Moin!
Systeme:
Server:
Suse 10.1

Workstations:
Suse 10.1
Windows XP Pro

Ich bin dabei einen Raum mit 13 gleichen Rechnern und einem Server einzurichten - ich habe nun meine Beipielworkstation fertig - habe von Ihr ein Image gezogen und dies auf den nächsten Rechner aufgespielt.

Unter Linux - funktioniert alles wunderbar -
Unter Windows habe ich den Computernamen geändert und versuche mich nun in der Samba-Domain anzumelden - ich werde auch mit dem neuen Namen in die Domäne aufgenommen, ein "Maschinen-Konto" wird ebenfalls auf dem Server erstellt - die Anmeldung ist allerdings nach dem erforderlichen Neustart nicht möglich.

Lokale Sicherheitsrichtlinie
Domänenmitglied: Daten des sicheren Kanals digital verschlüsseln oder signieren (immer)


Habe ich deaktiviert.

Habe ebenfalls mit NEWSID eine neue SID generiert – kein Erfolg.

Habe das Image auch schon mit „sysrep“ von Microsoft bearbeitet – und somit eine Kurzinstallation beim ersten Imagestart durchgeführt- kein Erfolg!




Fehlermeldung /var/log/messages

Nov 16 16:40:04 server smbd[7314]: [2006/11/16 16:40:04, 0] rpc_server/srv_netlog_nt.c:_net_auth_2(409)

Nov 16 16:40:04 server smbd[7314]: _net_auth2: failed to get machine password for account INFO2$




Meine smb.conf


Samba config file created using SWAT

# from 192.168.2.10 (192.168.2.10)

# Date: 2006/11/09 09:08:13

[global]

workgroup = INFO.SCHULE

server string = Samba

map to guest = Bad User

printcap name = cups

add machine script = /usr/sbin/useradd -c Machine -d /var/lib/nobody -s /bin/false %m$

logon path = \\%L\profiles\.msprofile

logon drive = U:

logon home = \\%L\%U\.9xprofile

logon script = logon.bat

domain logons = Yes

os level = 65

preferred master = Yes

domain master = Yes

cups options = raw

include = /etc/samba/dhcp.conf

encryptPasswords=yes


[profiles]
comment = Network Profiles Service

path = %H

read only = No

create mask = 0600

directory mask = 0700

store dos attributes = Yes


[users]

omment = All users

path = /home

read only = No

inherit acls = Yes

veto files = /aquota.user/groups/shares/


[groups]

comment = All groups

path = /home/groups

read only = No

inherit acls = Yes


[printers]

comment = All Printers

path = /var/tmp

create mask = 0600

printable = Yes

browseable = No


[print$]

comment = Printer Drivers

path = /var/lib/samba/drivers

write list = @ntadmin,
root

force group = ntadmin

create mask = 0664

directory mask = 0775







Wie kann ich das Problem beheben?

Danke für Eure Hilfe!

Malte

ja, der Rechner von dem ich das Image gezogen habe, hat keine Probleme!

Wenn ich Windows neuinstalliere, gibt es auch keine Probleme!


wie funktioniert (mit dieser smb.conf) die authorisierung????

CIh weiss leider die Antwort auf diese Frage nicht - wie kann ich es rausfinden?
Bin noch eher ein Newbie!


Nachtrag zur smb.conf :
folgende Zeilen fehlen:

[netlogon]
comment = Network Logon Service
path = /var/lib/samba/drivers
write list = root

Samba Version 3.0.22-11

Ich kann mich mit der Urimage-Maschine ohne Probleme anmelden.

im Log-Level 3 kommt folge Meldung:


