summaryrefslogtreecommitdiff
path: root/docs/htmldocs/samba-pdc-faq.html
diff options
context:
space:
mode:
authorDavid O'Neill <dmo@samba.org>2001-01-05 17:50:50 +0000
committerDavid O'Neill <dmo@samba.org>2001-01-05 17:50:50 +0000
commitfbe0299e54df9173859182fad0071c7a3217b403 (patch)
treee161a13114818b852d02797a3913395851beb19d /docs/htmldocs/samba-pdc-faq.html
parentb6e811b90bf8cc6ca440ffedd210e5b16df555b2 (diff)
downloadsamba-fbe0299e54df9173859182fad0071c7a3217b403.tar.gz
samba-fbe0299e54df9173859182fad0071c7a3217b403.tar.bz2
samba-fbe0299e54df9173859182fad0071c7a3217b403.zip
Merge of documentation updates to HEAD. These got missed somewhere along
the way. (This used to be commit afad150bacfd02ec83c57ea9ba9152ff59fb7eee)
Diffstat (limited to 'docs/htmldocs/samba-pdc-faq.html')
-rw-r--r--docs/htmldocs/samba-pdc-faq.html242
1 files changed, 137 insertions, 105 deletions
diff --git a/docs/htmldocs/samba-pdc-faq.html b/docs/htmldocs/samba-pdc-faq.html
index 08301f8a40..ec8efaff4b 100644
--- a/docs/htmldocs/samba-pdc-faq.html
+++ b/docs/htmldocs/samba-pdc-faq.html
@@ -104,57 +104,57 @@ HREF="#AEN27"
></DT
><DT
><A
-HREF="#AEN44"
+HREF="#AEN50"
>Introduction</A
></DT
></DL
></DD
><DT
>2. <A
-HREF="#AEN49"
+HREF="#AEN55"
>General Information</A
></DT
><DD
><DL
><DT
><A
-HREF="#AEN51"
+HREF="#AEN57"
>What can we do ?</A
></DT
><DD
><DL
><DT
><A
-HREF="#AEN53"
+HREF="#AEN59"
>What can Samba Primary Domain Controller (PDC) do ?</A
></DT
><DT
><A
-HREF="#AEN86"
+HREF="#AEN92"
>Can I have a Windows 2000 client logon to a Samba controlled domain?</A
></DT
><DT
><A
-HREF="#AEN89"
+HREF="#AEN95"
>What's the status of print spool (spoolss) support in the NTDOM code?</A
></DT
></DL
></DD
><DT
><A
-HREF="#AEN92"
+HREF="#AEN98"
>CVS</A
></DT
><DD
><DL
><DT
><A
-HREF="#AEN95"
+HREF="#AEN101"
>What are the different Samba branches available in CVS ?</A
></DT
><DT
><A
-HREF="#AEN118"
+HREF="#AEN124"
>What are the CVS commands ?</A
></DT
></DL
@@ -163,58 +163,58 @@ HREF="#AEN118"
></DD
><DT
>3. <A
-HREF="#AEN149"
+HREF="#AEN155"
>Establishing Connections</A
></DT
><DD
><DL
><DT
><A
-HREF="#AEN151"
+HREF="#AEN157"
></A
></DT
><DD
><DL
><DT
><A
-HREF="#AEN153"
+HREF="#AEN159"
>How do I get my NT4 or W2000 Workstation to login to the Samba controlled Domain?</A
></DT
><DT
><A
-HREF="#AEN158"
+HREF="#AEN164"
>What is a 'machine account' ?</A
></DT
><DT
><A
-HREF="#AEN165"
+HREF="#AEN171"
>"The machine account for this computer either does not exist or is not accessable."</A
></DT
><DT
><A
-HREF="#AEN171"
+HREF="#AEN177"
>How do I create machine accounts manually ?</A
></DT
><DT
><A
-HREF="#AEN184"
+HREF="#AEN190"
>I cannot include a '$' in a machine name.</A
></DT
><DT
><A
-HREF="#AEN190"
+HREF="#AEN196"
>I get told "You already have a connection to the Domain...." when creating a
machine account.</A
></DT
><DT
><A
-HREF="#AEN194"
+HREF="#AEN200"
>I get told "Cannot join domain, the credentials supplied conflict
with an existing set.."</A
></DT
><DT
><A
-HREF="#AEN198"
+HREF="#AEN204"
>"The system can not log you on (C000019B)...."</A
></DT
></DL
@@ -223,93 +223,93 @@ HREF="#AEN198"
></DD
><DT
>4. <A
-HREF="#AEN202"
+HREF="#AEN208"
