Samba als DC für XP Clients

[global]
	netbios name = ralf-basche
	workgroup = ralf-basche
	security = user      
        encrypt passwords = yes  
	password level = 4
	domain logons = yes

        os level = 64
	domain master = yes
	local master = yes
	preferred master = yes

	locking = no
	case sensitive = no
	default case = lower
	preserve case = yes
	short preserve case = no

[netlogon]
	path = /samba/netlogon
	writeable = no
	public = no

Der folgende Fehler ist beim Abfragen von DNS über den Ressourceneintrag der Dienstidentifizierung (SRV) aufgetreten, der zur Suche eines Domänencontrollers für die Domäne "ralf-basche.local" verwendet wird:

Fehler: "Der DNS-Name ist nicht vorhanden."
(Fehlercode 0x0000232B RCODE_NAME_ERROR)

Die Abfrage war für den SRV-Eintrag für _ldap._tcp.dc._msdcs.ralf-basche.local

Die häufigsten Ursachen dieses Fehlers sind:

- Der DNS-SRV-Eintrag wurde nicht in DNS registriert.

- Mindestens eine der folgenden Zonen enthalten keine Delegierung zu dieser untergeordneten Zone:

ralf-basche.local
local
. (die Stammzone)

Klicken Sie auf "Hilfe", um weitere Informationen über die Fehlerbehebung zu erhalten.

nslookup ralf
Server:         192.168.160.1
Address:        192.168.160.1#53

Name:   ralf.ralf-basche.local
Address: 192.168.160.10

Die Abfrage war für den SRV-Eintrag für _ldap._tcp.dc._msdcs.ralf-basche.local

security = user

security = domain

  1 [global]
  2         netbios name = RALF-BASCHE
  3         workgroup = RALF-BASCHE
  4         server string = server.ralf-basche.local
  5         domain master = Yes
  6         domain logons = Yes
  7         security = domain
  8
  9         interfaces = eth0
 10         hosts allow = 192.168.160.
 11         locking = No
 12
 13         os level = 64
 14         update encrypted = Yes
 15         short preserve case = No
 16         password level = 4
 17         wins support = Yes
 18         case sensitive = no
 19
 20         add user script = /usr/sbin/useradd -m %u
 21         add machine script = /usr/sbin/useradd -s /bin/false -d /dev/null %u
 22         delete user script = /usr/sbin/userdel -r %u
 23         add group script = /usr/sbin/groupadd %g
 24         delete group script = /usr/sbin/groupdel %g
 25         add user to group script = /usr/sbin/usermod -G %g %u
 26
 27         username map = /etc/samba/user.map
 28
 29         logon path = \\%L\profiles
 30         logon script = logon.cmd
 31
 32 [netlogon]
 33         path = /samba/netlogon
 34         browseable = no
 35
 36 [profiles]
 37         path = /samba/profile/%U
 38         read only = no
 39         store dos attributes = Yes
 40         create mask = 0600
 41         directory mask = 0700
 42         browseable = no
 43         guest ok = no
 44         printable = no
 45         hide files = /desktop.ini/outlook*.lnk/*Briefcase*/

# Samba config file created using SWAT
# from Deine IP Intern (Deine IP Intern)
# Date: 2007/08/11 20:57:30

[global]
	workgroup = Deine Domain
	server string = PDC auf Name deines Rechners
	update encrypted = Yes
	map to guest = Bad User
	passwd program = /usr/bin/passwd %u
	passwd chat = *password* %n\n *password* %n\n *sussessfull*
	password level = 4
	unix password sync = Yes
	name resolve order = lshosts
	time server = Yes
	keepalive = 600
	printcap name = cups
	add machine script = /usr/sbin/useradd  -c Machine -d /var/lib/nobody -s /bin/false %m$
	logon script = %U.bat
	logon path = \\%L\profiles\%U
	logon home = \\%L\profiles\%U
	domain logons = Yes
	os level = 255
	preferred master = Yes
	domain master = Yes
	wins proxy = Yes
	wins support = Yes
	ldap ssl = no
	hosts allow = 192.168.2.0/24
	cups options = raw
	dos filetime resolution = Yes

[netlogon]
	comment = Network Logon Service
	path = /home/netlogon
	write list = ntadmin

[profiles]
	comment = User Profiles
	path = /var/lib/samba/profiles/
	read only = No
	create mask = 0777
	directory mask = 0777
	browseable = No
	root preexec = PROFILE=/var/lib/samba/profiles/%U; if [ ! -e $PROFILE ]; then mkdir -pm700 $PROFILE; chown %U:%G $PROFILE; fi

[users]
	comment = All users
	path = /home
	read only = No
	inherit acls = Yes
	veto files = /aquota.user/groups/shares/

[groups]
	comment = All groups
	path = /home/groups
	read only = No
	inherit acls = Yes

[printers]
	comment = All Printers
	path = /var/tmp
	create mask = 0600
	printable = Yes
	browseable = No

[print$]
	comment = Printer Drivers
	path = /var/lib/samba/drivers
	write list = @ntadmin, root
	force group = ntadmin
	create mask = 0664
	directory mask = 0775

[homes]
	valid users = %S
	read only = No
	browseable = No

passwd: files winbind
group:  files winbind
hosts:  files dns winbind

Error looking up domain users

BUILTIN+administrators
BUILTIN+users

[2008/05/27 11:41:53, 0] printing/pcap.c:pcap_cache_reload(159)
  Unable to open printcap file /etc/printcap for read!
[2008/05/27 11:41:53, 0] printing/pcap.c:pcap_cache_reload(159)
  Unable to open printcap file /etc/printcap for read!

Server's Role (logon server) NOT ADVISED with domain-level security
Domain=[RALF-BASCHE] OS=[Unix] Server=[Samba 3.0.24]

        Sharename       Type      Comment
        ---------       ----      -------
        IPC$            IPC       IPC Service (server.ralf-basche.local)
        php             Disk
        documents       Disk
        install         Disk
Domain=[RALF-BASCHE] OS=[Unix] Server=[Samba 3.0.24]

        Server               Comment
        ---------            -------
        RALF
        RALF-BASCHE          server.ralf-basche.local

        Workgroup            Master
        ---------            -------
        RALF-BASCHE          RALF-BASCHE

BUILTIN+administrators
BUILTIN+users
domain users

Error looking up domain users