2006/11/19 21:46:36, 3] smbd/process.c:timeout_processing(1340)
timeout_processing: End of file from client (client has disconnected).
[2006/11/19 21:46:36, 3] smbd/sec_ctx.c:set_sec_ctx(28
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/11/19 21:46:36, 2] smbd/server.c:exit_server(614)
Closing connections
[2006/11/19 21:46:36, 3] smbd/connection.c:yield_connection(69)
Yielding connection to
[2006/11/19 21:46:36, 3] smbd/server.c:exit_server(655)
Server exit (normal exit)
[2006/11/19 21:48:03, 3] smbd/process.c:check_reload(1321)
Printcap cache time expired.
[2006/11/19 21:48:03, 3] printing/pcap.c:pcap_cache_reload(117)
reloading printcap cache
[2006/11/19 21:48:03, 3] printing/pcap.c:pcap_cache_reload(223)
reload status: ok
[2006/11/19 21:48:03, 3] smbd/oplock.c:init_oplocks(871)
open_oplock_ipc: initializing messages.
[2006/11/19 21:48:03, 3] smbd/oplock_linux.c:linux_init_kernel_oplocks(259)
Linux kernel oplocks enabled
[2006/11/19 21:48:03, 3] smbd/process.c:process_smb(1087)
Transaction 0 of length 137
[2006/11/19 21:48:03, 3] smbd/process.c:switch_message(886)
switch message SMBnegprot (pid 15429) conn 0x0
[2006/11/19 21:48:03, 3] smbd/sec_ctx.c:set_sec_ctx(28
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/11/19 21:48:03, 3] smbd/negprot.c:reply_negprot(486)
Requested protocol [PC NETWORK PROGRAM 1.0]
[2006/11/19 21:48:03, 3] smbd/negprot.c:reply_negprot(486)
Requested protocol [LANMAN1.0]
[2006/11/19 21:48:03, 3] smbd/negprot.c:reply_negprot(486)
Requested protocol [Windows for Workgroups 3.1a]
[2006/11/19 21:48:03, 3] smbd/negprot.c:reply_negprot(486)
Requested protocol [LM1.2X002]
[2006/11/19 21:48:03, 3] smbd/negprot.c:reply_negprot(486)
Requested protocol [LANMAN2.1]
[2006/11/19 21:48:03, 3] smbd/negprot.c:reply_negprot(486)
Requested protocol [NT LM 0.12]
[2006/11/19 21:48:03, 3] smbd/negprot.c:reply_nt1(357)
using SPNEGO
[2006/11/19 21:48:03, 3] smbd/negprot.c:reply_negprot(579)
Selected protocol NT LM 0.12
[2006/11/19 21:48:03, 3] smbd/process.c:process_smb(1087)
Transaction 1 of length 240
[2006/11/19 21:48:03, 3] smbd/process.c:switch_message(886)
switch message SMBsesssetupX (pid 15429) conn 0x0
[2006/11/19 21:48:03, 3] smbd/sec_ctx.c:set_sec_ctx(28
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/11/19 21:48:03, 3] smbd/sesssetup.c:reply_sesssetup_and_822)
wct=12 flg2=0xc807
[2006/11/19 21:48:03, 2] smbd/sesssetup.c:setup_new_vc_session(772)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old
resources.
[2006/11/19 21:48:03, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633)
Doing spnego session setup
[2006/11/19 21:48:03, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664)
NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] Pr
imaryDomain=[]
[2006/11/19 21:48:03, 3] smbd/sesssetup.c:reply_spnego_negotiate(525)
Got OID 1 3 6 1 4 1 311 2 2 10
[2006/11/19 21:48:03, 3] smbd/sesssetup.c:reply_spnego_negotiate(52
Got secblob of size 40
[2006/11/19 21:48:03, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63)
Got NTLMSSP neg_flags=0xe2088297
[2006/11/19 21:48:03, 3] smbd/process.c:process_smb(1087)
Transaction 2 of length 272
[2006/11/19 21:48:03, 3] smbd/process.c:switch_message(886)
switch message SMBsesssetupX (pid 15429) conn 0x0
[2006/11/19 21:48:03, 3] smbd/sec_ctx.c:set_sec_ctx(28
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/11/19 21:48:03, 3] smbd/sesssetup.c:reply_sesssetup_and_822)
wct=12 flg2=0xc807
[2006/11/19 21:48:03, 2] smbd/sesssetup.c:setup_new_vc_session(772)