>User Account Management</A
></DT
><DD
><DL
><DT
><A
-HREF="#AEN204"
+HREF="#AEN210"
>Domain Admins</A
></DT
><DD
><DL
><DT
><A
-HREF="#AEN206"
+HREF="#AEN212"
>How do I configure an account as a domain administrator?</A
></DT
></DL
></DD
><DT
><A
-HREF="#AEN210"
+HREF="#AEN216"
>Profiles</A
></DT
><DD
><DL
><DT
><A
-HREF="#AEN212"
+HREF="#AEN218"
>Why is it bad to set "logon path = \\%N\%U\profile" in smb.conf? ?</A
></DT
><DT
><A
-HREF="#AEN226"
+HREF="#AEN232"
>Why are all the users listed in the "domain admin users" using the same profile?</A
></DT
><DT
><A
-HREF="#AEN229"
+HREF="#AEN235"
>The roaming profiles do not seem to be updating on the server.</A
></DT
></DL
></DD
><DT
><A
-HREF="#AEN237"
+HREF="#AEN243"
>Policies</A
></DT
><DD
><DL
><DT
><A
-HREF="#AEN239"
+HREF="#AEN245"
>What are 'Policies' ?.</A
></DT
><DT
><A
-HREF="#AEN246"
+HREF="#AEN252"
>I can't get system policies to work.</A
></DT
><DT
><A
-HREF="#AEN260"
+HREF="#AEN266"
>What about Windows NT Policy Editor ?</A
></DT
><DT
><A
-HREF="#AEN274"
+HREF="#AEN280"
>Can Win95 do Policies ?</A
></DT
></DL
></DD
><DT
><A
-HREF="#AEN280"
+HREF="#AEN286"
>Passwords</A
></DT
><DD
><DL
><DT
><A
-HREF="#AEN282"
+HREF="#AEN288"
>What is password sync and should I use it ?</A
></DT
><DT
><A
-HREF="#AEN295"
+HREF="#AEN301"
>How do I get remote password (unix and SMB) changing working ?</A
></DT
></DL
@@ -318,41 +318,41 @@ HREF="#AEN295"
></DD
><DT
>5. <A
-HREF="#AEN301"
+HREF="#AEN307"
>Miscellaneous</A
></DT
><DD
><DL
><DT
><A
-HREF="#AEN303"
+HREF="#AEN309"
></A
></DT
><DD
><DL
><DT
><A
-HREF="#AEN305"
+HREF="#AEN311"
>What editor can I use in DOS/Windows that won't mess with my unix EOF</A
></DT
><DT
><A
-HREF="#AEN318"
+HREF="#AEN324"
>How do I get 'User Manager' and 'Server Manager'</A
></DT
><DT
><A
-HREF="#AEN333"
+HREF="#AEN339"
>The time setting from a Samba server does not work.</A
></DT
><DT
><A
-HREF="#AEN337"
+HREF="#AEN343"
>"trust account xxx should be in DOMAIN_GROUP_RID_USERS"</A
></DT
><DT
><A
-HREF="#AEN341"
+HREF="#AEN347"
>How do I get my samba server to become a member ( not PDC ) of an NT domain?</A
></DT
></DL
@@ -361,51 +361,51 @@ HREF="#AEN341"
></DD
><DT
>6. <A
-HREF="#AEN376"
+HREF="#AEN382"
>Troubleshooting and Bug Reporting</A
></DT
><DD
><DL
><DT
><A
-HREF="#AEN378"
+HREF="#AEN384"
>Diagnostic tools</A
></DT
><DD
><DL
><DT
><A
-HREF="#AEN380"
+HREF="#AEN386"
>What are some diagnostics tools I can use to debug the domain logon process and where can I
find them?</A
></DT
><DT
><A
-HREF="#AEN394"
+HREF="#AEN400"
>How do I install 'Network Monitor' on an NT Workstation or a Windows 9x box?</A
></DT
></DL
></DD
><DT
><A
-HREF="#AEN423"
+HREF="#AEN429"
>What other help can I get ?</A
></DT
><DD
><DL
><DT
><A
-HREF="#AEN426"
+HREF="#AEN432"
>URLs and similar</A
></DT
><DT
><A
-HREF="#AEN472"
+HREF="#AEN481"
>How do I get help from the mailing lists ?</A
></DT
><DT
><A
-HREF="#AEN501"
+HREF="#AEN510"
>How do I get off the mailing lists ?</A
></DT
></DL
@@ -434,12 +434,35 @@ NAME="AEN27"
CLASS="EMPHASIS"
>It should be noted that 2.2.0 in its pre-release form still has a few problems,
I'll try and keep this section current while things are still dynamic.
