Forum Debian Users Gang

# Samba config file created using SWAT
# from UNKNOWN ()
# Date: 2010/06/08 10:23:56

[global]
    
dos charset = CP852
    strict locking = no
    unix charset = ISO8859-2
    workgroup = KLOS.COM.PL
    netbios name = TEST-PDC
    server string = Samba PDC
    passwd program = /usr/sbin/smbldap-passwd %u
    passwd chat = *New*password* %nn *Retype*new*password* %nn *all*authentication*tokens*updated*
    log level = 2
    syslog = 0
    log file = /var/log/samba/log.%m
    max log size = 50
    name resolve order = wins lmhosts host bcast
    socket options = TCP_NODELAY IPTOS_LOWDELAY SO_SNDBUF=8192 SO_RCVBUF=8192
    add user script = /usr/sbin/smbldap-useradd -m "%u"
    delete user script = /usr/sbin/smbldap-userdel "%u"
    add group script = /usr/sbin/smbldap-groupadd -p "%g"
    delete group script = /usr/sbin/smbldap-groupdel "%g"
    add user to group script = /usr/sbin/smbldap-groupmod -m "%u" "%g"
    delete user from group script = /usr/sbin/smbldap-groupmod -x "%u" "%g"
    set primary group script = /usr/sbin/smbldap-usermod -g "%g" "%u"
    add machine script = /usr/sbin/smbldap-useradd -w "%u"
    logon script = netlogon.bat OR %U.bat
    logon path = \\%L\profiles\%U\%a
    logon drive = P:
    logon home = \%L%U.profile
    domain logons = Yes
    os level = 65
    preferred master = Yes
    domain master = Yes
    dns proxy = No
    wins support = Yes
    ldap admin dn = cn=admin,dc=klos,dc=com,dc=pl
    ldap delete dn = Yes
    ldap group suffix = ou=groups
    ldap machine suffix = ou=machines
    ldap passwd sync = Yes
    ldap suffix = dc=klos,dc=com,dc=pl
    ldap ssl = no
    ldap user suffix = ou=users
    hosts allow = 127.0.0.1, 10.0.0.0, 192.168.1.0/255, 192.168.1.214/255.255.255.0
    hide unreadable = Yes
    unix password sync = yes
[netlogon]
    comment = Network Logon Service
    path = /home/samba/netlogon
    browseable = No

[homes]
    comment = HOME Directories
    path = /home/%U
    valid users = %S
    read only = No
    inherit permissions = Yes
    browseable = No

[profiles]
    path = /home/samba/profiles
    valid users = %U, "@Domain Admins"
    read only = No
    profile acls = yes
    create mask = 0600
    directory mask = 0700
    directory mode = 0700
    create mode = 0600
    case sensitive = No
    preserve case = No
    short preserve case = No
    hide files = /desktop.ini/ntuser.ini/NTUSER.*/
    browseable = No
    writeable=yes
    csc policy = disable
    profile acls = Yes    
    oplocs = false
    level2 oplock = false
[profiles.v2]
    path = /samba/profiles/.v2/%U
    read only = No
    create mask = 0700
    directory mask = 0700
    browseable = No
    csc policy = disable

 [2010/06/15 11:39:19,  2] auth/auth.c:310(check_ntlm_password)
  check_ntlm_password:  authentication for user [root] -> [root] -> [root] succeeded
[2010/06/15 11:39:19,  2] lib/access.c:406(check_access)
  Allowed connection from  (::ffff:192.168.1.78)
[2010/06/15 11:39:22,  2] rpc_server/srv_samr_nt.c:4118(_samr_LookupDomain)
  Returning domain sid for domain KLOS.COM.PL -> S-1-5-21-4029514266-1201480501-4168177805
erreur LDAP: Can't contact master ldap server for writing (IO::Socket::INET: connect: Połączenie odrzucone) at /usr/share/perl5/smbldap_tools.pm line 277.
[2010/06/15 11:39:24,  0] passdb/pdb_interface.c:342(pdb_default_create_user)
  _samr_create_user: Running the command `/usr/sbin/smbldap-useradd -w "test-a-pc$"' gave 111
[2010/06/15 11:39:37,  0] lib/util_sock.c:539(read_fd_with_timeout)
[2010/06/15 11:39:37,  0] lib/util_sock.c:1491(get_peer_addr_internal)
  getpeername failed. Error was Drugi koniec nie jest połączony
  read_fd_with_timeout: client 0.0.0.0 read error = Połączenie zerwane przez drugą stronę.
[2010/06/15 11:41:34,  2] auth/auth.c:310(check_ntlm_password)
  check_ntlm_password:  authentication for user [root] -> [root] -> [root] succeeded
[2010/06/15 11:41:34,  2] lib/access.c:406(check_access)
  Allowed connection from  (::ffff:192.168.1.78)
[2010/06/15 11:41:37,  2] rpc_server/srv_samr_nt.c:4118(_samr_LookupDomain)
  Returning domain sid for domain KLOS.COM.PL -> S-1-5-21-4029514266-1201480501-4168177805
[2010/06/15 11:41:42,  2] lib/access.c:406(check_access)
  Allowed connection from  (::ffff:192.168.1.78)
[2010/06/15 11:41:42,  2] libsmb/credentials.c:223(netlogon_creds_server_check)
  netlogon_creds_server_check: credentials check failed.
[2010/06/15 11:41:42,  0] rpc_server/srv_netlog_nt.c:603(_netr_ServerAuthenticate3)
  _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client TEST-A-PC machine account TEST-A-PC$
[2010/06/15 11:41:42,  2] libsmb/credentials.c:223(netlogon_creds_server_check)
  netlogon_creds_server_check: credentials check failed.
[2010/06/15 11:41:42,  0] rpc_server/srv_netlog_nt.c:603(_netr_ServerAuthenticate3)
  _netr_ServerAuthenticate3: netlogon_creds_server_check failed. Rejecting auth request from client TEST-A-PC machine account TEST-A-PC$
[2010/06/15 11:41:55,  0] lib/util_sock.c:539(read_fd_with_timeout)
[2010/06/15 11:41:55,  0] lib/util_sock.c:1491(get_peer_addr_internal)
  getpeername failed. Error was Drugi koniec nie jest połączony
  read_fd_with_timeout: client 0.0.0.0 read error = Połączenie zerwane przez drugą stronę.