Windows Login Question

Question

Hi! I know i'm missing something simple. On some 10.4 servers that I'm running (10.4.0, 10.4.5, 10.4.6) when a Windows user tries to connect, they don't get the login window. The servers are all OD masters, not PDC, no AD anywhere, standalone server as far as windows in concerened. No firwall issue (everything behind the firewall)
The users can see the sharepoints, but can't connect, we can't even get the log in winodw under windows. Mac users can connect just fine uning SMB.
What the heck am I missing??
thanks

Answer 1

The minimum number of elements needed to allow users with Windows to connect to a 10.4 server are:
1 server
1 Windows client
In your post, you stated you had more than one server and more than one OD master, no Active Directory and no Primary Domain Controller.
Additionally, your post implies you are wanting your Windows clients to log into a Domain and possibly have automounting directories. I will cover only the basics. After you get this working, move to the next step and ask a more defined question, such as How do I set up home directories for Windows clients? Group folders?
If you are wanting to log into a domain, please read the following Apple document:
http://docs.info.apple.com/article.html?path=ServerAdmin/10.4/en/c2wn3.html
This will help with setting up your PDC.
Using OD requires a knowledge of directory services planning. While it is OK to run more than one OD master, you should have a clear understanding of which clients and servers are covered by each OD umbrella.
For your problem, and to give you an answer that may help, I will give a scenario of one OD server and one additional server that is covered by that OD master with one Windows client. All of which are on the same subnet.
The basic steps that you'll need to follow are:
- Set up Open Directory as a master on one server with connectivity to clients and sharepoints
- Set up users within OD.
- Set up a second 10.4 server as an OD replica - REMEMBER 10.4 to 10.4 with OD. OD will not replicate backward or forwards, i.e. 10.3 to 10.4 = no, no. This server will also serve your share points.
- Set up share points on the second server that is bound to your OD master.
- Test with Windows client.
When you try to connect to a share point on a Mac OS X server, your users are authenticating against a directory service. That directory service can be the local repository on the server or the OD database. It is wise to use the later with Workgroup Manager, otherwise you'll be creating a mess of user accounts all on different servers through the Accounts preference pane and is not the recommended method - even if you're talking about only 5 users. This WILL cause problems with file sharing (UID's, etc)...as well as allow each of those defined users to directly log in to the server if they have access to it.
On the server holding your share points, you will need to turn on the Windows service.
With Workgroup Manager, connect to the server that holds the share points to be shared.
- Click on Sharing
- Select the folder that you want to share. If you do not see it available (the problem may be here), click on All and locate the directory, if needed.
- On the General tab, click "Share this item and its contents".
- On the Access tab, select the owner and group - I will not go into PHD's or the like, but there's much to read about this. This is where OD comes into play and be sure you are selecting users from the OD service that is housing the Windows user. Above the user list, you should see Directory: /LDAPv3/127.0.0.1. Authenticate to the directory as the Directory Admin.
- On the Protocols tab there is a drop down list that allows specific modification to the directory's access. The Windows File Settings are the point of interest. Be sure the folder is being shared via SMB and provide a name that is within your share point model.
At this point, you should be able to touch the folder with the Windows client via IP or the name that you created on that server.
Now, here are Apple's instructions:
Setting Up a Share Point for Windows Access
Using Workgroup Manager, you can allow Windows clients to access an existing share point via the standard Windows file sharing protocol, Sever Message Block/Common Internet File System (SMB/CIFS). You can optionally allow or disallow Mac OS client access via Apple Filing Protocol (AFP), UNIX client access via Network File System (NFS), and mixed client access via File Transfer Protocol (FTP). Workgroup Manager enables sharing via SMB/CIFS, AFP, and FTP by default for every newly created share point.
Open Workgroup Manager and click Sharing.
Click Share Points and select the share point that you want to configure.
Click Protocols (on the right) and choose Windows File Settings from the pop-up menu.
To provide SMB/CIFS access to the share point, select "Share this item using SMB."
To allow unregistered users access to the share point, select "Allow SMB guest access."
For greater security, don't select this item.
To change the name that clients see when they browse for and connect to the share point using SMB/CIFS, type a new name in the "Custom SMB name" field.
Changing the custom SMB/CIFS name doesn't affect the name of the share point itself, only the name that SMB/CIFS clients see.
Select "Enable strict locking" to have clients use standard file locks with a share point that's also accessed by protocols other than SMB/CIFS.
Do not select "Enable oplocks" for a share point that's using any protocol other than SMB/CIFS. For more information on oplocks, see File Locking With SMB/CIFS Share Points.
Choose a method for assigning default UNIX access permissions for new files and folders in the share point.
To have new items adopt the permissions of the enclosing item, select "Inherit permissions from parent."
To assign specific permissions, select "Assign as follows" and use the Owner, Group, and Everyone pop-up menus.
To prevent AFP access to the share point, choose Apple File Settings from the pop-up menu and deselect "Share this item using AFP."
To prevent FTP access to the share point, choose FTP Settings from the pop-up menu and deselect "Share this item using FTP."
To prevent NFS access to the share point, choose NFS Export Settings from the pop-up menu and deselect "Export this item and its contents to."
Click Save.
Windows services must be running to provide SMB/CIFS access to share points. For instructions, see Starting Windows Services.
For additional information, see Managing SMB/CIFS Share Points and the share points section of File Services Overview.
I hope this helps.