- At the time of this update (November 13, 2000) the current state of play is :</I
+ At the time of this update (December 15, 2000) the current state of play is :</I
></P
><P
>Comments here about W2K joining the domain apply only to Samba 2.2 from the CVS after November 27th. The
'snapshot' release Samba2.2alpha1 does not work !!! See below on how to get a CVS tree.</P
><P
+><B
+CLASS="COMMAND"
+>Known Bug !</B
+>W2K machines will not successfully join a domain with a name that
+ is made up from an even number of characters. Yep, thats right ! BIOTEST is OK as is MYDOMAI
+ but MYDOMAIN will not work until this bug is fixed. Hmm.., we believe
+ that this bug is fixed, but see below.</P
+><P
+><B
+CLASS="COMMAND"
+>Known Bug !</B
+>After some bugs were fixed just before
+ Christmas, W2K SP1 machines cannot join the domain. Expected to be
+ fixed early in the new year. Whats that ? yeah, samba developers
+ have a Christmas break too !</P
+><P
+><B
+CLASS="COMMAND"
+>Know Bug !</B
+>NTs (and possibly W2K ?) are not told the logged on user is a domain
+ admin if the parameter "domain admin users = user" is used. The alternative, "domain admin group"
+ does work. See the HowTo.</P
+><P
>Client Side creation of Machine accounts does work but is not complete.
Firstly, the <TT
CLASS="FILENAME"
@@ -495,7 +518,7 @@ CLASS="SECT1"
><HR><H1
CLASS="SECT1"
><A
-NAME="AEN44"
+NAME="AEN50"
>Introduction</A
></H1
><P
@@ -516,7 +539,7 @@ NAME="AEN44"
CLASS="CHAPTER"
><HR><H1
><A
-NAME="AEN49"
+NAME="AEN55"
>Chapter 2. General Information</A
></H1
><DIV
@@ -524,7 +547,7 @@ CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN51"
+NAME="AEN57"
>What can we do ?</A
></H1
><DIV
@@ -532,7 +555,7 @@ CLASS="SECT2"
><H2
CLASS="SECT2"
><A
-NAME="AEN53"
+NAME="AEN59"
>What can Samba Primary Domain Controller (PDC) do ?</A
></H2
><P
@@ -617,7 +640,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN86"
+NAME="AEN92"
>Can I have a Windows 2000 client logon to a Samba controlled domain?</A
></H2
><P
@@ -630,7 +653,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN89"
+NAME="AEN95"
>What's the status of print spool (spoolss) support in the NTDOM code?</A
></H2
><P
@@ -644,7 +667,7 @@ CLASS="SECT1"
><HR><H1
CLASS="SECT1"
><A
-NAME="AEN92"
+NAME="AEN98"
>CVS</A
></H1
><P
@@ -656,7 +679,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN95"
+NAME="AEN101"
>What are the different Samba branches available in CVS ?</A
></H2
><P
@@ -729,7 +752,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN118"
+NAME="AEN124"
>What are the CVS commands ?</A
></H2
><P
@@ -816,7 +839,7 @@ CLASS="COMMAND"
CLASS="CHAPTER"
><HR><H1
><A
-NAME="AEN149"
+NAME="AEN155"
>Chapter 3. Establishing Connections</A
></H1
><DIV
@@ -824,7 +847,7 @@ CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN151"
+NAME="AEN157"
></A
></H1
><DIV
@@ -832,7 +855,7 @@ CLASS="SECT2"
><H2
CLASS="SECT2"
><A
-NAME="AEN153"
+NAME="AEN159"
>How do I get my NT4 or W2000 Workstation to login to the Samba controlled Domain?</A
></H2
><P
@@ -853,7 +876,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN158"
+NAME="AEN164"
>What is a 'machine account' ?</A
></H2
><P
@@ -867,7 +890,7 @@ CLASS="FILENAME"
>/usr/local/samba/private/smbpasswd</TT
>. Under
some circumstances these entries are made <A
-HREF="#AEN171"
+HREF="#AEN177"
>manually</A
>, the
<A
@@ -881,7 +904,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN165"