setup_new_vc_session: New VC == 0, if NT4.x compatible we would close all old
resources.
[2006/11/19 21:48:03, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(633)
Doing spnego session setup
[2006/11/19 21:48:03, 3] smbd/sesssetup.c:reply_sesssetup_and_X_spnego(664)
NativeOS=[Windows 2002 Service Pack 2 2600] NativeLanMan=[Windows 2002 5.1] Pr
imaryDomain=[]
[2006/11/19 21:48:03, 3] libsmb/ntlmssp.c:ntlmssp_server_auth(662)
Got user=[] domain=[] workstation=[INFO2] len1=1 len2=0
[2006/11/19 21:48:03, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(0, 0) : sec_ctx_stack_ndx = 1
[2006/11/19 21:48:03, 3] smbd/uid.c:push_conn_ctx(393)
push_conn_ctx(0) : conn_ctx_stack_ndx = 0
[2006/11/19 21:48:03, 3] smbd/sec_ctx.c:set_sec_ctx(28
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2006/11/19 21:48:03, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/11/19 21:48:03, 3] auth/auth.c:check_ntlm_password(219)
check_ntlm_password: Checking password for unmapped user []\[]@[INFO2] with t
he new password interface
[2006/11/19 21:48:03, 3] auth/auth.c:check_ntlm_password(222)
check_ntlm_password: mapped user is: [INFO.SCHULE]\[]@[INFO2]
[2006/11/19 21:48:03, 3] auth/auth.c:check_ntlm_password(26
check_ntlm_password: guest authentication for user [] succeeded
[2006/11/19 21:48:03, 3] libsmb/ntlmssp_sign.c:ntlmssp_sign_init(33
NTLMSSP Sign/Seal - Initialising with flags:
[2006/11/19 21:48:03, 3] libsmb/ntlmssp.c:debug_ntlmssp_flags(63)
Got NTLMSSP neg_flags=0x60088235
[2006/11/19 21:48:03, 3] smbd/password.c:register_vuid(257)
User name: nobody Real name: nobody
[2006/11/19 21:48:03, 3] smbd/password.c:register_vuid(276)
UNIX uid 65534 is UNIX user nobody, and will be vuid 101
[2006/11/19 21:48:03, 3] smbd/process.c:process_smb(1087)
Transaction 3 of length 82
[2006/11/19 21:48:03, 3] smbd/process.c:switch_message(886)
switch message SMBtconX (pid 15429) conn 0x0
[2006/11/19 21:48:03, 3] smbd/sec_ctx.c:set_sec_ctx(28
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/11/19 21:48:03, 3] smbd/service.c:make_connection_snum(495)
Connect path is '/var/tmp' for service [IPC$]
[2006/11/19 21:48:03, 3] lib/util_seaccess.c:se_access_check(250)
[2006/11/19 21:48:03, 3] lib/util_seaccess.c:se_access_check(251)
se_access_check: user sid is S-1-5-21-2306806964-1847313077-362043171-501
se_access_check: also S-1-5-21-2306806964-1847313077-362043171-514
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-32-546
se_access_check: also S-1-5-21-2306806964-1847313077-362043171-132067
se_access_check: also S-1-5-21-2306806964-1847313077-362043171-132069
[2006/11/19 21:48:03, 3] smbd/vfs.c:vfs_init_default(216)
Initialising default vfs hooks
[2006/11/19 21:48:03, 3] lib/util_seaccess.c:se_access_check(250)
[2006/11/19 21:48:03, 3] lib/util_seaccess.c:se_access_check(251)
se_access_check: user sid is S-1-5-21-2306806964-1847313077-362043171-501
se_access_check: also S-1-5-21-2306806964-1847313077-362043171-514
se_access_check: also S-1-1-0
se_access_check: also S-1-5-2
se_access_check: also S-1-5-32-546
se_access_check: also S-1-5-21-2306806964-1847313077-362043171-132067
se_access_check: also S-1-5-21-2306806964-1847313077-362043171-132069
[2006/11/19 21:48:03, 3] smbd/sec_ctx.c:set_sec_ctx(28
setting sec ctx (65534, 65533) - sec_ctx_stack_ndx = 0
[2006/11/19 21:48:03, 3] smbd/service.c:make_connection_snum(700)
info2 (192.168.2.102) connect to service IPC$ initially as user nobody (uid=65
534, gid=65533) (pid 15429)
