[CentOS] error when join my Centos machine to win2003 ADS server

[Kanwar Ranbir Sandhu]

On Thu, 2009-03-26 at 22:22 +0300, fabian dacunha wrote:
> # Generated by authconfig on 2009/03/26 12:50:28
> # DO NOT EDIT THIS SECTION (delimited by --start-line--/--end-line--)
> # Any modification may be deleted or altered by authconfig in future
> 
>    workgroup = BALADIA.LOCAL
> ;   password server = kmun.baladia.local
>    password server = 172.16.2.227
>    realm = KMUN.BALADIA.LOCAL
>    security = ads
>    idmap uid = 16777216-33554431
>    idmap gid = 16777216-33554431
>    winbind separator = +
>    template shell = /bin/bash
>    winbind use default domain = true
>    winbind offline logon = false
>    encrypt passwords = yes
>   log level = 3
> #--authconfig--end-line--
>         encrypt passwords = yes
>        dns proxy = no
>        server string = Samba Server Version %v
>        os level = 20
>       client use spnego = no
>         server signing = auto
> 
> --------------------------------------
> 
> where i could be goin wrong
> i would be thankful and really apprecite your advice for any setting in my
> smb.conf file

1. It's usually better to set "password server" to "*".
2. Your realm is wrong; it should be just the domain, baladia.local.
3. Add "netbios name = [your server's hostname]"
4. Add "wins server = [your wins server(s)]"
5. "client use spnego" should likely be "yes"
6. Add "client ntlmv2 auth = yes".
7. Add "smb ports = 445"
8. Add "local master = no"
9. Add "domain master =no"
10. Add "preferred master = no"

I don't know if that's going to solve your problems.  "no logon servers"
indicates either a deeper problem (e.g. network issue), or simply that
you've specified the wrong server to use for checking passwords against.

BTW, I still don't know why you have two "kdc" entries in your krb5.conf
file. You only need one.

Regards,

Ranbir


-- 
Kanwar Ranbir Sandhu
Linux 2.6.27.19-170.2.35.fc10.x86_64 x86_64 GNU/Linux 
23:09:16 up 4 days, 2:19, 2 users, load average: 0.17, 0.26, 0.21