[Samba] How to use AD authentication for normal Samba file sharing

[Mark Foley]

I have a Linux host used for file sharing. Although I have a Samba4 AD/DC configured in the
LAN, this file-sharing host is not currently a domain member. Right now, the smb.conf set up on
this server does not require any ID or passwords from Windows client workstations. The current
smb.conf is shown below, only one of the shares is listed.

I would like to have this file-sharing host authenticate using Active Directory
authentication. That is, when the Windows user maps the shared drive, I would like it to
authenticate with the domain credentials and not require the user to enter ID/PW on the Map
Network Drive dialog.

Is this possible?

If so, I know how to make the Linux file-sharing host a domain member. What would I have to do
to get Samba to authenticate the user's domain credentials?

My smb.conf:

[global]
netbios name = OHPRSSTORAGE
   workgroup = WORKGROUP
   server string = HPRS NAS server

domain master = no
prefered master = no

   security = user
   map to guest = Bad User

   hosts allow = 192.168.0. 127.

load printers = no
printcap name = /dev/null
printing = bsd
disable spoolss = yes

guest account = nevermind

   log file = /var/log/samba.%m
   max log size = 50

   socket options = TCP_NODELAY SO_RCVBUF=8192 SO_SNDBUF=8192

   dns proxy = no 

[public]
path = /mnt/RAID/public

hide dot files = yes
map hidden = yes
hide files = /Outlook/outlook/~*/

veto oplock files = /OfficeCalendar.pst/
locking = yes
public = yes
guest ok = yes
guest only = yes
writeable = yes
browseable= yes
printable = no
create mask = 0660
force create mode = 0660
directory mask = 0771