[2006/11/19 21:48:03, 3] smbd/sec_ctx.c:set_sec_ctx(28
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/11/19 21:48:03, 3] smbd/reply.c:reply_tcon_and_70
tconX service=IPC$
[2006/11/19 21:48:03, 3] smbd/process.c:process_smb(1087)
Transaction 4 of length 108
[2006/11/19 21:48:03, 3] smbd/process.c:switch_message(886)
switch message SMBntcreateX (pid 15429) conn 0x555555a32790
[2006/11/19 21:48:03, 3] smbd/sec_ctx.c:set_sec_ctx(28
setting sec ctx (65534, 65533) - sec_ctx_stack_ndx = 0
[2006/11/19 21:48:03, 3] smbd/nttrans.c:nt_open_pipe(351)
nt_open_pipe: Known pipe NETLOGON opening.
[2006/11/19 21:48:03, 3] smbd/process.c:process_smb(1087)
Transaction 5 of length 140
[2006/11/19 21:48:03, 3] smbd/process.c:switch_message(886)
switch message SMBwriteX (pid 15429) conn 0x555555a32790
[2006/11/19 21:48:03, 3] rpc_server/srv_pipe.c:api_pipe_bind_req(1506)
api_pipe_bind_req: \PIPE\NETLOGON \PIPE\lsass
[2006/11/19 21:48:03, 3] rpc_server/srv_pipe.c:check_bind_req(959)
check_bind_req for \PIPE\NETLOGON
[2006/11/19 21:48:03, 3] smbd/pipes.c:reply_pipe_write_and_207)
writeX-IPC pnum=7746 nwritten=72
[2006/11/19 21:48:03, 3] smbd/process.c:process_smb(1087)
Transaction 6 of length 63
[2006/11/19 21:48:03, 3] smbd/process.c:switch_message(886)
switch message SMBreadX (pid 15429) conn 0x555555a32790
[2006/11/19 21:48:03, 3] smbd/pipes.c:reply_pipe_read_and_252)
readX-IPC pnum=7746 min=1024 max=1024 nread=68
[2006/11/19 21:48:03, 3] smbd/process.c:process_smb(1087)
Transaction 7 of length 160
[2006/11/19 21:48:03, 3] smbd/process.c:switch_message(886)
switch message SMBwriteX (pid 15429) conn 0x555555a32790
[2006/11/19 21:48:03, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526)
free_pipe_context: destroying talloc pool of size 81
[2006/11/19 21:48:03, 3] rpc_server/srv_pipe.c:api_rpcTNP(2237)
api_rpcTNP: rpc command: NET_REQCHAL
[2006/11/19 21:48:03, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526)
free_pipe_context: destroying talloc pool of size 30
[2006/11/19 21:48:03, 3] smbd/pipes.c:reply_pipe_write_and_207)
writeX-IPC pnum=7746 nwritten=92
[2006/11/19 21:48:03, 3] smbd/process.c:process_smb(1087)
Transaction 8 of length 63
[2006/11/19 21:48:03, 3] smbd/process.c:switch_message(886)
switch message SMBreadX (pid 15429) conn 0x555555a32790
[2006/11/19 21:48:03, 3] smbd/pipes.c:reply_pipe_read_and_252)
readX-IPC pnum=7746 min=1024 max=1024 nread=36
[2006/11/19 21:48:03, 3] smbd/process.c:process_smb(1087)
Transaction 9 of length 192
[2006/11/19 21:48:03, 3] smbd/process.c:switch_message(886)
switch message SMBwriteX (pid 15429) conn 0x555555a32790
[2006/11/19 21:48:03, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526)
free_pipe_context: destroying talloc pool of size 0
[2006/11/19 21:48:03, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526)
free_pipe_context: destroying talloc pool of size 0
[2006/11/19 21:48:03, 3] smbd/pipes.c:reply_pipe_write_and_207)
writeX-IPC pnum=7746 nwritten=124
[2006/11/19 21:48:03, 3] smbd/process.c:process_smb(1087)
Transaction 10 of length 63
[2006/11/19 21:48:03, 3] smbd/process.c:switch_message(886)
switch message SMBreadX (pid 15429) conn 0x555555a32790
[2006/11/19 21:48:03, 3] smbd/pipes.c:reply_pipe_read_and_252)
readX-IPC pnum=7746 min=1024 max=1024 nread=32
[2006/11/19 21:48:03, 3] smbd/process.c:process_smb(1087)
Transaction 11 of length 192
[2006/11/19 21:48:03, 3] smbd/process.c:switch_message(886)
switch message SMBwriteX (pid 15429) conn 0x555555a32790
