[Samba] ADS integration and local users...

samba at bercot.org samba at bercot.org
Thu Mar 4 07:13:25 MST 2010


On Thu, 4 Mar 2010 12:05:51 +0000, Damien Dye
<damien.j.dye at googlemail.com>
wrote:
> to connect as a local user prefix the username machinename\username
> as am assuming that it is trying to check your user from the domain.

Yes, it's ok !!!

Thank you.

David.

> Damien Dye BSC(hon)
> 
> On 4 March 2010 10:22, <samba at bercot.org> wrote:
>>
>> Hello,
>>
>> I have a Debian server with Samba. I've put this server in AD.
Everything
>> is ok for domain users, but I can't connect with a local user !!!
>> I've created this local user :
>> # adduser local_user
>> # smbpasswd -a local_user
>> Then :
>> # smbclient \\\\192.0.0.1\\ressource -U local_user
>> Enter local_user's password:
>> Domain=[MY_DOMAIN] OS=[Unix] Server=[Samba 3.2.5]
>> tree connect failed: NT_STATUS_ACCESS_DENIED
>> Here is my [global] section :
>> [global]
>>        workgroup = MY_DOMAIN
>>        realm = MY_DOMAIN.FR
>>        netbios name = my_server
>>        server string = Serveur Debian %h
>>        log file = /var/log/samba/log.%m
>>        log level = 3
>>        max log size = 1000
>>        syslog = 0
>>        display charset = UTF8
>>        panic action = /usr/share/samba/panic-action %d
>>        security = ADS
>>        map to guest = bad user
>>        encrypt passwords = true
>>        obey pam restrictions = yes
>>        socket options = TCP_NODELAY
>>        idmap uid = 10000-20000
>>        idmap gid = 10000-20000
>>        template shell = /bin/bash
>>        template homedir = /data/%D/%U
>>        passdb backend = tdbsam
>>        unix password sync = yes
>>        passwd program = /usr/bin/passwd %u
>>        passwd chat = *Enter\snew\s*\spassword:* %n\n
>> *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
>>        pam password change = yes
>>        smb passwd file = /etc/smbpasswd
>>
>> Do you have any idea ?
>>
>> Thank you very much.
>>
>> David.


More information about the samba mailing list