FDS as Domain Controller Howto - replace Windows 2003 - Part 1

[barry905]

I've not tried to setup group policies, and as far as I know they are not supported in 389-server. What group policies are you trying to implement? Perhaps there is another way to achieve the same objective.

[mcuserton]

I realize this is old, but I was asking myself the same question.

Originally Posted by theodric

I realise this is probably a very noobish question, but I'm stuck here:

Now for the groups. First create a file sambaGroups which contains:

Domain Admins:x:2512:
Domain Users:x:2513:
Domain Guests:x:2514:
Domain Computers:x:2515:

Then convert it to an ldif file and add it to FDS

Q: Exactly how to I convert that to an ldif file?

A: Use the migrate_group.pl script, as indicated in the Samba/389dirsrv Howto: http://directory.fedoraproject.org/wiki/Howto:Samba

[kallolrahman]

I have tried using your document. But the problem is after joining (windows work station) it says "the system could not log you on because the domain is not available".
samba as PDC works fine. But samba and fedora-ds does not work.

[barry905]

Which version of Samba and Windows are you using? I have encountered this problem with Windows 7, and there is a well publicized registry tweak to fix it.

[kallolrahman]

I am using fedora core9 (samba-3.2.0-1.pre3.9.fc9.i386) as PDC and windowsXP SP3 (last updated on january 2011) clients.

here is my windows client log

No Domain Controller is available for domain TESTD.TEST due to the following:
There are currently no logon servers available to service the logon request. .
Make sure that the computer is connected to the network and try again. If the problem persists, please contact your domain administrator.

Automatic certificate enrollment for local system failed to contact the active directory (0x8007054b). The specified domain either does not exist or could not be contacted.
Enrollment will not be performed.

without fedora-ds samba as a PDC works fine

[barry905]

Can you please post your smb.conf from both before and after you installed 389-server (fedora-ds)?

Thanks