[2006/11/19 21:48:03, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526)
free_pipe_context: destroying talloc pool of size 0
[2006/11/19 21:48:03, 3] rpc_server/srv_pipe.c:api_rpcTNP(2237)
api_rpcTNP: rpc command: NET_AUTH2
[2006/11/19 21:48:03, 3] smbd/sec_ctx.c:push_sec_ctx(256)
push_sec_ctx(65534, 65533) : sec_ctx_stack_ndx = 1
[2006/11/19 21:48:03, 3] smbd/uid.c:push_conn_ctx(393)
push_conn_ctx(101) : conn_ctx_stack_ndx = 0
[2006/11/19 21:48:03, 3] smbd/sec_ctx.c:set_sec_ctx(28
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 1
[2006/11/19 21:48:03, 3] smbd/sec_ctx.c:pop_sec_ctx(386)
pop_sec_ctx (65534, 65533) - sec_ctx_stack_ndx = 0
[2006/11/19 21:48:03, 0] rpc_server/srv_netlog_nt.c:get_md4pw(241)
get_md4pw: Workstation INFO2$: no account in domain
[2006/11/19 21:48:03, 0] rpc_server/srv_netlog_nt.c:_net_auth_2(409)
_net_auth2: failed to get machine password for account INFO2$
[2006/11/19 21:48:03, 3] rpc_server/srv_pipe_hnd.c:free_pipe_context(526)
free_pipe_context: destroying talloc pool of size 44
[2006/11/19 21:48:03, 3] smbd/pipes.c:reply_pipe_write_and_207)
writeX-IPC pnum=7746 nwritten=124
[2006/11/19 21:48:03, 3] smbd/process.c:process_smb(1087)
Transaction 12 of length 63
[2006/11/19 21:48:03, 3] smbd/process.c:switch_message(886)
switch message SMBreadX (pid 15429) conn 0x555555a32790
[2006/11/19 21:48:03, 3] smbd/pipes.c:reply_pipe_read_and_252)
readX-IPC pnum=7746 min=1024 max=1024 nread=40
[2006/11/19 21:48:03, 3] smbd/process.c:process_smb(1087)
Transaction 13 of length 45
[2006/11/19 21:48:03, 3] smbd/process.c:switch_message(886)
switch message SMBclose (pid 15429) conn 0x555555a32790
[2006/11/19 21:48:14, 3] smbd/process.c:process_smb(1087)
Transaction 14 of length 43
[2006/11/19 21:48:14, 3] smbd/process.c:switch_message(886)
switch message SMBulogoffX (pid 15429) conn 0x0
[2006/11/19 21:48:14, 3] smbd/sec_ctx.c:set_sec_ctx(28
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/11/19 21:48:14, 3] smbd/reply.c:reply_ulogoff1606)
ulogoffX vuid=101
[2006/11/19 21:48:14, 3] smbd/process.c:process_smb(1087)
Transaction 15 of length 39
[2006/11/19 21:48:14, 3] smbd/process.c:switch_message(886)
switch message SMBtdis (pid 15429) conn 0x555555a32790
[2006/11/19 21:48:14, 3] smbd/sec_ctx.c:set_sec_ctx(28
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/11/19 21:48:14, 3] smbd/sec_ctx.c:set_sec_ctx(28
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/11/19 21:48:14, 3] smbd/service.c:close_cnum(892)
info2 (192.168.2.102) closed connection to service IPC$
[2006/11/19 21:48:14, 3] smbd/connection.c:yield_connection(69)
Yielding connection to IPC$
[2006/11/19 21:48:14, 3] smbd/sec_ctx.c:set_sec_ctx(28
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/11/19 21:48:14, 3] smbd/process.c:timeout_processing(1340)
timeout_processing: End of file from client (client has disconnected).
[2006/11/19 21:48:14, 3] smbd/sec_ctx.c:set_sec_ctx(28
setting sec ctx (0, 0) - sec_ctx_stack_ndx = 0
[2006/11/19 21:48:14, 2] smbd/server.c:exit_server(614)
Closing connections
[2006/11/19 21:48:14, 3] smbd/connection.c:yield_connection(69)
Yielding connection to
[2006/11/19 21:48:14, 3] smbd/server.c:exit_server(655)
Server exit (normal exit)

Habe nun rausgefunden, dass das Problem nur besteht , wenn mein NIS-Server läuft!
Was muss ich in die smb.conf eintragen um dieses Problem zu umgehen?
Da muss doch sicherlich ein Eintrag hin, der Samba sagt ,das es mit NIS zusammenarbeiten soll!

Danke für Eure schnellen Antworten...