+NAME="AEN171"
>"The machine account for this computer either does not exist or is not accessable."</A
></H2
><P
@@ -910,7 +933,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN171"
+NAME="AEN177"
>How do I create machine accounts manually ?</A
></H2
><P
@@ -955,7 +978,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN184"
+NAME="AEN190"
>I cannot include a '$' in a machine name.</A
></H2
><P
@@ -979,7 +1002,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN190"
+NAME="AEN196"
>I get told "You already have a connection to the Domain...." when creating a
machine account.</A
></H2
@@ -999,13 +1022,13 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN194"
+NAME="AEN200"
>I get told "Cannot join domain, the credentials supplied conflict
with an existing set.."</A
></H2
><P
>This is the same basic problem as mentioned above, <A
-HREF="#AEN190"
+HREF="#AEN196"
> "You already have a connection..."</A
></P
></DIV
@@ -1014,7 +1037,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN198"
+NAME="AEN204"
>"The system can not log you on (C000019B)...."</A
></H2
><P
@@ -1034,7 +1057,7 @@ NAME="AEN198"
CLASS="CHAPTER"
><HR><H1
><A
-NAME="AEN202"
+NAME="AEN208"
>Chapter 4. User Account Management</A
></H1
><DIV
@@ -1042,7 +1065,7 @@ CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN204"
+NAME="AEN210"
>Domain Admins</A
></H1
><DIV
@@ -1050,7 +1073,7 @@ CLASS="SECT2"
><H2
CLASS="SECT2"
><A
-NAME="AEN206"
+NAME="AEN212"
>How do I configure an account as a domain administrator?</A
></H2
><P
@@ -1066,7 +1089,7 @@ CLASS="SECT1"
><HR><H1
CLASS="SECT1"
><A
-NAME="AEN210"
+NAME="AEN216"
>Profiles</A
></H1
><DIV
@@ -1074,7 +1097,7 @@ CLASS="SECT2"
><H2
CLASS="SECT2"
><A
-NAME="AEN212"
+NAME="AEN218"
>Why is it bad to set "logon path = \\%N\%U\profile" in smb.conf? ?</A
></H2
><P
@@ -1121,7 +1144,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN226"
+NAME="AEN232"
>Why are all the users listed in the "domain admin users" using the same profile?</A
></H2
><P
@@ -1132,7 +1155,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN229"
+NAME="AEN235"
>The roaming profiles do not seem to be updating on the server.</A
></H2
><P
@@ -1144,7 +1167,7 @@ CLASS="COMMAND"
>net time \\server /set /yes</B
> replacing server with the
name of your PDC (or another synchronized SMB server). See <A
-HREF="#AEN333"
+HREF="#AEN339"
> about Setting Time</A
></P
><P
@@ -1162,7 +1185,7 @@ CLASS="SECT1"
><HR><H1
CLASS="SECT1"
><A
-NAME="AEN237"
+NAME="AEN243"
>Policies</A
></H1
><DIV
@@ -1170,7 +1193,7 @@ CLASS="SECT2"
><H2
CLASS="SECT2"
><A
-NAME="AEN239"
+NAME="AEN245"
>What are 'Policies' ?.</A
></H2
><P
@@ -1188,7 +1211,7 @@ CLASS="COMMAND"
>[netlogon]</B
>share. The file is created with a policy editor
and must be readable by anyone and writeable by only root. See <A
-HREF="#AEN260"
+HREF="#AEN266"
> below</A
> for how to get a suitable editor.</P
></DIV
@@ -1197,7 +1220,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN246"
+NAME="AEN252"
>I can't get system policies to work.</A
></H2
><P
@@ -1219,7 +1242,7 @@ CLASS="COMMAND"
> share and must be
readable by everyone and writeable by only root. The file must be created
by an NTServer <A
-HREF="#AEN260"
+HREF="#AEN266"
>Policy Editor</A
>.</P
><P
@@ -1256,7 +1279,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN260"
+NAME="AEN266"
>What about Windows NT Policy Editor ?</A
></H2
><P
