon domaine avec po01 qui est sous win2000
après un petit moment, il me souhaite la bienvenue dans le domaine et me demande de redémarrer, mais une fois qu'il redemarre et que je choisi d'entrer dans le domaine, il me dit:
"le système ne peut ouvrir de session sur ce domaine car le compte système de l'ordinateur dans son domaine principal est manquant ou le mot de passe de ce compte est incorrect"
Et ce, que j'utilise le compte root de samba ou l'utilisateur nono!
Il ne se connecte que en local....
Je deviens fou
](./images/smilies/eusa_wall.gif "Brick wall")
voici mon fichier smb.conf:
[global]
# 1. Server Naming Options:
# workgroup = NT-Domain-Name or Workgroup-Name
workgroup = dahomey
# netbios name is the name you will see in "Network Neighbourhood",
# but defaults to your hostname
netbios name = Daimyo
# 4. Security and Domain Membership Options:
# This option is important for security. It allows you to restrict
# connections to machines which are on your local network. The
# following example restricts access to two C class networks and
# the "loopback" interface. For more examples of the syntax see
# the smb.conf man page. Do not enable this if (tcp/ip) name resolution does
# not work for all the hosts in your network.
hosts allow = 192.168.0. 127.
# Security mode. Most people will want user level security. See
# security_level.txt for details.
security = user
# You may wish to use password encryption. Please read
# ENCRYPTION.txt, Win95.txt and WinNT.txt in the Samba documentation.
# Do not enable this o/ption unless you have read those documents
# Encrypted passwords are required for any use of samba in a Windows NT domain
# The smbpasswd file is only required by a server doing authentication, thus
# members of a domain do not need one.
encrypt passwords = yes
smb passwd file = /etc/samba/smbpasswd
# Unix users can map to different SMB User names
username map = /etc/samba/smbusers
# 5. Browser Control and Networking Options:
# Most people will find that this option gives better performance.
# See speed.txt and the manual pages for details
socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192
# set local master to no if you don't want Samba to become a master
# browser on your network. Otherwise the normal election rules apply
local master = yes
# OS Level determines the precedence of this server in master browser
# elections. The default value should be reasonable
os level = 65
# Domain Master specifies Samba to be the Domain Master Browser. This
# allows Samba to collate browse lists between subnets. Don't use this
# if you already have a Windows NT domain controller doing this job
domain master = yes
# Preferred Master causes Samba to force a local browser election on startup
# and gives it a slightly higher chance of winning the election
preferred master = yes
# 6. Domain Control Options:
# Enable this if you want Samba to be a domain logon server for
# Windows95 workstations or Primary Domain Controller for WinNT and Win2k
domain logons = yes
# Where to store roaming profiles for WinNT and Win2k
# %L substitutes for this servers netbios name, %U is username
# You must uncomment the [Profiles] share below
logon path = \\%L\Profiles\%U
#Lecteur affecter au repertoir personnel
logon drive = H:
# Where to store roaming profiles for Win9x. Be careful with this as it also
# impacts where Win2k finds it's /HOME share
logon home = \\%L\%U\.profile
time server = yes
# The add user script is used by a domain member to add local user accounts
# that have been authenticated by the domain controller, or by the domain
# controller to add local machine accounts when adding machines to the domain.
# The script must work from the command line when replacing the macros,
# or the operation will fail. Check that groups exist if forcing a group.
# Script for domain controller for adding machines:
add user script = /usr/sbin/useradd -d /dev/null -g 100 -s /bin/false -M %u
# 7. Name Resolution Options:
# All NetBIOS names must be resolved to IP Addresses
# 'Name Resolve Order' allows the named resolution mechanism to be specified
# the default order is "host lmhosts wins bcast". "host" means use the unix
# system gethostbyname() function call that will use either /etc/hosts OR
# DNS or NIS depending on the settings of /etc/host.config, /etc/nsswitch.conf
# and the /etc/resolv.conf file. "host" therefore is system configuration
# dependant. This parameter is most often of use to prevent DNS lookups
# in order to resolve NetBIOS names to IP Addresses. Use with care!
# The example below excludes use of name resolution for machines that are NOT
# on the local network segment
# - OR - are not deliberately to be known via lmhosts or via WINS.
; name resolve order = wins lmhosts bcast
# Windows Internet Name Serving Support Section:
# WINS Support - Tells the NMBD component of Samba to enable it's WINS Server
wins support = yes
#============================ Share Definitions
[homes]
comment = Home Directories
browseable = no
guest ok = no
map archive = yes
# Un-comment the following and create the netlogon directory for Domain Logons
[netlogon]
comment = Network Logon Service
path = /var/lib/samba/netlogon
browsable = no
writable = no
# Un-comment the following to provide a specific roving profile share
# the default is to use the user's home directory
[Profiles]
path = /home/smb-profiles
browseable = no
writable = yes
create mask = 0600
directory mask = 0700
Merci d'avance