@@ -1318,7 +1341,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN274"
+NAME="AEN280"
>Can Win95 do Policies ?</A
></H2
><P
@@ -1343,7 +1366,7 @@ CLASS="SECT1"
><HR><H1
CLASS="SECT1"
><A
-NAME="AEN280"
+NAME="AEN286"
>Passwords</A
></H1
><DIV
@@ -1351,7 +1374,7 @@ CLASS="SECT2"
><H2
CLASS="SECT2"
><A
-NAME="AEN282"
+NAME="AEN288"
>What is password sync and should I use it ?</A
></H2
><P
@@ -1400,7 +1423,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN295"
+NAME="AEN301"
>How do I get remote password (unix and SMB) changing working ?</A
></H2
><P
@@ -1430,7 +1453,7 @@ CLASS="PROGRAMLISTING"
CLASS="CHAPTER"
><HR><H1
><A
-NAME="AEN301"
+NAME="AEN307"
>Chapter 5. Miscellaneous</A
></H1
><DIV
@@ -1438,7 +1461,7 @@ CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN303"
+NAME="AEN309"
></A
></H1
><DIV
@@ -1446,7 +1469,7 @@ CLASS="SECT2"
><H2
CLASS="SECT2"
><A
-NAME="AEN305"
+NAME="AEN311"
>What editor can I use in DOS/Windows that won't mess with my unix EOF</A
></H2
><P
@@ -1486,7 +1509,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN318"
+NAME="AEN324"
>How do I get 'User Manager' and 'Server Manager'</A
></H2
><P
@@ -1534,7 +1557,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN333"
+NAME="AEN339"
>The time setting from a Samba server does not work.</A
></H2
><P
@@ -1551,7 +1574,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN337"
+NAME="AEN343"
>"trust account xxx should be in DOMAIN_GROUP_RID_USERS"</A
></H2
><P
@@ -1566,7 +1589,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN341"
+NAME="AEN347"
>How do I get my samba server to become a member ( not PDC ) of an NT domain?</A
></H2
><P
@@ -1607,7 +1630,7 @@ CLASS="EMPHASIS"
>sleepy$</I
>. It would have to be
created <A
-HREF="#AEN171"
+HREF="#AEN177"
>manually</A
>. </P
><P
@@ -1707,7 +1730,7 @@ CLASS="PROGRAMLISTING"
CLASS="CHAPTER"
><HR><H1
><A
-NAME="AEN376"
+NAME="AEN382"
>Chapter 6. Troubleshooting and Bug Reporting</A
></H1
><DIV
@@ -1715,7 +1738,7 @@ CLASS="SECT1"
><H1
CLASS="SECT1"
><A
-NAME="AEN378"
+NAME="AEN384"
>Diagnostic tools</A
></H1
><DIV
@@ -1723,7 +1746,7 @@ CLASS="SECT2"
><H2
CLASS="SECT2"
><A
-NAME="AEN380"
+NAME="AEN386"
>What are some diagnostics tools I can use to debug the domain logon process and where can I
find them?</A
></H2
@@ -1788,7 +1811,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN394"
+NAME="AEN400"
>How do I install 'Network Monitor' on an NT Workstation or a Windows 9x box?</A
></H2
><P
@@ -1873,7 +1896,7 @@ CLASS="SECT1"
><HR><H1
CLASS="SECT1"
><A
-NAME="AEN423"
+NAME="AEN429"
>What other help can I get ?</A
></H1
><P
@@ -1885,7 +1908,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN426"
+NAME="AEN432"
>URLs and similar</A
></H2
><P
@@ -1936,6 +1959,15 @@ TARGET="_top"
></LI
><LI
><P
+>See how Scott Merrill simulates a BDC behaviour at
+ <A
+HREF="http://www.skippy.net/linux/smb-howto.html"
+TARGET="_top"
+> http://www.skippy.net/linux/smb-howto.html</A
+>. </P
+></LI
+><LI
+><P
>Although 2.0.7 has almost had its day as a PDC, I (drb) will
keep the 2.0.7 PDC pages at <A
HREF="http://bioserve.latrobe.edu.au/samba"
@@ -2019,7 +2051,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN472"
+NAME="AEN481"
>How do I get help from the mailing lists ?</A
></H2
><P
@@ -2122,7 +2154,7 @@ CLASS="SECT2"
><HR><H2
CLASS="SECT2"
><A
-NAME="AEN501"
+NAME="AEN510"
>How do I get off the mailing lists ?</A
></H2
><P